www.aquaflow.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:d7:c8:47:5b:66:b6:91:83:5a:fc:3f:30:c5:29:a7:4f:f4 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.aquaflow.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d7:c8:47:5b:66:b6:91:83:5a:fc:3f:30:c5:29:a7:4f:f4
Serial Number (int): 334763782789353497426936318643005026684916
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a9:eb:34:b2:83:ac:e2:ff:62:fa:6e:ae:b6:2e:a1:24:78:36:cd:7e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): e0:57:0a:26:d3:2d:57:42:5d:dc:13:e0:60:fa:4e:01:e9:8c:5e:af
Fingerprint (sha256): 7e:04:9c:d6:7b:07:26:81:28:9e:2b:fe:d1:8b:e8:47:79:f9:cc:bb:91:52:13:c2:9e:ce:4a:2c:47:64:67:e8

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.aquaflow.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.aquaflow.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.aquaflow.com

Other certificates including the domain name aquaflow.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.aquaflow.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 334763782789353497426936318643005026684916
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-12 14:33:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-10 14:33:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.aquaflow.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 835764334496278300361766762215560487963758922851432204843720026019360895748000343742382657627571793371692099339528799092915956382131862206842339337362819480114958348045208446350174979006516476337548559455383237652478954354703076960116959585383575538982508039443069489314567403552361893363815823253815011575353259116113390300866065543704779963224747497532840548914167839398720129899910955697488457747552615096519723317909940353182122509427525675723122692462884926535849239175212851460591623216160758260248670306436754009611778155566981264113655309598855847041968703096522767819138975431155852807546452474235869393807491516271400885326800320627171787481220520393209061586664280453906848865787037516409633418261424390417111749640119082767006610897777808490377972059036810810629583722681472021937739700643953549266761853833410595242130183645151630299818397190731384358562167124228508493866823327104517922159477540210030519188551557312008611093476055502621115088125159382156428375876130776008320803453145645422462376256241558873324387424440465680600370931098105165768245567400802778212486441613817201412446433514532499607383347847175856893029751543369207497154296697281674526604052380819014982029386947459055406508938194215623172075204209
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a9eb34b283ace2ff62fa6eaeb62ea1247836cd7e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aquaflow.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016dc09ab7b600000403004630440220131879f7b68ecf73353997e16d478d51207b0c572d97bdb88296111a05032e3102207f2fb79e341fe115533b4850f843c492aace18a7e7a3161891ff351ab78759550076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016dc09ab9b700000403004730450220599440a6bedf15e010f6c8584e7da16128ac0c49ce8fc8da8cb7b45a5028ead502210081e81e2631fd858399551b6d5ee5accaa0ae5ef2999fbc9ec1c15a02f738f2a3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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