www2.aeryon.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ad:25:1d:aa:47:b2:f4:fa:3b:f5:c8:0b:31:b9:ef:fb:d3 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www2.aeryon.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ad:25:1d:aa:47:b2:f4:fa:3b:f5:c8:0b:31:b9:ef:fb:d3
Serial Number (int): 320255042738746250166976788306446787804115
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 08:cc:39:12:6c:aa:fd:f1:fb:04:a7:84:92:1e:45:2a:9a:62:0f:c4
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 0a:f8:50:9b:e6:cc:f1:0f:af:c1:db:d4:be:31:d9:cb:57:b5:cc:83
Fingerprint (sha256): 78:a3:d9:05:be:54:62:a8:ec:2a:b3:c8:3a:f1:87:96:7c:ff:b4:4a:3a:bf:ee:20:d1:50:34:4d:40:12:49:f3

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www2.aeryon.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www2.aeryon.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www2.aeryon.com

Other certificates including the domain name aeryon.com

(limited to 100 certificates)
training.aeryon.com
www2.aeryon.com
training.aeryon.com
aeryon.com
www.aeryon.com
identity.aeryon.com
live.aeryon.com
www.aeryon.com
test.training.aeryon.com
training.aeryon.com
aeryon.com
www2.aeryon.com
sts.aeryon.com
*.aeryon.com
aeryon.com
*.aeryon.com
*.aeryon.com
*.aeryon.com
www.staging1.aeryon.com
www.aeryon.com
*.aeryon.com
www.aeryon.com
training.aeryon.com
www.aeryon.com
accessedgepool.aeryon.com
training.aeryon.com
dataservice.aeryon.com
sts.aeryon.com
live.aeryon.com
www2.aeryon.com
live.aeryon.com
es.aeryon.com
www2.aeryon.com
www2.aeryon.com
training.aeryon.com
*.aeryon.com
aeryon.com
www2.aeryon.com
test.training.aeryon.com
acs.dev.aeryon.com
training.aeryon.com
test.training.aeryon.com
*.aeryon.com
www.aeryon.com
aeryon.com
training.aeryon.com
command.aeryon.com
sts.aeryon.com
live.aeryon.com
www2.aeryon.com
training.aeryon.com
training.aeryon.com
www2.aeryon.com
training.aeryon.com
www2.aeryon.com
aeryon.com
test.training.aeryon.com
aeryoncommand.aeryon.com
identity.aeryon.com
training.aeryon.com
training.aeryon.com
live.aeryon.com
live.aeryon.com
*.aeryon.com
sts.aeryon.com
command.aeryon.com
*.aeryon.com
www.aeryon.com
www.aeryon.com
aeryoncommand.aeryon.com
www2.aeryon.com
test.training.aeryon.com
training.aeryon.com
iweb.aeryon.com
www.aeryon.com
www.aeryon.com
dataservice.aeryon.com
aeryon.com
www2.aeryon.com
dataservice.aeryon.com
live.aeryon.com
test.training.aeryon.com
www2.aeryon.com
identity.aeryon.com

Certificate

The complete raw certificate details for www2.aeryon.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 320255042738746250166976788306446787804115
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-13 22:13:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-14 22:13:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www2.aeryon.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 713499249321223360297760567254337814394377290094585271735682131682121183960302672774829848254647372123027129552011172998417541563297579590753932718601022744984492636369428693727893348670480806720495730678364349964045188322352238650652960599568119463264565418305708791438461335758294017644164679257976061333320205478033098120610287665675103041872099428156121114463678202643396581180864638962074623833636515301023702339626619076152296510671933741222358153492050675160160213509706314891757870038463953261966306872721084960793152573770786758707102541896362721953387680209669891273051160293658694055771466938107218429216866411686944928029520624462589128480848367762106169280391120961747725631206083099135497412937865230272898281852419796761688663603540951845704153876194696444735496012960610535274289876068498719842308046880994093654159301271216401763146781474838490281657116706979126612574428868492406019336590449108886641836662114502606939264688382287002590568327353732314689879454033251228760708155717958623326069079785226767076648022035563231746477424892455226306593280975248253038397667636581407844922208629271185545594915446533032020847689699817488306269921092395978102064073291074021611575595315801208864892450339493730684083798619
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							08cc39126caafdf1fb04a784921e452a9a620fc4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.aeryon.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000168e92353fb0000040300463044022033b720abb90b2ce6c02198326f8c256026461975cf412b1924cca0e211d0fbd102200d5ba35c80abb525581f5a5c83adfcf3878a5dd4f5326fd7541f57fb84062f7300760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000168e923544e000004030047304502200971068d8e9a4ed4c5ba14c8d2c3a5e720c29f0e686abc19061cd90002e63b56022100de3148d2fbe3b63ca9589f2d76a730b34c7e4020da5410d69372fa7aced31a2d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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