aulo.in

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:6f:4c:c5:66:bd:c4:b5:30:da:2d:e5:b4:12:f3:42:cf:00 was issued on by Let's Encrypt.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=aulo.in

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:6f:4c:c5:66:bd:c4:b5:30:da:2d:e5:b4:12:f3:42:cf:00
Serial Number (int): 299210246817506474747552755339339046768384
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 4d:89:bd:28:9c:f4:34:1c:0d:72:54:6e:33:c5:78:59:ce:b5:d3:65
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): e9:2b:21:5b:a0:64:3a:6b:bf:30:cf:cf:67:4f:cc:4e:ed:d7:f1:ee
Fingerprint (sha256): 9b:4f:3e:64:4a:55:22:91:29:70:d7:54:20:19:5e:ea:e1:28:6b:b9:e0:6e:11:21:ef:f9:34:d3:ab:46:85:15

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate aulo.in

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aulo.in

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aulo.in
getawedding.fr
guillaume.segu.in
pns.aulo.in
www.aulo.in
www.getawedding.fr

Other certificates including the domain name aulo.in

(limited to 100 certificates)

Certificate

The complete raw certificate details for aulo.in in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 299210246817506474747552755339339046768384
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-05 02:00:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-03 02:00:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aulo.in'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 648748916518784090373322910012392744840157032588143025848551575756944228262023360818729761735513585563556285069707971954468128961445449001679954024499809572531109196198206271391013038708568431644381197339285262917869468434239239835864361421762962222766086319676097305242774556352675862077473893901234284317101679219677153837597767212922958446123888465089780943529350824119848001180914865835682089924316497788837019926656643613439951498644511797890866028895499084476421158276425424165132957913882452856780980806644901608194240097766595017482047221644565179698991261648797982925739917212834490984140853686365299666906461344871727316761844241440534434449125224739447412952868031959825534224269597727357999245287250822444679269945812016779100302212794536606351460949124518215278000265497536731862754846171555010107022614664627853468397760330987931681443504290093492297596586691629825956762006405811635909091394319205863255430143360461454482058660491148390493681753138787437766281644080688570342670899881245314736579176852351438800871263950633867483497258726372664782845896095952285289458988287625214664357509809728208383358065375013622720220340077212039316974969086928240107951839828117273858813227722814844383815137001044474937850968199
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4d89bd289cf4341c0d72546e33c57859ceb5d365
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aulo.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getawedding.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guillaume.segu.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pns.aulo.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aulo.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.getawedding.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe000001694bcb69160000040300483046022100990d1b771909790a90be05dde1ff5a9ef016f401e5f051f19d55d1375b241e4d022100d6ca10840e0a342d005611f9f1d87f864e707422c1031c5a0d3b3e3bab264108007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001694bcb67670000040300483046022100cea154bfa83407759a890a64cac445bb510e35c43e9c755f88c0f700cb0ea3f1022100813d76c290b3b98528ae29791e99828db99524fde8ff01ae9ba77bc6cbf1eff9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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