aeratorpumps.com

Issued by R3

About this certificate

This digital certificate with serial number 03:1f:7f:5e:9e:f6:60:3a:f9:0b:b0:f3:2e:ce:1d:68:1b:e7 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=aeratorpumps.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:1f:7f:5e:9e:f6:60:3a:f9:0b:b0:f3:2e:ce:1d:68:1b:e7
Serial Number (int): 272054914425339846107090436513845849103335
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c2:41:9e:76:62:e2:5d:54:be:f5:33:0b:f9:0f:67:5b:9b:02:ff:45
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 22:cf:2b:d4:9a:d3:39:77:8c:f5:9f:10:c3:95:d9:b5:e3:40:04:2a
Fingerprint (sha256): 82:67:50:bd:89:93:48:75:b2:46:1d:06:9a:39:c0:9e:55:ea:3f:dc:e5:cf:a7:28:79:14:2b:15:6a:80:ea:61

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate aeratorpumps.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aeratorpumps.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aeratorpumps.com

Other certificates including the domain name aeratorpumps.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for aeratorpumps.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 272054914425339846107090436513845849103335
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-19 08:39:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-17 08:39:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aeratorpumps.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 917792661910571376437218034814782200406613744000631055623173149884580042007823751097778919228739760024583803354146241011799037589842728208520246130235299026640873418721325278141586253139437517456074484329453631397611423708017838644428085194610621932597923278131189766583192215306124329275186935841394671763044180542075166981393709249262822692701383842748430771074880527335044987369543626010959260571956995407329909407212383129731630032461405423537878856958073943001795477349390511836305947188430089341435091276420012564750472881829101054324569078356266379862454962768845132883576239719975043569866846601832883547591661464574519778899811484163114093021074942624556419126521828067591830154451088599631572111170123848329928048763704703833643117834644700072875409836503831480913470213466051656395197854641859086343582467413737371906025527848147539718847481471172713105672666792810254753152352449503679920451641135265249031019545655273230974429982568986243421185870622462890723823196150462070377110355561600190165039613981467736995039024849972639880579019666023582496146915307801517282052964044266359131552301280424484334325329940685005225376255156264584733074240553897210175449892749683579021868688401632650738873336828047816746813600869
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c2419e7662e25d54bef5330bf90f675b9b02ff45
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aeratorpumps.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018be6f336e6000004030047304502204ee4986a8d4ae97d3801adb072b70393d952c256225604732b09d226a4a0b78d0221008c503fdadba98784d0ac0c4b22dbc67e3888d39ccace341a9749ebd746b5eb1c00750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018be6f3376700000403004630440220790d6980885f2d866581053fb351f1d9626cb39554db5d87ec037ffcac02b3f902202578692507aae56acfe85c236b75f6fde6942440f569ac4a64d7d6ff56a5aa16
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		006ffcd0ce04777dda8f0eb71a4aa432d2972f4e9e053b7a2a6b3d2b5612e9e9b2735d010c785483f009cd081652f33ab6ad8343fcf87318f590d6d9f14771c2f6100e1226f6675eb2b0ae7c60b83de5c4385cf898c62c2a07b774fb8d314ba6f1e49386caa1f8e8d78f14b5f67ecb8b2f39aa7b04951517b05d8167679707a7890b76eb6489e89521a4c43cc720545a2a833926742c26d29dd4404fa29c6a8d13662b753ae5fd22206b3eb366960b974555a946e5cd341e1fd25775cc11f33dc0a86cd40a76fe9a5ca309ee2cfc65a378aa7df646253e284b67190b547f82118f1ad2642ed7351fb0bc166a72863743a979b716fedcc1be9016b9e1fd12381acc