aa-team.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:81:59:5b:bf:5d:6e:59:75:cc:65:78:5c:40:2b:4e:2e:44 was issued on by Let's Encrypt.

With 23 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=aa-team.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:81:59:5b:bf:5d:6e:59:75:cc:65:78:5c:40:2b:4e:2e:44
Serial Number (int): 305352060800063390821710911981718801886788
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 1f:26:8d:7e:15:11:0f:68:e3:39:b4:2a:e0:3e:18:be:4c:b4:ba:df
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 03:8e:50:27:34:de:5b:87:3e:e7:cb:63:3e:04:1e:76:78:35:ce:82
Fingerprint (sha256): 66:14:6d:c8:df:f0:0b:42:6b:92:21:7c:f7:03:ea:b1:91:c2:f8:70:e6:5b:04:68:01:27:2d:b9:5e:1f:f9:37

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate aa-team.com

23

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aa-team.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aa-team.aa-team.com
aa-team.com
alexandraipate.aa-team.com
auto.aa-team.com
mail.aa-team.com
pensiuneagentiana.aa-team.com
public.aa-team.com
super-azon.aa-team.com
supportv2.aa-team.com
tf.aa-team.com
woozone.aa-team.com
www.aa-team.aa-team.com
www.aa-team.com
www.alexandraipate.aa-team.com
www.auto.aa-team.com
www.cc.aa-team.com
www.dev.aa-team.com
www.pensiuneagentiana.aa-team.com
www.public.aa-team.com
www.super-azon.aa-team.com
www.supportv2.aa-team.com
www.tf.aa-team.com
www.woozone.aa-team.com

Other certificates including the domain name aa-team.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for aa-team.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTUs97+PP+2kxYVWHIPc
QwLgF5CrRvOQ639pYjQXiDVv6Ja/iaSiYyH0D+tnx24kANENyj91oau5uFonj2JD
9JSGFwhS5Gb68oS+PYY7MG2A3c6lNs+XMYwoGAMnUqPJix7/jMFRdWVJT7c2L7Mv
yGxJ/QxqvWS3KJoM6GsD7coc35lToASikzVwVy1n8mKzv83H6YXDcjJ2dRzk5vEU
fNea1N5H/IbKcZbH0aTKJCJQ6bKCTLCIsO5cuw0XH2h8GA75nqKhI9t7sGLmbBl3
xy/ediBzVLDBOCebOI82un9Egd7Gu16wPVOW+QGFZ+in7e83yZzIY747uNXsPkHt
LQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 305352060800063390821710911981718801886788
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-25 23:17:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-26 23:17:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aa-team.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21360495432214773162787273002219316793153019158454419803334296139853791602605335463030245012083267583115278341216687390296007764503164791218152238301839732427686195761858057392464976895824561009699271761543321213705954849294319225338422961596388129760680401917678756733490558460844571790967285652012327146110556801675740788083891966815295351840697572811239113764494987963268948288183919679286983881647165956592869286177355333284243718805987570786556244327825846879399194726324199256841278448495531083997178948768777646125309857658226294699006397628242835706360733282507011204863086416523239304404949895275078865775917
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1f268d7e15110f68e339b42ae03e18be4cb4badf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (533 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aa-team.aa-team.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aa-team.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alexandraipate.aa-team.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auto.aa-team.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.aa-team.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pensiuneagentiana.aa-team.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'public.aa-team.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'super-azon.aa-team.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supportv2.aa-team.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tf.aa-team.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'woozone.aa-team.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aa-team.aa-team.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aa-team.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alexandraipate.aa-team.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.auto.aa-team.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cc.aa-team.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dev.aa-team.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pensiuneagentiana.aa-team.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.public.aa-team.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.super-azon.aa-team.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.supportv2.aa-team.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tf.aa-team.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.woozone.aa-team.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000169272a2f960000040300473045022031e324580d6adb8d74c3001c933cd28c3bf2762c9d832d68d284aa989886276c0221009a048634f8b14301e14010cffd00a11002cbcb5290205c454cba59d5b879cf4400770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000169272a2f960000040300483046022100a5f8059d25c74e802aa441eb2e359a5eb85de55bfb1ba7a1b64cd6254a08a45b022100b23b155da1a1294074467d6af8acc15673da6cd941756f167d31ce010e7f47b5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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