acquarica.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:2b:81:5a:8c:59:0b:92:02:c0:d0:35:30:01:23:d3:fd:3f was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=acquarica.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:2b:81:5a:8c:59:0b:92:02:c0:d0:35:30:01:23:d3:fd:3f
Serial Number (int): 363253226069407094623794459693605180407103
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: ee:73:dc:6c:b7:b6:d3:fe:93:ac:3f:3d:4b:a9:94:ee:a8:38:d5:e7
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 85:e2:e5:3e:e0:69:61:dc:7c:96:3f:4d:bb:c1:15:c8:1a:85:a6:3b
Fingerprint (sha256): 78:aa:d0:dd:09:63:cb:02:da:23:4a:7d:18:07:5f:d7:17:98:65:9f:e4:10:70:2c:df:7c:52:7d:5c:9b:fb:52

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate acquarica.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for acquarica.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

acquarica.org

Other certificates including the domain name acquarica.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for acquarica.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 363253226069407094623794459693605180407103
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-29 23:00:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-28 23:00:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'acquarica.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 789899857706741569309994699543502517993653461211560688875463188355459593652904353206246492665111294003184848324166889312385346515411154505747956571601011909194489681454659531335789613132616120170155949971064026973351965693969960981903893992986611852030362538479495272612534036334206929570004508960533289800354918610435686019362199682354261677824618043617605659562845705014987890884174919313140238758187243049237435928649682067305039399442777306888995943719771723537724003103819673656734589125693152902641547844897601535706071138369035641348078571591609248007655649244209498017483440841128451539077823409093497924690289285517244673039087996001838311362435030539046237236311311120578180637854364799473584910546449946712610017842956364746808223814650622086609409062021432894174946107024769020618502080197498219372638585640391134839477763881998887077216152868251500853079990244487145863933967295576789804895890290084891898467892180656638547597041610542433600661306992468641900461724777538766783842479700807374031631043973462593512783016695721771693603850292592053615096514496360510489021666391027789902408100924295231827478825764090305629372592296771031199853132944451462976932304323891012462727984381120937856820217872806520858183061159
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ee73dc6cb7b6d3fe93ac3f3d4ba994eea838d5e7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquarica.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016d7f77cca900000403004830460221008e0f7a76f422f2765c40e89f18ec143bb0ad9f6d5061524b6a5a6fb22d2d09c7022100dbc1ae3f87c9ba7cf9bb3f0f5bdabbd7930bed50def0c31280b03e0a4fe2cb1900760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016d7f77cc8400000403004730450220030d3084173b3f4281edbe690d181d89b5c869fc24923d9e7eb3d8e578ab8a87022100f2b11986b691410f36a7d516816a152e0a9d5c72607fb3d045911277442487b3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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