azoresventures.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:eb:33:b3:16:24:80:50:2c:ae:92:88:e3:34:42:3f:bd:94 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=azoresventures.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:eb:33:b3:16:24:80:50:2c:ae:92:88:e3:34:42:3f:bd:94
Serial Number (int): 341371934519728923434605716846548413824404
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e5:28:b1:cd:6b:7b:53:56:4b:31:34:df:a7:00:19:a3:d8:c6:86:20
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 93:d7:aa:a8:bd:3c:c2:5b:de:39:c8:1d:5c:40:bf:1f:d8:32:ab:1c
Fingerprint (sha256): b5:e2:bd:04:56:9c:2b:0e:09:84:22:64:93:c0:17:92:6a:1e:c4:aa:d1:f5:60:c2:1a:e2:20:d9:14:5a:f4:c6

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate azoresventures.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for azoresventures.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

azoresventures.com

Other certificates including the domain name azoresventures.com

(limited to 100 certificates)
shop.azoresventures.com
azoresventures.com
azoresventures.com
azoresventures.com
azoresventures.com

Certificate

The complete raw certificate details for azoresventures.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAmmEhvkVBv2C5/GfCc1UR
J9UB3BS3UQcarYL5/DjFfyIKIeHy4zGXP8mcL9GqlTgb4ayVBD+uazFYkGW/DD7G
nlS0M/Abri8zYrAmITyT9O6wRxaFth1Jw+I7NIc48mFaYMqP1HrwMbIRTKtgx0o0
cYWK1vYZt0CvBjRVPoHYNW6YBVB5jQjV31Il6DRiG+s0XMyIXOzBgvcdNheRSq7q
tLitxxJaZBlzfZy7egxASfdlGdmmzZO/pfVMz4aJJ9VGg1LwO+oVfYE20RtHSVVh
1mYolQ9fofKR4HaD10dwm/UR+tDeP+AgALsYizJNj9LnhozOx/FMlTZjn8S5R5dA
pj3viNKT9U4stJ/d+BkyGWyYSZ6DyeBtfN8jp/BxHJOju4NDlmQcDI5YoAUjEqI1
pL6HGg/C6MoeTqRaM0q5IpqdwfQjZMYfa0pVwGQOCVeWRBle8Q1iFSZM8hPZ/2Hi
s3ytQry6hKWyJ5cOoEW5J2ssRfSUg14fJlcmulRAIl0NrSEsuW9qp4dUcWpw8QeY
BsAmmOh9sz90BSL+4ajihVNsGAP+1isMh4amZjrSTReNTnjouaFCqzo304t0AlBC
+bXVMjbbqVLODtz10lCMLXCCi9CvbdyZnoMtNjTXJHD3CL3KTgWOI4GPkB9pP9SW
Vgwf60BL42iQT0uPyCrliRsCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 341371934519728923434605716846548413824404
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-28 01:01:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-27 01:01:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'azoresventures.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 629813089641655635415288702442078689254510269491373906255176896853480755190213602886622911221779893847127553928421157848514194508914472902620600799440049069104043096801964906217246726022480218347667135320940909572278845585902929983679968783227865990912923982266960075679991201063147527915406969330111447269565960675948345821760515016518606624682393806863657923966252465296118623662275558567650201123116886288936372398792407671499225006216623598146693199948237611698012941110196206958414118623108751735153331301504561670074035496676777384719769614968591263432590419916886970428985153506358095637881874379688452391303381729545960161154529994734133911962268755001514560946970284576730746493558622382523479502335769647256450135911042985133366658638675713225663020064182900012103537671170498864204651442783477123455273080147698569741108186589046421853089852232699964559396537858146974804351552626362678882399465001013261049555340687190485474038998398520782790207067814688802336339055011576389772717836867822344920219645552662534988996574555219101770180520744074899875635004337146638571427300471883810561635370630090816602624027925375091926335036607458547956139648323347992105528646590232696426201716407239331913987605290985665563311048987
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e528b1cd6b7b53564b3134dfa70019a3d8c68620
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'azoresventures.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016fe9e17ec7000004030047304502207e1528c6a8025bc9252069cd498414c00bdd5314eb0579932d291ff78354be9c022100cb39912478860a2400bec8bd853e0c32fa4f44c3178098727d06559201e15715007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016fe9e180e2000004030048304602210090422e64a5931b01c51d2d2ef052ef6a61ddf2d6629a8676e7cc39e76cf9154c0221008771d85395d6e83a532b5d9ba6a17e4414bdafcfae842a312cda40fa73622c2f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0099dd738e1b98d3d3a45063a74b032932892648224a1f1032e06987886244acc955d2cd8fff8c7887dfa2414486f460147e8a3289c999afa2e6e333992fe372a7a394ab7a7b8c516edfe4682f7afc70227ea5e5c3501b1bb21a1c37fafa9420b0a2cf2031477e4317f4c6f683c37f8cd3d2780b8a6bedffc01ae33e61fb29c7a437bd847df24b723664726aaabe928ffd8c4b13722544b3aba19c330c1a11fea6abfd5892c6277ff86b7eae0622306603a3b4b28536f9a436a8c64faff0029c8bf1deb4dd204576c5fa72855d73a883851592b44cf29dc21ba653f33c91ff87a2a3fa8410188118c6b4aef65eb6f61dc30f5cb5ca247c832380683b8c5cf83dd2