aimyx.com
Issued by R3
About this certificate
This digital certificate with serial number 04:e4:49:a6:96:57:2e:5c:f8:23:3f:6e:78:2f:fa:de:1b:ac was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=aimyx.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:e4:49:a6:96:57:2e:5c:f8:23:3f:6e:78:2f:fa:de:1b:acSerial Number (int): 426131421999254411286169164381207488502700
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: df:31:68:bd:64:a5:44:e8:1a:ca:f8:ba:78:cc:1a:a1:6b:97:5e:ae
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): ba:64:4c:80:ce:5b:c9:4d:9a:a2:d0:f3:5f:f1:c2:4a:e7:5f:15:d5
Fingerprint (sha256): bf:68:a6:c7:8b:3e:cf:8f:96:ac:88:8e:21:2d:b4:33:26:2b:0b:87:ed:f8:06:0b:94:ef:96:c7:97:4f:f0:8a
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate aimyx.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for aimyx.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
aimyx.com
www.aimyx.com
www.aimyx.com
Other certificates including the domain name aimyx.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for aimyx.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF7jCCBNagAwIBAgISBORJppZXLlz4Iz9ueC/63husMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDAxMTAyMTA0NTFaFw0yNDA0MDkyMTA0NTBaMBQxEjAQBgNVBAMT CWFpbXl4LmNvbTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAL+w27af r1P/ph0JNWFpBrkkRbIN3nwznL3ujQSHa9nOwcmN44jIJ6qOJrCMA7+m9d1lQfqF CHRPkSWRIBUwX1NzmocodeWrvbxBK4JaOhaVJK2j0h2B9C9ss5Xl5bc5kDbMX5DA pW8Ulg1wRo9BXrjKColy/xPWZW3jh5IQYQWiQqit0bF4nqkyFU+OtIVFeEYnsXk5 QLp4MEWobChe6mEue3KJ1QZnqjXpqlAIDjp6Mirxt/z2k4VFtCWUzsFvARNTD2yY lGbwLnWsX7WX0o+JJjgiZy35/zXjYHqMQ/CmOyaF0LnyKfWCthwVO5PQ+IpYdRYD w7t32WdMwYjz/HJjgj5teSTWQLdD2fiI/b9cWNErgzABu7V4Yh41L9t2Rhlko+1R fyIkCa22zPYJO01CzUBuouyRN1djOGpRdE5quD/k7h5faBhpP5lR7ITLEPDTvpt/ zBpzG9jf56LjtZSTWmLnIUFW9JEy6SGXc71Tf5CgPGHPqpipzC3EMnWD9teIdnxc 622x8i735050Pctzkl0kog6slrywCZwbcwyRX43V1H7/GY2apcQkWXgtYABT9qQv zeUssNYtr7zHUMVOyEI4VpRWhjs9ssH6Qi3dPO0xZ7oWafWJ0ZivsS4cqPjWVA6k 2MBqID2EojTb9nTMZdtjATCpy37r/hQew9ABAgMBAAGjggIaMIICFjAOBgNVHQ8B Af8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB /wQCMAAwHQYDVR0OBBYEFN8xaL1kpUToGsr4unjMGqFrl16uMB8GA1UdIwQYMBaA FBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcw AYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMu aS5sZW5jci5vcmcvMCMGA1UdEQQcMBqCCWFpbXl4LmNvbYINd3d3LmFpbXl4LmNv bTATBgNVHSAEDDAKMAgGBmeBDAECATCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB2 AKLiv9Ye3i8vB6DWTm03p9xlQ7DGtS6i2reK+Jpt9RfYAAABjPVoIlcAAAQDAEcw RQIhAPp5KbPuuOE9E5PqXweUmhGS1B5xlF5ZHJL/5Dd6UCD2AiBEbWaAouCZtUWK TvDHaJMLzkASJaFpK/0zPm4r9x+Z5wB2AHb/iD8KtvuVUcJhzPWHujS0pM27Kdxo Qgqf5mdMWjp0AAABjPVoIqgAAAQDAEcwRQIhAL6uXH6u9HtRUE3Ukic/nQBOnkcW XZ6FYocd7E7GK8uhAiBBpqnRxYH4TipiTV6SylmsYbYXor1ie55zb3RtXZXkRTAN BgkqhkiG9w0BAQsFAAOCAQEASE5VbLfsnLOMqvtkmlkWh6v7+JjcmalT5jUN+a3I YQt2FsgdR41GdxOwhHUn9MB4W+pyB1JHHG/jf+93IiAT0l+xnTOBp3tt/DG8BdWi T1GQ39Y3EjoQ6C6DcZNTOPXOOoyni1ieWcXXtf0XKl8Dn/2uMBXYZ2EDm2QflTxB VJEx75qNIF7jzQstJ4r4j9eOw8AbelsbSVTqEAG8HLTrZP2JXe6ZjWLh3H2JnjhP 8sSLHc3RrVmtHwe0AOoEyQEeWztriYz7mb4xXheLFSenPOsNGQgOV2DND59j2CMa ER2poBY9Ycz2mMbUs2EPNrmQ03R4/1zhiQY8wFz8LqbwAQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAv7Dbtp+vU/+mHQk1YWkG uSRFsg3efDOcve6NBIdr2c7ByY3jiMgnqo4msIwDv6b13WVB+oUIdE+RJZEgFTBf U3Oahyh15au9vEErglo6FpUkraPSHYH0L2yzleXltzmQNsxfkMClbxSWDXBGj0Fe uMoKiXL/E9ZlbeOHkhBhBaJCqK3RsXieqTIVT460hUV4RiexeTlAungwRahsKF7q YS57conVBmeqNemqUAgOOnoyKvG3/PaThUW0JZTOwW8BE1MPbJiUZvAudaxftZfS j4kmOCJnLfn/NeNgeoxD8KY7JoXQufIp9YK2HBU7k9D4ilh1FgPDu3fZZ0zBiPP8 cmOCPm15JNZAt0PZ+Ij9v1xY0SuDMAG7tXhiHjUv23ZGGWSj7VF/IiQJrbbM9gk7 TULNQG6i7JE3V2M4alF0Tmq4P+TuHl9oGGk/mVHshMsQ8NO+m3/MGnMb2N/nouO1 lJNaYuchQVb0kTLpIZdzvVN/kKA8Yc+qmKnMLcQydYP214h2fFzrbbHyLvfnTnQ9 y3OSXSSiDqyWvLAJnBtzDJFfjdXUfv8ZjZqlxCRZeC1gAFP2pC/N5Syw1i2vvMdQ xU7IQjhWlFaGOz2ywfpCLd087TFnuhZp9YnRmK+xLhyo+NZUDqTYwGogPYSiNNv2 dMxl22MBMKnLfuv+FB7D0AECAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 426131421999254411286169164381207488502700 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-10 21:04:51 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-09 21:04:50 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aimyx.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 782030449540245402718579995637512941221450330825388300771765490071781877836162484372879753216573824079947446881674912965977449467249888257833544588439854109301012313138411647790063920995825466211616397061897944874479541348302848306373883968954455731608014745212682098650315645536377273129204073952404049576405596616827324437858106976591699482152981246399740779291470995834823405350468109579864921222627642427354540961499447361816826332720749393959424742171504795776052372911497800035824555993848749016508196673204137953690940642694080428175844511697443585834818961701448992242598492837893273171934799480047371516459536626253485330298020563029724885447329835554900662501823642243211747472041903223440359511213944999314712923685921244767041403500822911820960776798181398216048801063277707674388400757451897082449646150056722074676801152699355964912184658481893067558477342332326960194661321272800318560448779197517079795805834523830562307295762846679542961004481288174524336995311249936392889923425668070691627303284338945732321386149600208931604922236120921512864337284746109054256653445202336646541492970131740566125195128771058435030565529605999402247077348938235011587544837712057073735591041397834384887183750567985078100637765633 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) df3168bd64a544e81acaf8ba78cc1aa16b975eae . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aimyx.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aimyx.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018cf56822570000040300473045022100fa7929b3eeb8e13d1393ea5f07949a1192d41e71945e591c92ffe4377a5020f60220446d6680a2e099b5458a4ef0c768930bce401225a1692bfd333e6e2bf71f99e700760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018cf56822a80000040300473045022100beae5c7eaef47b51504dd492273f9d004e9e47165d9e8562871dec4ec62bcba1022041a6a9d1c581f84e2a624d5e92ca59ac61b617a2bd627b9e736f746d5d95e445 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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