www.aquaizoling.sk

Issued by R3

About this certificate

This digital certificate with serial number 03:34:5f:6a:e3:8d:80:2a:9f:6e:96:03:99:07:6a:69:19:60 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.aquaizoling.sk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:34:5f:6a:e3:8d:80:2a:9f:6e:96:03:99:07:6a:69:19:60
Serial Number (int): 279158372533553928292099900093494700087648
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ab:ec:1d:d0:e2:d4:eb:32:42:aa:3c:75:fe:1c:49:19:03:f8:63:41
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 0d:b4:52:16:f5:4c:54:cd:b4:28:5e:ae:53:40:31:b0:3e:7f:20:69
Fingerprint (sha256): ca:c5:0a:4f:bf:a7:6f:43:07:c2:a8:73:ec:64:24:fd:03:3c:bf:1c:ff:0a:cd:e3:56:1e:cc:d2:11:8a:40:9a

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.aquaizoling.sk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.aquaizoling.sk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aquaizoling.sk
www.aquaizoling.sk

Other certificates including the domain name aquaizoling.sk

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.aquaizoling.sk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAwIKd2j6QVIqsq14ibRFy
l0iavjd11Fp5fFgYaa/nF8Opd/qeSc8E67x6wa7eBpNFTmbRkL0/Dk+BeDQzXYeo
uqpvXnztVym5GLb+ufTpWaKtxqWlcOol7qlx8/U4KQ8TrUM6lY/1fYk7R5wfiiHm
PNt0SYQ5BBhva5FUxxTMDoOVCbkbtV0L3NlIBQuZwSljlNDGzcH3jrDty+8JNyRB
Q6ZMSPlo7Ut/dQvuQ6HGoxVy5ezxOj1i3t2nKDvWsJwDU369NbGzRES/IW4Iu6xC
PVM+X8utyRGUqWWgRjldFH6iQ/MzjAaj2cSjplCMPazkEGbu3m7d8oRjf50PHqHY
9dOeIdUCDTNb7wf4P1FvPpW0D1DzUpoOnLIAHZmmcu1yv96MlPKMg0qZ8w1Xs3yE
20IOBdQPy7U7Oc5viZZgUQmx1BCFHJxeEELIYaFSMnpd+sj1VkmpigjKeDydotxY
b2vpOhH7VRrA4f+QrgPfAmtrj7E8lwerNj/MWav8OuugYOA3jB+m8lgV+LLJIebJ
zLXU+WkQ0upZGMwcMXzYpgp0bdL9yj3J6S9awPA29tQNAsIMPwmUCKs8wov4s6o3
scfHC+AfbT8M40xHi6994R2A4GX72QNePnYRsvEWLuc1GQaRHfWTnSeponj09SJA
Xxo76k0kgN0cD785P5L8XhkCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 279158372533553928292099900093494700087648
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-04 06:25:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-02 06:25:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.aquaizoling.sk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 785373181699954000715981391307198383734184342138478829228289926337683610429585297565295519856750884212924202312975748190581005033921924491767903366209734266446596786248976730342854369608795764190984419658590806567282409931355575958400320064600225854919497917598400103075483062253808586843914675337255692363608632059186259284912804208309516572782982064597057601999597819458417001094930990719929274839959833052018927861925364073143678546328090124247845357879592060997158111247494800420369695873126129802926370793216066849663894690131615892519540407813108382826516589716644236231318048767366886163812014113016749847842505329876204508581611621258572138787064994864220035105272033902424744737402876166251265122986498452262480769216090703973260225688246144130613744651421657598536919871946685878540116923801756760865004872253011030258668770146282960387487121231993052946748360440424178298346323884527675613522430980236911141682672400396663604494965585371547794731993676413946379426510512196697016507590998378555122126681709485310416917126595142036131606771995587976728934436124990852813418883770092666727735868892855115342863247426489434118231843950328316442010546118803771942735469742567600774836213001571966313144758669869323320425209369
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							abec1dd0e2d4eb3242aa3c75fe1c491903f86341
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aquaizoling.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aquaizoling.sk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000189bf6fe1680000040300473045022100e13f898cb08729a0c80e4c12b19d3ff165a59e5c65416358707f82e3168256d002202a769b1aa0a99b739128262dd947e45773f8afc09594bcdf8564dfffaa061357007500e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000189bf6fe1600000040300463044022007c47dd0c6533f1856d045db655bd7402846bfe2f358a4cd45aa4d9601798c25022061fe3f6095cf77c0e680b617670a0286d998cc0a443ba42a3add22eda2298a22
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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