aquitania.xyz

Issued by R3

About this certificate

This digital certificate with serial number 04:da:2a:18:b7:9b:5d:e1:d0:2f:cf:1e:96:af:00:e3:10:a4 was issued on by Let's Encrypt.

With 30 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=aquitania.xyz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:da:2a:18:b7:9b:5d:e1:d0:2f:cf:1e:96:af:00:e3:10:a4
Serial Number (int): 422686655630743520679359915291245889654948
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 63:52:8c:96:3b:18:56:52:64:aa:ad:cd:86:65:43:5b:75:09:98:70
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 08:f3:f7:1b:be:b6:bb:ff:f3:e6:4f:b1:f1:9b:5c:44:5a:54:df:46
Fingerprint (sha256): b0:6f:05:b7:ac:b4:c7:28:c2:df:fc:17:29:1b:15:d6:ec:f8:fc:70:c8:59:a7:40:a5:de:2e:60:64:d7:13:cd

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate aquitania.xyz

30

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aquitania.xyz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

anw.in
aquitania.xyz
bodyshop.tv
cc0group.xyz
comproperty.us
dcesllc.net
gmohealthrisks.com
hollywooddivorcelawyers.com
jtlr.xyz
muskogeedentistry.com
notharvard.io
shipit.direct
shockwaveactual.io
tesla.st
thecolabs.net
www.anw.in
www.aquitania.xyz
www.bodyshop.tv
www.cc0group.xyz
www.comproperty.us
www.dcesllc.net
www.gmohealthrisks.com
www.hollywooddivorcelawyers.com
www.jtlr.xyz
www.muskogeedentistry.com
www.notharvard.io
www.shipit.direct
www.shockwaveactual.io
www.tesla.st
www.thecolabs.net

Other certificates including the domain name aquitania.xyz

(limited to 100 certificates)
aquitania.xyz
uncoveringtn.net

Certificate

The complete raw certificate details for aquitania.xyz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8BqhZSZOpeABgo/Ht3Mg
wI/3xbbEXy+DMnNL/zhaal+ft6PTKCbJRI1A6DDdaj4vOXZIJ0AAP+BvzmQx2Gu/
+DMlWT+Vwlgkvm78YriFRD9YViDPYFyP1MdUzj5fDHRDRM3NUt2GDU3FS+dr7RdA
sdXM3jKudhmqRJ/k0xGBsRrLS1p+exrkO/b69yZqp13CYCq9Yz5uap/Im4S1R90C
9TnqNOBvIDLF+7S53H6m551oUeYg6eeXgxm6ZnQHlbCRVE2vdhdsukihylQe+oOC
4R3OscC3ApN5AeOZJVitmn0EX/weqwlPpgbI4VTeXuvQGmSrD/GD464+sJGUP8Qu
lwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 422686655630743520679359915291245889654948
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-10 06:45:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-08 06:45:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aquitania.xyz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30310325156021838431757114342026024320737468983781778130024382142223412909626883187987626235892957624967888305488661237172773093979613326511196142495353399161688277943962160207402032468227644540030866452336887624684126155472814268201152224266330956819298852690239990142542818337350319676512623563220309473233362392788226679424689222925330244981723868764177090752248627191288702653190025297130216276717068542867163377221801038373256887693472196403732257607499061362448595582117169023125807227153423895640262954818625858574848797642154122035225934076509070709710278648717665816673647181796927806466931948664083863318167
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							63528c963b18565264aaadcd8665435b75099870
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (536 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anw.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aquitania.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bodyshop.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cc0group.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comproperty.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dcesllc.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gmohealthrisks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hollywooddivorcelawyers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jtlr.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'muskogeedentistry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'notharvard.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shipit.direct'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shockwaveactual.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tesla.st'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thecolabs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.anw.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aquitania.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bodyshop.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cc0group.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.comproperty.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dcesllc.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gmohealthrisks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hollywooddivorcelawyers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jtlr.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.muskogeedentistry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.notharvard.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shipit.direct'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shockwaveactual.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tesla.st'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thecolabs.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000186ca7b62d3000004030046304402201b28f66b1d58a2c8b00969625e3df10f11eaaced191f80521876b9b6f862976c02205952b8e1749a7b917f46310bb8f52ad9b7ca5dbd08f0552e3ea21da891d3d85e007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000186ca7b62c50000040300483046022100e0ca0fdf561decb6ab0b5f8dc32ab06490a956eb00901d89ab90f0fbc961979302210081e4f15579e8c74830b852032f387a6a566cafceccfab416cf2e59f9cc32492e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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