ait-marine.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:f1:55:de:81:94:28:9a:3b:d4:75:21:68:ad:06:fb:14:c3 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=ait-marine.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:f1:55:de:81:94:28:9a:3b:d4:75:21:68:ad:06:fb:14:c3Serial Number (int): 430571333852700641642783689255382037501123
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 06:f8:3c:88:fd:c6:bb:8a:08:7c:5b:52:5c:fa:ee:1a:7d:06:41:8f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 70:e1:de:72:58:df:c5:de:e2:1d:f9:26:85:1c:38:a5:6f:8b:16:fd
Fingerprint (sha256): ad:72:5f:65:88:8e:45:bd:71:15:65:24:4b:de:c7:e0:95:af:d8:e9:30:3b:b9:93:1a:64:76:3b:f4:ca:3b:f2
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate ait-marine.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for ait-marine.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
ait-marine.com
www.ait-marine.com
www.ait-marine.com
Other certificates including the domain name ait-marine.com
(limited to 100 certificates)
webmail.ait-marine.com
webmail.ait-marine.com
webmail.ait-marine.com
ait-marine.com
ait-marine.com
ait-marine.com
webmail.ait-marine.com
ait-marine.com
ait-marine.com
webmail.ait-marine.com
ait-marine.com
ait-marine.com
ait-marine.com
ait-marine.com
webmail.ait-marine.com
webmail.ait-marine.com
ait-marine.com
ait-marine.com
webmail.ait-marine.com
webmail.ait-marine.com
webmail.ait-marine.com
ait-marine.com
ait-marine.com
ait-marine.com
webmail.ait-marine.com
ait-marine.com
ait-marine.com
webmail.ait-marine.com
ait-marine.com
ait-marine.com
ait-marine.com
ait-marine.com
webmail.ait-marine.com
webmail.ait-marine.com
ait-marine.com
ait-marine.com
webmail.ait-marine.com
Certificate
The complete raw certificate details for ait-marine.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGaTCCBVGgAwIBAgISBPFV3oGUKJo71HUhaK0G+xTDMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODExMjYwMjIyNDhaFw0x OTAyMjQwMjIyNDhaMBkxFzAVBgNVBAMTDmFpdC1tYXJpbmUuY29tMIICIjANBgkq hkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA1NEOVbdDf40k8vVa/HtV8kF/Fr1RYu29 JmLwqli63rUjp+RaJmU3MwQQ5JARQuJocWNMMotMBJzCNdRI0i3yhEFYdYXZ9b+n h5cpn2nGWOErRIOgc2Xe0Oc2B+9BC2kc2/GLqdR2RptXTKu88nzYO35yub1hLjBF KtsvMgzT2BjyI7e2boJujzG4rTeg5F6i4D8TfXgrWsPVTusKY1oyMOd9WE1KShHS ykx6hmkBsEMv2STrGgxiMdKw2bZ3mgJCIEaJHr7Kz2OCW5AfST+2ddUxm7M9WjiO o9BJdq/gRz1lSWkjKoHJM2h82aE3zFKFuq4QSaOYOlMI9UEyz8o3nmANJJfPyXUk eQZd8WWHykHgxGYegWiAPfGVnM1Va8CMQqCAVENokwdB79li9t1Qg/ogHc4w2iJ0 ddJRbbPgF4R9JCWR7J3BndI1T2m9gxOcqN22V0eIiZctzclY0245eUfhHdd5xVT8 53D9227tfCIQMIOplhfZvySqMtSUQvgB8RnKavxJqslVyCMj4rnvftqylq3lg6aY 5A707pk1aEv7FxNwNlKayYNucOrOeznCFkf9+JPvAyOSXqfciNWc13e4yZJONeb0 8Ow0V4h+3WDb68h7ZCnCG+0t79/3yHRhB/zibvYdrPBaNyNcj5O6FgyHSUmCCR2K gP/JFF4tM4UCAwEAAaOCAngwggJ0MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAU BggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUBvg8 iP3Gu4oIfFtSXPruGn0GQY8wHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo 7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQt eDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQt eDMubGV0c2VuY3J5cHQub3JnLzAtBgNVHREEJjAkgg5haXQtbWFyaW5lLmNvbYIS d3d3LmFpdC1tYXJpbmUuY29tMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQB gt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3Jn MIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDxAHcAdH7agzGtMxCRIZzOJU9CcMK//V5C IAjGNzV55hB7zFYAAAFnTgp51wAABAMASDBGAiEAhqrzUK22g82rwi8BR04+0t77 PoBAOaAD6zMq2dDqI9oCIQDSlMchp8qR6hEW2H8foKml0RyO9AJWp8yEMhkfijOl 1QB2ACk8UZZUyDlluqpQ/FgH1Ldvv1h6KXLcpMMM9OVFR/R4AAABZ04KeboAAAQD AEcwRQIhAMTRU5EACrHuqedF0SUnOWQW8EAnBAaX0BILhUzB1zGJAiBIH8aAOWUc RslLLiQn4Vbl6AjbTcmH9kzWtTib6G2PbDANBgkqhkiG9w0BAQsFAAOCAQEAZvhk km84psgJpRV2zKU8SlO/mkuL27dxdNHcjQl4J0Y1tTR22ZGQfjMUR5Hwy3IIFndI UFq+OVwmDTCrKb5lLJ5RSLf6v3HT9ACfBeXNqdUd57zHlRxyIRU81Rfv5CQosby1 nYEpV+2VQ6wowgtMIwiI5v9oKd20dKnTvrmh3T6Yn2jZ9RdKSyhHoGwwuls+G00y Ji0+7JSVCwu4zE5eunaScvQbdxQ1kCvZ1PyTQAB5NCFyn8+hdV28PpOE8sdPHskv fvkz5TcXsyBTAlsZFCJ8UQTgCczA8nvkBx+xVqY3fpbg7VkEXJuSdB+MXU5S7RWf OGyPbUcg3wzX54MaAg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA1NEOVbdDf40k8vVa/HtV 8kF/Fr1RYu29JmLwqli63rUjp+RaJmU3MwQQ5JARQuJocWNMMotMBJzCNdRI0i3y hEFYdYXZ9b+nh5cpn2nGWOErRIOgc2Xe0Oc2B+9BC2kc2/GLqdR2RptXTKu88nzY O35yub1hLjBFKtsvMgzT2BjyI7e2boJujzG4rTeg5F6i4D8TfXgrWsPVTusKY1oy MOd9WE1KShHSykx6hmkBsEMv2STrGgxiMdKw2bZ3mgJCIEaJHr7Kz2OCW5AfST+2 ddUxm7M9WjiOo9BJdq/gRz1lSWkjKoHJM2h82aE3zFKFuq4QSaOYOlMI9UEyz8o3 nmANJJfPyXUkeQZd8WWHykHgxGYegWiAPfGVnM1Va8CMQqCAVENokwdB79li9t1Q g/ogHc4w2iJ0ddJRbbPgF4R9JCWR7J3BndI1T2m9gxOcqN22V0eIiZctzclY0245 eUfhHdd5xVT853D9227tfCIQMIOplhfZvySqMtSUQvgB8RnKavxJqslVyCMj4rnv ftqylq3lg6aY5A707pk1aEv7FxNwNlKayYNucOrOeznCFkf9+JPvAyOSXqfciNWc 13e4yZJONeb08Ow0V4h+3WDb68h7ZCnCG+0t79/3yHRhB/zibvYdrPBaNyNcj5O6 FgyHSUmCCR2KgP/JFF4tM4UCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 430571333852700641642783689255382037501123 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-26 02:22:48 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-24 02:22:48 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ait-marine.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 868216081684333421258753131956165139619704205444646436684222861554938536258713266207410991360234945208806092686516289115224170973114694369055082136196297469484825581389021122406667868464194807646469816313966665060785959339669512051577126110486003608022125692350759730042468063643772813327151300377051258046437730248586925332438671940479265126844712952520507097503737348080695227451280910705914693255079025230433683628198017295381393702357112072769328402359249772063684299749185028419940936096892967307175465184667739619820158011409160130047827037016754553388265798611210168902670368745902075613677344806712044313327758889899560971000946062617661454756480369858023464524175676559985523784847446309705795540190664557947749159750833390400764871052189912260573815586038925347443041697901772755114219837596932743679497550343517971822709562719971111845493018140537012483692900289958040632079059483513691693483438684585831173433366610909121227966315742698831569045760934359926324147201031194074472586775427582425420140060996006158295986547390936512733256779730848352638464426395440183042477792716689792059807951373101352950102592254678840801189808297728969680077501724502342541086292790151901226555235390487337856741756385695869712965907333 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 06f83c88fdc6bb8a087c5b525cfaee1a7d06418f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ait-marine.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ait-marine.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc56000001674e0a79d7000004030048304602210086aaf350adb683cdabc22f01474e3ed2defb3e804039a003eb332ad9d0ea23da022100d294c721a7ca91ea1116d87f1fa0a9a5d11c8ef40256a7cc8432191f8a33a5d5007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001674e0a79ba0000040300473045022100c4d15391000ab1eea9e745d12527396416f04027040697d0120b854cc1d731890220481fc68039651c46c94b2e2427e156e5e808db4dc987f64cd6b5389be86d8f6c . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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