aquifermotion.com

Issued by R3

About this certificate

This digital certificate with serial number 03:b7:6c:92:ab:fa:91:29:d6:2d:c2:06:cd:61:ce:ed:0e:73 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=aquifermotion.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b7:6c:92:ab:fa:91:29:d6:2d:c2:06:cd:61:ce:ed:0e:73
Serial Number (int): 323752849128842604509591566316047317143155
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2a:e2:a1:cf:a0:3c:32:cd:e8:ea:a8:4e:d1:6d:77:22:07:d1:f8:df
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): fe:45:f9:74:21:c5:58:0f:85:88:e4:71:2b:ad:91:e0:76:ef:14:d8
Fingerprint (sha256): 79:0f:b9:cd:dd:9f:ed:18:f3:3d:1f:8e:9e:fe:6c:f1:84:cb:f6:73:c3:00:7c:43:a7:d4:66:10:e3:bc:f7:32

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate aquifermotion.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aquifermotion.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aquifermotion.com

Other certificates including the domain name aquifermotion.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for aquifermotion.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9pD8R/27rMqaTFXtM9W
FP6afF1oo5y1my0v7vwsGMeoeaFukN4cvqsSGXiRXzNW/DAHo3AOG8iTzrNhcqrL
pMvIncCWtS8KFgodA4F9rHZXdkLt7J+H6ylUeh2Rn4nT0gV9Ke2JejCXFcpbAmG+
Mr158IcElpYnJ/baBlfJUWjcQKZtTjhNoFAvjnR6+RQMEyl4D6IsjzCb0nZjTiFb
N3SA24ERaM1bizwCzsZYehVlj6WdI3UrdkdHPoGNwu+ObQ8jq7h7UvOiCdvqQjQH
twMS5Gsk2AuZln6LmRxPH/Lche4iCmDcXmY1/I5g8KPyfp5z7imwPoQoNq09hy1Q
yQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 323752849128842604509591566316047317143155
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-11 17:10:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-09 17:10:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aquifermotion.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23209240488004416646598609586307118584133426050106520977558322497609422281725367042587271640190089669189023070760478346724842671126464466418003066181627775703387535471004311627161183300825017537880455133883619331410764799586012340239025730605777900441298339354987441482276118523073702682465762381048852660698325880204028454291323852373755072908430358221011266408149323757466840676535801067466525381248914749092903469103142447255944326572059251307567298962874519074131030022725526032215690197384577981593170182067553061299926518342501097983886647340416559069821754996939434259500652018462508696222574551963322089820361
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2ae2a1cfa03c32cde8eaa84ed16d772207d1f8df
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aquifermotion.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000189e5cb07710000040300483046022100903328b7d22e2d16562ca91002e5d08934de4dcb522681da18cca7c6538dc601022100949d66a902b49dd5b07386123f374babc5e03b441ed91991a409eb12362b66a5007500adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a00000189e5cb076d000004030046304402203ee2fcdb747c1048f3732a1537e9c2ef899e0b820b7b02476ed680b90e1f3ca6022033c632b9544b4e6ceaabe1301d274bf9bc00e9db055229c4b4fd5cf8ca1ba157
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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