www.aqua-scape.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:5a:3c:b3:c1:29:25:e6:7e:39:06:24:cb:f3:fe:63:03:3f was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.aqua-scape.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:5a:3c:b3:c1:29:25:e6:7e:39:06:24:cb:f3:fe:63:03:3fSerial Number (int): 292042957836815112100324363311013611897663
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: d8:e3:b0:8d:49:ce:89:b0:32:98:45:f3:8f:23:d6:2b:19:b3:f3:b3
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 0c:34:55:f4:76:22:b6:a6:10:ce:40:0e:32:ae:ba:3c:a3:d0:94:79
Fingerprint (sha256): 69:a6:69:78:b9:20:2d:97:b3:a6:91:ef:f2:d1:00:f3:d8:de:fe:8e:ea:2e:de:8c:22:1a:b3:5a:38:5e:a7:f3
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.aqua-scape.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.aqua-scape.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.aqua-scape.com
Other certificates including the domain name aqua-scape.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for www.aqua-scape.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGWzCCBUOgAwIBAgISA1o8s8EpJeZ+OQYky/P+YwM/MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEyMjUwNjA3MTRaFw0y MDAzMjQwNjA3MTRaMB0xGzAZBgNVBAMTEnd3dy5hcXVhLXNjYXBlLmNvbTCCAiIw DQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAOE9psSn1XMehmfSzWx8+oIV133u F9SDelZisvNx206f1Egzrgo66tHnnmiliF/N+V2DjAWzDpnjKjo4d7HBJuxgZr3t nrssokdCFQk2SFzcJD7T4O151hH2d8xNp+EezHwlTROLxpqJJszZbGW4pSq6CwiQ RJmYyEFU+59X85X2okVC4W58G0NpNpTfqlRiimXfxMQcVRnFGVOEZkjfclI9dVuT KUmKv0LMqU5+XLy7C2SbLIL9A1oCSiWKivhKfvEdUNsVEU6O9vKSwTiC7KNHsBD5 7hCc7JGgA9FqHoTQdHkMSbGjj99yoj3/QT0aDJI+fa6ZlhwNLMu6EA4RBi7fV43K WhYoTDhULmLvEId6cVeSHs0NIoXzsqqC+QneZt1JyHJwozkGMp4n7bXDQT61OZnV NUR92qRhu1o+jh+6dErRUyjmfPLDONpgF5IHNDPyl9yuNkkRAmu7xxfBMLOjjOhX g1SnHShWfH6BYkNUqbpyBkFXh1thRd4dvD0CH4TMA/vB+gHZtSciWPonxPpFVvPP b7LlhkO9FejHk5kp0rV7MM1y/q0qEFmaq+8zxaHg9Aq11nFmPBdU+lSCPWo/j6TJ Q/Mr2/nNr6ryOC6kt+Jj2GBjGxEyEIa87OSSxQkSfSMsFyp5gmujCEO/zApw20GX KLnZc5MDYltQ8r0dAgMBAAGjggJmMIICYjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0l BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYE FNjjsI1JzomwMphF848j1isZs/OzMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZF Ze/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3Au aW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQu aW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wHQYDVR0RBBYwFIISd3d3LmFxdWEtc2Nh cGUuY29tMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYI KwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBAwYKKwYBBAHW eQIEAgSB9ASB8QDvAHUAsh4FzIuizYogTodm+Su5iiUgZ2va+nDnsklTLe+LkF4A AAFvO+GMfwAABAMARjBEAiApPZs3T+DGVgj6Jk79r1Re7g+ay8wMn9unL42jK2qG KQIgUemnFm4vw3x3NLNgUtQgO7Bta1p7BfFq5sCTWqMDwAsAdgBvU3asMfAxGdiZ AKRRFf93FRwR2QLBACkGjbIImjfZEwAAAW874Y1YAAAEAwBHMEUCIQDtXMwKRL5E L4r8KOTAjLCbkdgmmjEDASIq+J2EfvJeMQIgCIJYsAGQo5/NR9/p/XrwfE31CE1k IUuG7uEzsphbHTIwDQYJKoZIhvcNAQELBQADggEBAGQzn+cAIErauSTcO+/db5wa D0Ihbv/VM8Up/DaT0oWLat1KenYt3cyAr7BFi/mSg+azIkyW/s9Wqt17s3VjSWap rzk6axdQ74+/qLZpqA36vRSe8HaR/AZVP9WRudkJncD4PAbAnGckNC3UqX/AE5FS /D1A/c4Ho1JA1hE6OqabNETzoafqwloNO8+rYNupvvbX15CKnNfqrHU/FWmGeywm M6PFkw3KoWEZ9k4CJ3IQu05eIpMrS5hqYHq2gFyF+w9d0rXvAdNotP8k6PJlCRAZ oqlMatkMPjr36kv95Bc0x3RslxpNtD6MzI1BB99KbLjVN4opEuI8NbTGfs0w4iQ= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA4T2mxKfVcx6GZ9LNbHz6 ghXXfe4X1IN6VmKy83HbTp/USDOuCjrq0eeeaKWIX835XYOMBbMOmeMqOjh3scEm 7GBmve2euyyiR0IVCTZIXNwkPtPg7XnWEfZ3zE2n4R7MfCVNE4vGmokmzNlsZbil KroLCJBEmZjIQVT7n1fzlfaiRULhbnwbQ2k2lN+qVGKKZd/ExBxVGcUZU4RmSN9y Uj11W5MpSYq/QsypTn5cvLsLZJssgv0DWgJKJYqK+Ep+8R1Q2xURTo728pLBOILs o0ewEPnuEJzskaAD0WoehNB0eQxJsaOP33KiPf9BPRoMkj59rpmWHA0sy7oQDhEG Lt9XjcpaFihMOFQuYu8Qh3pxV5IezQ0ihfOyqoL5Cd5m3UnIcnCjOQYynifttcNB PrU5mdU1RH3apGG7Wj6OH7p0StFTKOZ88sM42mAXkgc0M/KX3K42SRECa7vHF8Ew s6OM6FeDVKcdKFZ8foFiQ1SpunIGQVeHW2FF3h28PQIfhMwD+8H6Adm1JyJY+ifE +kVW889vsuWGQ70V6MeTmSnStXswzXL+rSoQWZqr7zPFoeD0CrXWcWY8F1T6VII9 aj+PpMlD8yvb+c2vqvI4LqS34mPYYGMbETIQhrzs5JLFCRJ9IywXKnmCa6MIQ7/M CnDbQZcoudlzkwNiW1DyvR0CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 292042957836815112100324363311013611897663 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-25 06:07:14 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-24 06:07:14 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.aqua-scape.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 918902399383610424504021885023847435550234369995963657781856917148690652227967106617141482876502718908754648207381011338408955164575476770158023591008331386033890138610816189147809175877143817026646692261462751511667536977983915597109173510943728435673415447767087935958744396451410588258843930165368166931184710428601309745329667456024521143319464946189643719532786226617697879854815529251316087173260176734643918125470618750862955452524060072111261908989022695622691310972354865621860528579561176880519594545044501299036271104539796801862654452779621889044200343423191699108597136406945122666987485123811932831171462003321488200466254012231987794784478381290366164259252693321925442862005807206727970551631853792411011325726295628285623760302436039442523550411310925594559500618571622035092408054271850206921718235721682491458551586541936047917609597839597305360558860820760893100653086941863298920941038126238529645412092250362871101423345447114565858018096064907743496843386412501515711679185526046516886712986125647529052663308036932783058810915629900495227693601347730699933117445371463794099401844167427507724719461306624834549655295524816538889924991409652864274163649709544393567925047268879840226706355525630085267960544541 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) d8e3b08d49ce89b0329845f38f23d62b19b3f3b3 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aqua-scape.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f3be18c7f00000403004630440220293d9b374fe0c65608fa264efdaf545eee0f9acbcc0c9fdba72f8da32b6a8629022051e9a7166e2fc37c7734b36052d4203bb06d6b5a7b05f16ae6c0935aa303c00b0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016f3be18d580000040300473045022100ed5ccc0a44be442f8afc28e4c08cb09b91d8269a310301222af89d847ef25e310220088258b00190a39fcd47dfe9fd7af07c4df5084d64214b86eee133b2985b1d32 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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