armstrongfluidtechnology.com

Issued by R3

About this certificate

This digital certificate with serial number 04:a7:28:cd:27:d9:f2:cf:0f:ca:3d:e9:ff:2d:f8:ea:6c:a7 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=armstrongfluidtechnology.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:a7:28:cd:27:d9:f2:cf:0f:ca:3d:e9:ff:2d:f8:ea:6c:a7
Serial Number (int): 405330533351806737762057292935419851861159
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 07:16:4c:b1:11:8c:ca:c0:16:d9:23:c1:38:37:d6:1b:bf:bd:5d:8d
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): b9:52:71:89:e5:c1:b0:20:8a:ae:a0:5f:dc:57:47:27:1c:48:2f:e7
Fingerprint (sha256): a3:75:9b:cd:c9:9c:08:88:16:cc:a7:e5:7d:0a:39:15:6c:b9:f0:f1:95:df:aa:cd:46:5c:a8:67:e3:d4:48:08

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate armstrongfluidtechnology.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for armstrongfluidtechnology.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.armstrongfluidtechnology.com
armstrongfluidtechnology.com

Other certificates including the domain name armstrongfluidtechnology.com

(limited to 100 certificates)
rp-lync.armstrongfluidtechnology.com
info.armstrongfluidtechnology.com
shop-uk.armstrongfluidtechnology.com
armstrongfluidtechnology.com
info.armstrongfluidtechnology.com
ukvpn.armstrongfluidtechnology.com
shop-uk.armstrongfluidtechnology.com
shop.armstrongfluidtechnology.com
shop.armstrongfluidtechnology.com
shop.armstrongfluidtechnology.com
shop.armstrongfluidtechnology.com
shop.armstrongfluidtechnology.com
info.armstrongfluidtechnology.com
loginstage.armstrongfluidtechnology.com
*.armstrongfluidtechnology.com
saavpn.armstrongfluidtechnology.com
shop.armstrongfluidtechnology.com
blog.armstrongfluidtechnology.com
armstrongfluidtechnology.com
energyupgrades.armstrongfluidtechnology.com
access-lyncuk01.armstrongfluidtechnology.com
Access-Lync01.armstrongfluidtechnology.com
info.armstrongfluidtechnology.com
rp-lync.armstrongfluidtechnology.com
*.armstrongfluidtechnology.com
rp-lync.armstrongfluidtechnology.com
shop.armstrongfluidtechnology.com
armstrongfluidtechnology.com
info.armstrongfluidtechnology.com
login.armstrongfluidtechnology.com
energyupgrades.armstrongfluidtechnology.com
info.armstrongfluidtechnology.com
RP-Lync.armstrongfluidtechnology.com
shop.armstrongfluidtechnology.com
blog.armstrongfluidtechnology.com
energyupgrades.armstrongfluidtechnology.com
energyupgrades.armstrongfluidtechnology.com
*.armstrongfluidtechnology.com
energyupgrades.armstrongfluidtechnology.com
armstrongfluidtechnology.com
access-lyncuk01.armstrongfluidtechnology.com
armstrongfluidtechnology.com
energyupgrades.armstrongfluidtechnology.com
shop.armstrongfluidtechnology.com
rp-lync.armstrongfluidtechnology.com
shop-uk.armstrongfluidtechnology.com
shop.armstrongfluidtechnology.com
*.armstrongfluidtechnology.com
shop-uk.armstrongfluidtechnology.com
blog.armstrongfluidtechnology.com
shop.armstrongfluidtechnology.com
saavpn.armstrongfluidtechnology.com
shop.armstrongfluidtechnology.com
shop-uk.armstrongfluidtechnology.com
info.armstrongfluidtechnology.com
energyupgrades.armstrongfluidtechnology.com
shop.armstrongfluidtechnology.com
*.armstrongfluidtechnology.com
energyupgrades.armstrongfluidtechnology.com
*.armstrongfluidtechnology.com
shop-uk.armstrongfluidtechnology.com
info.armstrongfluidtechnology.com
armstrongfluidtechnology.com
access-lync01.armstrongfluidtechnology.com
rp-lync.armstrongfluidtechnology.com
blog.armstrongfluidtechnology.com
info.armstrongfluidtechnology.com

Certificate

The complete raw certificate details for armstrongfluidtechnology.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomS+muQwznfF2zLiN2mr
WrrGvyKmubay9Dz+JjHt4I/x1Vk8FzBHDkUfu3HmPptHstPuEGQCYenJAIh4x7mT
90LNAzjUqC+HnVxfJBsfXCq3R5fODAbvAGA6NGPUC6RuN/94RR41Ro2QX7d21fUA
b+P/43M46UE5fnfz5njcOU+7SIcxB3jLvZlBmhe6oOkL4IQM5HTc8qm5SJ/ER/lp
OMutJA+x9QUxXFwqMDMka0sIzJU+uDn7zSAkiAxRdSvmq+bL2c9d/1md0dM+nxN0
iHQImDiRTA3Jwyix8eYXKcGiDLgDPvksNBw/r3CKOSVlYSFW5ow0/NR+6COIqKjg
lQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 405330533351806737762057292935419851861159
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-09 19:34:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-07 19:34:16 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'armstrongfluidtechnology.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20500284394138578385995346589070514912910826939637707890891237031681734400185401982792106464468808276898280288313672361594606969240274726212255763296168604318024251170671655781323908646706721034005655063061289730946437514723705389007783635961010470575615994893150062599510166297909993117507816298721197360847320894115445636053600132657471133205316154786484173568039928644648794726080614850711158652082585443762037488901938631449476979924850531069956161296987271431465657022874471165517636296562847725303772634905411689577045106808205691357686425737259342104627968848813071701461871182944974090832898188828093989838997
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							07164cb1118ccac016d923c13837d61bbfbd5d8d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (64 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.armstrongfluidtechnology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'armstrongfluidtechnology.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000186c814e3810000040300483046022100b5cbac254d77ed70066c8cd5f8abfa61e7761bc1cf94c4ebd5611c8efa70aa13022100acee285fc384cb720e0000ebc9a5482fb187b205f9cddc3a5e083103d06860a1007700e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000186c814e3080000040300483046022100d70d4ad93918f45b5ebf07a1f1ec1cc9056e1371e4fdc8c767bb6fb491173dcb022100b82b58d83c5487eae03f75a473869f56ef6a5cb159892d0cca4ac73411c8f1e9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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