aqua-lyros.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:e1:a3:db:19:d1:f0:e0:5d:b7:16:3e:78:36:fd:ed:f4:00 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=aqua-lyros.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:e1:a3:db:19:d1:f0:e0:5d:b7:16:3e:78:36:fd:ed:f4:00
Serial Number (int): 425230478084270574981360016984022167974912
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: f2:9f:c8:95:75:56:59:0f:b1:20:68:6b:87:b6:d6:33:ee:c1:bc:24
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): fa:ed:b2:d7:e2:1d:11:74:09:00:3f:0a:33:7d:af:7b:ed:e1:74:91
Fingerprint (sha256): 68:d0:da:af:5a:3a:86:d9:16:d3:bf:ea:a2:6e:d6:52:c4:98:f1:97:60:7e:6b:3e:62:f3:01:74:fc:2a:2f:89

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate aqua-lyros.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aqua-lyros.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aqua-lyros.org

Other certificates including the domain name aqua-lyros.org

(limited to 100 certificates)
*.lutz-heesen.de
www.aqua-lyros.org
*.aqua-lyros.org
*.antennepassau.de
aqua-lyros.org
regionalklasse-kfz-versicherung.pkwversicherung24.eu
www.aqua-lyros.org
www.msx23.lima-city.de
aqua-lyros.org
vonmirbach.lima-city.de
terra-details.4lc.eu
die-borgstedts.de
testshop-01.lima-city.de
www.jansblog.lima-city.de
medicalnewstohdokhistmx01.hampoelz.net
www.aqua-lyros.org
hartaberehrlich.ml
aqua-lyros.org
sammelnimkreis.lima.zone
www.aqua-lyros.org
*.linda-bau.de
www.adsense.2ix.de
www.aqua-lyros.org
www.aqua-lyros.org
www.patrickfreiheit.de
www.aqua-lyros.org
www.aqua-lyros.org

Certificate

The complete raw certificate details for aqua-lyros.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFVTCCBD2gAwIBAgISBOGj2xnR8OBdtxY+eDb97fQAMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA3MjEwOTIwNDhaFw0x
OTEwMTkwOTIwNDhaMBkxFzAVBgNVBAMTDmFxdWEtbHlyb3Mub3JnMIIBIjANBgkq
hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwm8pEAO/h/9/jwsAGWH+hqdSgewGUDv
go3YF8GZqbQQ2XXTVmHDm7kB4RznzbyK5k2TYkgpYCQcIQ7UxB31G+fe3okgRTPZ
RRsjOEd4MITi4HmFX7JCmAVQdaHuEzoV/hisOfqg7mY7Li6kq16DPjwEyxIfM7nR
vnNL0ReNh2KiyFqTYLFKE6xUGnom+lNNEzXzjoYHlE16u7yIOT5pm1OV06ZE6JN0
XzqwHhsyctDzSGX9Fj3VLa/UcIgIG4XALajx6nrelDg76kF2Dwvw//+sbeWyRocV
b1EFDJUvpQn4VNbMH4IvAdXQ6xQ6w9S/pje367h/sU7AChcyBymvHwIDAQABo4IC
ZDCCAmAwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEF
BQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBTyn8iVdVZZD7EgaGuHttYz7sG8
JDAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBvBggrBgEFBQcBAQRj
MGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5sZXRzZW5jcnlwdC5v
cmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRzZW5jcnlwdC5v
cmcvMBkGA1UdEQQSMBCCDmFxdWEtbHlyb3Mub3JnMEwGA1UdIARFMEMwCAYGZ4EM
AQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0
c2VuY3J5cHQub3JnMIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDxAHcA4mlLribo6UAJ
6IYbtjuD1D7n/nSI+6SPKJMBnd3x2/4AAAFsFAxVfgAABAMASDBGAiEA77/PjjCz
2/K+6eJ55lJLkMJG7ea/7Lh9vJSZjOpB0/YCIQDfgbPJyVFeoeNcyhVlW0I7S5QR
pxBG7F4Ip9AEwyJ2+QB2AGPy283oO8wszwtyhCdXazOkjWF3j711pjixx2hUS9iN
AAABbBQMVYoAAAQDAEcwRQIhAJbw/mwd6yqMdKrIJXqUoOIOyw4LGOTJxI8HYvlW
StcXAiBbOhATAJFs1VHUHUKx2jcFDksZApuEbMlPq/1zONv+9jANBgkqhkiG9w0B
AQsFAAOCAQEAMNUOtJLQF0pUjZRLH0AvlFfLi0l2LqQFnymCUVhppUk955S8+EYw
oqt8bLyqvJEcl8jqOX1Ag7sNfCq/bgjkL4CN2uTdoD8uhCnCNFol2tLPnY5cydfj
nmWR8+++RR+DcDiDEMmFlm+DXo4gMjAqvv2soUpKMmQYvG+vIQxu3MQX2aRS2qX7
ShvLZ2j0It03ij5u+XbdLLEGCdh8MOTIrWfhswp+fBpUeBLv3nIuqZcnRQlhDVta
wpp+Hs/JLW+zPMowDIM9nE3ucARyvsXBk+cV9aKlNB682VdyrslyYR82H+kv6yF/
+rGzmxgr81DSRHKAd6/BXoIOtJspj7i/kg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwm8pEAO/h/9/jwsAGWH
+hqdSgewGUDvgo3YF8GZqbQQ2XXTVmHDm7kB4RznzbyK5k2TYkgpYCQcIQ7UxB31
G+fe3okgRTPZRRsjOEd4MITi4HmFX7JCmAVQdaHuEzoV/hisOfqg7mY7Li6kq16D
PjwEyxIfM7nRvnNL0ReNh2KiyFqTYLFKE6xUGnom+lNNEzXzjoYHlE16u7yIOT5p
m1OV06ZE6JN0XzqwHhsyctDzSGX9Fj3VLa/UcIgIG4XALajx6nrelDg76kF2Dwvw
//+sbeWyRocVb1EFDJUvpQn4VNbMH4IvAdXQ6xQ6w9S/pje367h/sU7AChcyBymv
HwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 425230478084270574981360016984022167974912
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-21 09:20:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-19 09:20:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aqua-lyros.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24621270903482474164456113475035678873118043811652262739282262019440883361244085410486921962843038160515305217111191872606397468739252488205282697870936569792419965766192971410206138555295397366903406255480769524705750709750112071101134133037285874840616176332339337339580117563635851269286448844483670044353466791479307529038468005068374299708629302416337663570253165610928372593746213073714353425500887890665402572351684111082387147442468567400635436442355293578397368363245557884056528914576820968439852943461170063727044427999606742743514794978769622947131661826809545337984476997792786889674183031522125758967583
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f29fc8957556590fb120686b87b6d633eec1bc24
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aqua-lyros.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016c140c557e0000040300483046022100efbfcf8e30b3dbf2bee9e279e6524b90c246ede6bfecb87dbc94998cea41d3f6022100df81b3c9c9515ea1e35cca15655b423b4b9411a71046ec5e08a7d004c32276f900760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016c140c558a000004030047304502210096f0fe6c1deb2a8c74aac8257a94a0e20ecb0e0b18e4c9c48f0762f9564ad71702205b3a101300916cd551d41d42b1da37050e4b19029b846cc94fabfd7338dbfef6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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