aqua-lyros.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:7c:bd:a6:f2:de:ec:61:78:b1:5d:e7:6f:05:3c:0c:2c:78 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=aqua-lyros.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:7c:bd:a6:f2:de:ec:61:78:b1:5d:e7:6f:05:3c:0c:2c:78
Serial Number (int): 303783962231963907750644389166608879987832
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f0:24:8c:e4:df:9a:b3:25:91:8e:e8:02:0e:d0:eb:50:15:44:61:98
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 1c:2b:7d:a4:33:7f:b5:d5:37:59:1c:a8:44:b9:ee:90:2c:32:88:c8
Fingerprint (sha256): ac:b3:6c:f7:84:3e:ff:d6:52:92:f5:fe:44:11:77:42:9d:b8:cf:a0:bd:b3:73:82:c1:e3:4c:fe:62:cf:95:28

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate aqua-lyros.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aqua-lyros.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aqua-lyros.org

Other certificates including the domain name aqua-lyros.org

(limited to 100 certificates)
*.lutz-heesen.de
www.aqua-lyros.org
*.aqua-lyros.org
*.antennepassau.de
aqua-lyros.org
regionalklasse-kfz-versicherung.pkwversicherung24.eu
www.aqua-lyros.org
www.msx23.lima-city.de
aqua-lyros.org
vonmirbach.lima-city.de
terra-details.4lc.eu
die-borgstedts.de
testshop-01.lima-city.de
www.jansblog.lima-city.de
medicalnewstohdokhistmx01.hampoelz.net
www.aqua-lyros.org
hartaberehrlich.ml
aqua-lyros.org
sammelnimkreis.lima.zone
www.aqua-lyros.org
*.linda-bau.de
www.adsense.2ix.de
www.aqua-lyros.org
www.aqua-lyros.org
www.patrickfreiheit.de
www.aqua-lyros.org
www.aqua-lyros.org

Certificate

The complete raw certificate details for aqua-lyros.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvp3vD0J9Sr/bjwz0e8VL
i06Um4RPvltXFv5hPwyjtC78NBm9LuQarcpdHdM7+jD9UOlPMpjLZ+XjsjkrxUss
4QaZRgCo9kgJBJLX7hIVGgaDRVa/0XiW8dllDwKO2gDQ2+bXuqVmIziN4PoLNPWF
xgMrYON/rzNYBuzO2frOakkYLtLHeDi2PZ9V3jfNhbxT9Q0PnyPkA7LIlE5ZLTui
v4xxKF58b0JTPvXaW9OlCvq968AYYkduylKqnxKd2mQxkUyVMmzt7Q64dSjshlPy
FCoekuq+50kRZFTlcB+kW/jHWbqEaNb5SD00k/EX8l1DkXugZVbSvcG01Aoj4SjC
pQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 303783962231963907750644389166608879987832
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-19 15:06:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-17 15:06:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aqua-lyros.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24063158016075143747076613801686211799245623993950187814215080965666101096811735650257124544934442694840536881828160759476393934044024558820272700675712196874452821997729263302689848683898537784304720694100284323506444510293025522985800299388115941135130640457998539415605860693478381998052097403272755764159750434562084712871607933511103100025575788122235920678785498601932821920023282300476020384928633184792459721233918709872709940422678377849208294537034598338634993139453853461641019029212305164206835994178142456689662939707894717404587692454529325704817691169412061154012174881048372064236925428335058811929253
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f0248ce4df9ab325918ee8020ed0eb5015446198
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aqua-lyros.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016de4c56a6a000004030046304402200687ea26434bd0e9c7c1e3c198d6dd47d62d9885d780cb07d49e142736fed7e202202496678a566d060cbb84b604593e7c0d57a02fefba5350f09a33bdb01b38f2780076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016de4c56c6f00000403004730450220790210019bc1eddf24c108d0271adab16e4dd5401ed4cd3f31f381bd51bbed280221008e82ebd8f7f1e60907286df7c9c968a007d749235aed7e9b0c8095b9f7e024ff
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00698d0ceb21bc9b1ed53018c36258d32269f5ca1ce91c98dcbdd9db341d1bab18bee811d9ac82a51e0835e9901791f671fbdea95eaa086e143f4f6fc1c6038f359f70d676c3efa7d47a0781823c9a9c0867e2e590aeec94051d618e860e262235f610b00e49e2110fc4ef5a355995d67b97a91c43991261400dd45ac0d6637f057d2f2054f8c53e01bcdf366a2aff783f48f5ac17a8cc393a5182d29c1479453c2fca60ba83cdf340c3762436373c20f6c1e6e34b8cd4210e2b1a334c689677c1276dbca37e82ee88af7d0c80e320e8b56253f5a0739ede1ab2f1082a3954f285fa578286ff3fdefbdf32a3071e488a7bd5ec30e7e373747e4751ebe8e4a39152