aa-team.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:d8:a7:68:08:2e:37:65:08:f7:8d:f9:09:57:21:44:ee:59 was issued on by Let's Encrypt.

With 22 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=aa-team.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d8:a7:68:08:2e:37:65:08:f7:8d:f9:09:57:21:44:ee:59
Serial Number (int): 335060370290293732745071902508214311513689
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d2:cc:a7:39:28:ce:57:35:af:90:da:76:72:41:cc:df:7a:9c:0b:ae
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 40:0c:00:e3:27:4c:1f:fe:dd:6b:46:30:d3:fb:68:de:45:6d:e0:b9
Fingerprint (sha256): 6c:05:ee:ff:93:c4:f1:14:5d:d0:92:d0:ec:dc:18:04:b2:3d:c0:a6:7c:ca:f5:97:35:3c:ae:9f:f7:c6:a4:bd

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate aa-team.com

22

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aa-team.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aa-team.aa-team.com
aa-team.com
alexandraipate.aa-team.com
auto.aa-team.com
mail.aa-team.com
public.aa-team.com
super-azon.aa-team.com
supportv2.aa-team.com
tf.aa-team.com
woozone.aa-team.com
www.aa-team.aa-team.com
www.aa-team.com
www.abm.aa-team.com
www.alexandraipate.aa-team.com
www.auto.aa-team.com
www.cc.aa-team.com
www.dev.aa-team.com
www.public.aa-team.com
www.super-azon.aa-team.com
www.supportv2.aa-team.com
www.tf.aa-team.com
www.woozone.aa-team.com

Other certificates including the domain name aa-team.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for aa-team.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvslgT+31ks+Tu81EPZja
l/qGM6+L5sOoJoWcq/oZtt13CdHGnd5ENyRD5WxEiXFYpt0fkQ3/AJFfrOfrkDRE
C+GNW88QIuG5sSVxmN0bZ8uV9PoUuOtOijS3e++k/2Ahq8QEVVkt8zYUBBnzyxdG
Pw6L2Yw9fNHpvUULto/kZ5HcKg+43idCZNZpo0SxMkaEPnpN5WElrsvsPprhULt+
RoN7kUJfAs1ExLvKWX30UukuDmW+h15l9YT0jCBmv9wiqVy+QdUGlQEh/i839j9E
SOxmjE6gFJM1YPaixzCbH6CSpUvGmoSjO3Q7o/qVZlaPCBgwaX1L7oIngBnwQYDB
LwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 335060370290293732745071902508214311513689
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-26 22:17:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-24 22:17:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aa-team.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24084580258497575559860655657907450999219335597179424624728726964045644321305766271494689739933026499622984760410430611739022256567225851052899605905566727807531472707586500281517369583735361261773386636981243661765158983035997988521735868135964755663833010586594300379424449010211463493796181363577991928941690918647386148062619147451258819398147416095618242583569022494482518294383422028168380275178648135272358036562662178986665325969465966685691184394969352010719667565484814745790482246782300742609735217905851622470168280774278742541513995551056932232800793168355836425421794798967331730350159494492521660203311
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d2cca73928ce5735af90da767241ccdf7a9c0bae
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (488 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aa-team.aa-team.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aa-team.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alexandraipate.aa-team.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auto.aa-team.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.aa-team.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'public.aa-team.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'super-azon.aa-team.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supportv2.aa-team.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tf.aa-team.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'woozone.aa-team.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aa-team.aa-team.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aa-team.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.abm.aa-team.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alexandraipate.aa-team.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.auto.aa-team.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cc.aa-team.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dev.aa-team.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.public.aa-team.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.super-azon.aa-team.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.supportv2.aa-team.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tf.aa-team.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.woozone.aa-team.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf64000001643e63342c000004030046304402205abda4bccdd183b304f0b320303daf74046b94e7f71f6c0117e5c2ecd5eaf4aa022020e65c678a247c6afe6afd885af4b504753f556e80997ab262000fb22c8d9b50007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001643e63342d0000040300473045022100bcfe0587790da430c6a9ac6ae2c8ba091cafbc22c1678dbdd897bb88225649c802207c2dec16575cab0833d471c4428ea34b7bbc4cb19905727b01c8e556020c6923
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		008d1f5ec4b2a18bff79964cccabaa986cf5e39e6b51ed80fb8ad74ddb378feab6f6c70329c1aa5e90535852585dc7609d22093af78adcd63717b28816f520948460c5f8af4b5591ba775712a2abd9f943107940f061624351de16dc5020a7dfb903c4772623e49caf300bbf98ef4ede4789436f75d96ea1f0d6ceb206467f26da7c2268ed1cb81ca54f65fb193f78bb51930a78e22fce8df18afa5624b4e07f2b1f1659ff6385d60c58e55556c9c765461fc885523af12611626131164726769bc20e9454eb6453af9a513df3ee8f443358e956c7c83726a2358612a2064883c591a3d82072fe1f583b3cc41fe8013d9d7305ab142ca35991719e9bd287e26413