www.aaaparking.com

Issued by R3

About this certificate

This digital certificate with serial number 04:f6:a6:d9:18:e3:28:4f:2a:77:eb:f2:14:f8:0c:06:a0:96 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.aaaparking.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:f6:a6:d9:18:e3:28:4f:2a:77:eb:f2:14:f8:0c:06:a0:96
Serial Number (int): 432380385070085545175445429194873305997462
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 72:89:2e:33:98:59:e3:8e:17:f2:af:f4:c1:ee:5d:3d:64:78:ce:ef
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): dd:f4:3d:5a:0e:7c:dc:a1:9c:9b:1a:3b:5a:9f:e9:83:96:4b:a8:76
Fingerprint (sha256): 99:e6:ce:bd:1e:5a:15:fb:d5:a5:90:73:f0:de:d7:94:68:f9:1c:2c:88:c8:13:4c:7d:d8:ce:a0:55:79:3f:c3

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.aaaparking.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.aaaparking.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.aaaparking.com

Other certificates including the domain name aaaparking.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.aaaparking.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqm53Hw5lBpey3Yd4g8U5
gDmw+PVVGFfImCNC0K7Ve/GFDEKlpXnvSrvIIDSTzVYkMTSMlFVzGOyW3Jfma16f
1EQMDG2MueObBgRmhdCzDNusnG9YzLmuX2LQp1XXtc8Zhe/JzJjKm+0wMEm1FwSg
AMVEZOb59gp94GzT/c4WFAP+BH8Cs7mUuaH0FvyMGiTRDR0bXRTJr1hiA8bVx2pa
In6ZyIS1wdLxR5lZeQlntyvUZxXJ7dWzqyuF+8gjB+qk/xj0kpLVZ8JZWIo+EnM1
kqGL+oeEY+x848KxJRA1LX30K63j7ILzMd6YRGCNemvJlpgEaJkkb47XqI9Ywi22
aQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 432380385070085545175445429194873305997462
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-15 20:28:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-13 20:28:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.aaaparking.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21514984322570610350352981980631870294365575714119042338093309996194132085526330801709986759336238083806836787577808235849149913451763928117185265202560579873386079941623923843866765693986086942571854104727519610212725216518644477317711672750646249431841079067750692966636870178905430438878807321581973826120273833151340371229153088300860892525522589351494733213633741549583071415547023763878515635438056848487026201156988271016914604890853085690670845486956696323993799286229390611345423154094500786553238744061977507854023845224147625569725171306544576410716615673335177687896672953288881325223187420780586349737577
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							72892e339859e38e17f2aff4c1ee5d3d6478ceef
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aaaparking.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b353d4dba00000403004630440220182e08687004eb802c756960ff7172291c46030f9b4fa1d644349d5dcc771d4b02203e76452bff31815918148d44a62091650dd778a235eb15dadce4254863842ed1007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018b353d4da80000040300483046022100edb1aea7deecb992a235960e7c9d9624b58f941e2de4f4f5c7e8c50eae9b4ab7022100e0f3c29584ba1a8c4a03b1647e5c113ed38347ed83e96395ed9ce796c63aad9c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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