transaquatic.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:1a:3f:9f:16:cd:5b:d0:29:48:4d:2d:98:29:37:f6:dc:46 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=transaquatic.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:1a:3f:9f:16:cd:5b:d0:29:48:4d:2d:98:29:37:f6:dc:46
Serial Number (int): 270268766736643296110681227911556513586246
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c6:37:9e:fb:6d:bf:95:1b:8d:1c:7d:a6:2c:99:55:d5:30:ea:40:ea
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 37:4e:2c:ef:49:52:15:f5:15:b6:58:82:d5:f1:9c:50:c2:36:95:7b
Fingerprint (sha256): 61:45:1d:c3:d6:26:54:7e:14:12:01:c8:c0:94:30:a5:6e:8e:83:e0:80:14:41:c9:9e:1f:ac:39:bd:d7:06:38

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate transaquatic.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for transaquatic.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

transaquatic.com

Other certificates including the domain name transaquatic.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for transaquatic.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 270268766736643296110681227911556513586246
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-19 05:15:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-17 05:15:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'transaquatic.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 695966031448219252276439780480557840242418537334803070086209878153879576563827248242028960526631629616653920929554122865301220889390751382564883326181683143717847886434855616617380555824590093412397372585853958360682512779439632854691359710566461811683090284199564441457969811883636367429237451866915842834858956903465243410158819616161251842100958234251864414067858406912600502259182030275849573362187860601527047545618556057291457583492954689198733560555508236281362738940328589179660459447658887287499060744964996524000715010583543232020076367402154121852158357773334655202372267722381338979103894601658848356654662414656564180728460250468814900720489462149304652665141444414560940882390065491064324369856199033454251542298354122141241292167335485322354292306294303484072245727519678138596959694388396487020071686346346930433848465728709153731640600479381232411621754192633052817247665969918068235431451601539724919556316765067038796813339031812549577159607038880394817010487187573252049629478847077421485531702257985801046681523539776230926681441130100428860477443536119571696533367366561593347992915871667114233069201476331852198699136879884764855356624409794759757743443733771508748735711264332412545157820967300201048865791809
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c6379efb6dbf951b8d1c7da62c9955d530ea40ea
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'transaquatic.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc56000001668af6a03600000403004630440220760328e79baafaf7ed659f3641ad34a8636e74f9340c07cb6d9e81ca01af8a0002207b9d633f37e8d8033dd8f9b6de7940453589cd826e87d7848f9cdf745e5d9965007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001668af6a03200000403004730450221008aea0e9abca7a7132e327fbaefbe74a0e9b3edf1fe34c85a643966a3d7d1a89702201af06e307dc8755ae9c18032855436be2efb0c17ba45a9cbc8d2955bb3258435
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0011afe90babf4f4f2a05d888be05089259f67cee3ed566991e6d311ae9219336a24a0ea735b16fbb8557333019a8943a5b0d4202bff95aa0c827217dda87a5824987c9682cd4363f6d79b3a44316118c7f2495cf92ca297df71f78f31928589f5d02b0d9b81704b310630028e175897a8a486fd781d7f3288e06a193244a0d0c5e9fbab452cd4e6e506a8739e50ed7ea16a18dff503a2146146be50869b0423dfdd8264b07b4496d1f55714c288e0981d01afb6157de9af3ef2f1f4ca324fe0417fb68d9d3e1ae794a0a1f9726326e848faa1d2274ee9b3ae2a00b95d2308c4b788bcb42507480f4bf7a8e586c560ae5d2fe2294d16f57e29387dcf5b7c9e5155