www.aligncp.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:d9:08:60:c5:80:81:11:35:0b:c6:60:14:4d:d9:c6:99:47 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.aligncp.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:d9:08:60:c5:80:81:11:35:0b:c6:60:14:4d:d9:c6:99:47Serial Number (int): 335189267707404926271572985621009005975879
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 6a:b0:ac:df:86:57:2f:63:70:fb:bc:65:b3:45:c7:e6:27:4b:d0:b8
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 75:a3:57:60:e1:bc:85:2a:0d:6a:37:25:15:7a:0f:2e:ac:b6:34:69
Fingerprint (sha256): bf:c1:e9:3f:10:22:c1:1e:eb:e9:48:c3:2b:ac:63:f3:44:69:0b:fd:9d:b0:c2:eb:3e:18:40:f7:58:60:ad:50
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.aligncp.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.aligncp.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.aligncp.com
Other certificates including the domain name aligncp.com
(limited to 100 certificates)
aligncp.com
www.aligncp.com
aligncp.com
aligncp.com
aligncp.com
aligncp.com
aligncp.com
www.aligncp.com
www.aligncp.com
aligncp.com
aligncp.com
aligncp.com
aligncp.com
www.aligncp.com
aligncp.com
aligncp.com
aligncp.com
aligncp.com
aligncp.com
www.aligncp.com
www.aligncp.com
aligncp.com
www.aligncp.com
aligncp.com
aligncp.com
aligncp.com
aligncp.com
www.aligncp.com
aligncp.com
aligncp.com
aligncp.com
aligncp.com
aligncp.com
www.aligncp.com
www.aligncp.com
aligncp.com
aligncp.com
aligncp.com
aligncp.com
www.aligncp.com
aligncp.com
aligncp.com
aligncp.com
aligncp.com
aligncp.com
www.aligncp.com
www.aligncp.com
aligncp.com
www.aligncp.com
aligncp.com
aligncp.com
aligncp.com
aligncp.com
Certificate
The complete raw certificate details for www.aligncp.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGCTCCBPGgAwIBAgISA9kIYMWAgRE1C8ZgFE3ZxplHMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODA2MTgyMzUzMTJaFw0x ODA5MTYyMzUzMTJaMBoxGDAWBgNVBAMTD3d3dy5hbGlnbmNwLmNvbTCCASIwDQYJ KoZIhvcNAQEBBQADggEPADCCAQoCggEBAMwcM9+N6ftbkmV2H/iEqN4GX5gfXvS3 fQmPuER8LrZEq9i6qbNmM1EXYodaWpg0K/3UONH3PWkS0yHwHq3JQMAGReboRAvo Dqp4eqjromtzGEjoaANgNeHN8auHIfHUuRqiIVpAV3GZ7uVllzn5SZXCuN/Oys39 4y9P2IKEwyqYQieVUbnK7LOYYa8xCad2/n0Fyc3O7z6BTuh8vUv01AtSHPJkRkge rn6n8bRP9FDni2XBDnhpRzifQlQRF98K0M4FHcQJPICe7AEpqHmou22qh2zPdqMo rwdnwZJG2FwTADjBcFtDKKs4Ox0hTe4+JrwHNXRFKcPWZNr2aXFfp5kCAwEAAaOC AxcwggMTMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYB BQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUarCs34ZXL2Nw+7xls0XH5idL 0LgwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUHAQEE YzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5cHQu b3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5cHQu b3JnLzAaBgNVHREEEzARgg93d3cuYWxpZ25jcC5jb20wgf4GA1UdIASB9jCB8zAI BgZngQwBAgEwgeYGCysGAQQBgt8TAQEBMIHWMCYGCCsGAQUFBwIBFhpodHRwOi8v Y3BzLmxldHNlbmNyeXB0Lm9yZzCBqwYIKwYBBQUHAgIwgZ4MgZtUaGlzIENlcnRp ZmljYXRlIG1heSBvbmx5IGJlIHJlbGllZCB1cG9uIGJ5IFJlbHlpbmcgUGFydGll cyBhbmQgb25seSBpbiBhY2NvcmRhbmNlIHdpdGggdGhlIENlcnRpZmljYXRlIFBv bGljeSBmb3VuZCBhdCBodHRwczovL2xldHNlbmNyeXB0Lm9yZy9yZXBvc2l0b3J5 LzCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB1ANt0r+7LKeyx/so+cW0s5bmquzb3 hHGDx12dTze2H79kAAABZBWIAxcAAAQDAEYwRAIgB1cARrSLcIsUZ8xzPYqkl02w zjgYRzmf1PFnO1pkgKcCIGE56FHivQ9UJxEugyyphUGHMy1hfe/sj5DtCumI6w18 AHcAKTxRllTIOWW6qlD8WAfUt2+/WHopctykwwz05UVH9HgAAAFkFYgDJAAABAMA SDBGAiEAwO1DZb1eKtIWtIacKX6KqEVuVfrBRERtzChA+aqLMWcCIQDROZG07HXi 4MG+Uwmh0elWYNn5qXzJ0rUtWYpRQAvjujANBgkqhkiG9w0BAQsFAAOCAQEAMc3L YHV+d1vwt4iKQzSDnVScmjViAABac4QfTzKb2RbAs1blrCus+EJCldHkEDWWjT5f p37C3XEJzID1j3r8iqsyNjXGnduQvKuiICACguvabZ9prtzajyWMMz1axg2y7S+B /W5iLbH7iD00sSbducHFCBryeO1EzbiQCd5mojTJ+e12euP9s3NcnbaK9wD7CuH5 nK9vDFgc3kPzvj4dg1jez1S8eiGpLsiB0k9QrMNfTu4MkxXcXVXn09Ka9fxEBztK GPCDJ9y69uJefu3zUvn2YgmIWdKMZeWjvr5JreM+nC7wg5ZgMlZ93QZxTCjNk41a 0jQ0CjLQ9KdgpT6mtA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzBwz343p+1uSZXYf+ISo 3gZfmB9e9Ld9CY+4RHwutkSr2Lqps2YzURdih1pamDQr/dQ40fc9aRLTIfAerclA wAZF5uhEC+gOqnh6qOuia3MYSOhoA2A14c3xq4ch8dS5GqIhWkBXcZnu5WWXOflJ lcK4387Kzf3jL0/YgoTDKphCJ5VRucrss5hhrzEJp3b+fQXJzc7vPoFO6Hy9S/TU C1Ic8mRGSB6ufqfxtE/0UOeLZcEOeGlHOJ9CVBEX3wrQzgUdxAk8gJ7sASmoeai7 baqHbM92oyivB2fBkkbYXBMAOMFwW0Moqzg7HSFN7j4mvAc1dEUpw9Zk2vZpcV+n mQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 335189267707404926271572985621009005975879 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-18 23:53:12 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-16 23:53:12 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.aligncp.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25766521448218619029359632515819551979753267381913947250000932507444263397421033576199200365226774465953217648561084163389299398573175075770586412341799279269140730740549356876606728619503038054230603958325824887126227104550221168769981545419139601408315052920793242644565524954656184745096171274784931355118230053231654675316855587134580057554250619746316121329755548536771885278463812762159887290026418931662877327185520573574028077120139572639715316585173460489872853674767133227124665835984263792394228470078642132123518537052187536872802690756528022362500765874973197767849870815479254248273870478881527412271001 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 6ab0acdf86572f6370fbbc65b345c7e6274bd0b8 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aligncp.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007500db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf6400000164158803170000040300463044022007570046b48b708b1467cc733d8aa4974db0ce381847399fd4f1673b5a6480a702206139e851e2bd0f5427112e832ca9854187332d617defec8f90ed0ae988eb0d7c007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000164158803240000040300483046022100c0ed4365bd5e2ad216b4869c297e8aa8456e55fac144446dcc2840f9aa8b3167022100d13991b4ec75e2e0c1be5309a1d1e95660d9f9a97cc9d2b52d598a51400be3ba . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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