aegis.energy

Issued by R3

About this certificate

This digital certificate with serial number 04:e8:f9:61:d6:5b:95:7f:1c:f6:e0:3c:ac:c4:b2:d3:39:fb was issued on by Let's Encrypt.

With 30 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=aegis.energy

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:e8:f9:61:d6:5b:95:7f:1c:f6:e0:3c:ac:c4:b2:d3:39:fb
Serial Number (int): 427726138624136116947709837811330596420091
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: cd:ff:96:e5:53:92:00:ac:2a:ac:99:28:87:b2:07:95:b2:dd:eb:58
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 6f:fa:8a:c6:28:17:f4:5f:cb:b2:a6:5c:0e:59:15:ff:68:ec:98:8c
Fingerprint (sha256): 70:47:4c:5b:dc:8e:17:4f:cb:e6:aa:f4:76:bc:b1:f6:8d:47:69:e9:40:9e:6b:31:7d:5f:f7:a1:c2:b4:cd:01

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate aegis.energy

30

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aegis.energy

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aegis.energy
allah.store
ametapets.com
appulous.us
beerify.com
darkroom.media
elation.store
gilif.sbs
jolt.agency
lapstands.com
lobby.cafe
multiverse.at
sirius.agency
trade8.sbs
www.aegis.energy
www.allah.store
www.ametapets.com
www.appulous.us
www.beerify.com
www.darkroom.media
www.elation.store
www.gilif.sbs
www.jolt.agency
www.lapstands.com
www.lobby.cafe
www.multiverse.at
www.sirius.agency
www.trade8.sbs
www.wwwmadisonlife.com
wwwmadisonlife.com

Other certificates including the domain name aegis.energy

(limited to 100 certificates)
aegis.energy
aegis.energy
aegis.energy

Certificate

The complete raw certificate details for aegis.energy in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhsvxRCvjGPeAXf1kMfS
rUsly+AkC3Ajtig050DFG0u4561cr8cy26H664BLHkdiq7n10rsUOT4rspL1Yqv4
v0mwX8GYT9r5RxqRIxcsH65Q3QRyKKplVRNLEH8C5P6IDDAVhzeueHQbA0RdL8vY
us8HijLFwGZGA5aNNnaB0R0NiEP7/6/aLs5Yc9LlV3LFT7Tn6MLrQnbKiwxwdoMy
UN2s69y+STej0zf8WPIW4vzjtkaVeUaxNQKp/b/P83CmmuRjgSirZqa+lCfO7ZTy
yMBx6CXlFsUwXscllkYOYcdVC+u3x+KLcqf+t2qEH72+4U92NLnLBp5CrQq/UxUw
qQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 427726138624136116947709837811330596420091
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-05 22:58:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-04 22:58:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aegis.energy'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25513543815618210190900510538891986368276577726935823273202297459636582262096676262329057858017088372287172082401730453999617138032286757598903349004115221079134217674904559348368514607012786156506103053719358741985227779182380593051137688694550820344968886936970485668284256369196927602962315865203919730751716574034380184207839070529818874442729095895901696223165016055614053259318592479588499264645575259606911121124150308777840495809787830006405616790746731195707189198575596942443744400081724904545524242973540353095647045701356588953526822830821267194925336271199548473494073306382089825279933967407851041534121
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cdff96e5539200ac2aac992887b20795b2ddeb58
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (488 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aegis.energy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allah.store'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ametapets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appulous.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beerify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'darkroom.media'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elation.store'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gilif.sbs'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jolt.agency'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lapstands.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lobby.cafe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'multiverse.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sirius.agency'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trade8.sbs'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aegis.energy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.allah.store'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ametapets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.appulous.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beerify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.darkroom.media'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elation.store'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gilif.sbs'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jolt.agency'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lapstands.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lobby.cafe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.multiverse.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sirius.agency'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trade8.sbs'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wwwmadisonlife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwmadisonlife.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018c3c6b540a0000040300473045022100bf8d871a7f00a74e05f5dfcb0fd0de0ae15efae80bf2c1665570482ebe97c39f0220197157bd9c919ab740b60d07f7f19c48305b562e58fe990595882e9abfb1692c0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c3c6b559c0000040300473045022100b642a3bd06f9ee35124bf222f0f8b8280f096511eb56c3ee90bcc8053d09c73a022015ff80f62d3a36b829c7fe5d8e228036d1facc201c2bd655f61d5efc66426045
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00b0c97b65f83c04ea1a89b54e33d040e04f30edc8dfa4d6a3ac4b3637c18b2699d96ebe9a101c1339543e2cc26cac9fdb668ddbb750419420cf9866758415fa104c51f288f06913f45916c1fac2010c75adae4d15bdf500834ca1bc48999689cb0b6c46b0f86d036e274bef89b17901852252b626cbf544ccdc6543f0d7570b652e9cea3d657709ac1aa25418ee87d5dcc0c27dd21f2dcc5721d3d2f238243c6d1c2e73f12e3a46f91cbb03f1369e37c6f799b5143bd39dbd5618b51b8a582ef6f963f8c27c8f8dc70b798f3837d6b00dc22a02e7697f6b1a6830ac47ffe43a9aa27ee5f89bdf628d28eec0dca3db026bc2269525ca4adbc7bed301df1aa4187e