aoiweb-pro.onelightmedia.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:46:ee:1c:5a:49:ed:a9:75:a4:ea:f7:61:ff:4f:5c:64:69 was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=aoiweb-pro.onelightmedia.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:46:ee:1c:5a:49:ed:a9:75:a4:ea:f7:61:ff:4f:5c:64:69
Serial Number (int): 372585412890089600985398409550708141220969
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: b0:b8:65:e7:68:cd:33:c4:42:45:1a:4a:8b:3c:c5:e7:d6:33:36:9b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 9d:58:50:c8:e0:1e:56:c5:bf:4a:d2:33:02:84:e4:bd:cd:97:53:1d
Fingerprint (sha256): d3:6b:88:ea:6e:fb:b5:83:24:74:b6:e0:32:97:89:26:33:66:3f:83:ed:6c:03:51:cf:97:f4:9e:45:c7:32:47

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate aoiweb-pro.onelightmedia.com

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aoiweb-pro.onelightmedia.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aoiweb-pro.onelightmedia.com
aoiweb.pro
www.aoiweb-pro.onelightmedia.com

Other certificates including the domain name onelightmedia.com

(limited to 100 certificates)
uniq.co.nz
aoiweb.pro
aoiweb.onelightmedia.com
m.onelightmedia.com
m.onelightmedia.com
inavteq.com
inavteq.com
onelightmedia.com
onelightmedia.com
uniq.co.nz
evite.live
aoiweb-pro.onelightmedia.com
evite.live
uniq.co.nz
home.aoiweb.pro
inavteq.com
aoiweb.pro
onelightmedia.com
onelightmedia.com
home.aoiweb.pro
inavteq.com
aoiweb.onelightmedia.com
home.aoiweb.pro
uniq.co.nz
home.aoiweb.pro
onelightmedia.com
onelightmedia.com
aoiweb.onelightmedia.com
m.onelightmedia.com
worldofclaire.onelightmedia.com
ppp.onelightmedia.com
onelightmedia.com
inavteq.com
onelightmedia.com
home.aoiweb.pro
aoiweb.pro
support.aoiweb.pro
onelightmedia.com
inavteq.com
aoiweb.pro
m.onelightmedia.com
onelightmedia.com
aoiweb.pro
aoiweb.onelightmedia.com
onelightmedia.com
onelightmedia.com
inavteq.com
uniq.co.nz
m.onelightmedia.com
uniq.co.nz
inavteq.com
onelightmedia.com
uniq.co.nz
inavteq.com
aoiweb-pro.onelightmedia.com
inavteq.com
onelightmedia.com
uniq.co.nz
uniq.co.nz
support.aoiweb.pro
evite.live
home.aoiweb.pro

Certificate

The complete raw certificate details for aoiweb-pro.onelightmedia.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZiIOsx3j7Z4iZlrF2pO
cn3DNAxVsUSEX7KZzSijfPq5OFBdeXSA13Dp/DUVQq0Rfw33085bVUL9DDXbxXXe
0cBPOx9d8yw0JrZEn6v/7jpEyzbVfGrxzHQMsTZkFtqwbG7sC1mY1FY11UyRVzSh
FOvQ8eIZtfXngvdD7a4c+eewA05s+Stf9s+vcmAxDGJmYbzhoKf6V4jM5XFC7nJF
jToeXS4IBPLAZEdrnHPTBUSmRnvqQZBbLGgs6zgKCAPvLM2NI40e6yXRov2H1Sk5
6T6E2z/Pg3Rl4QY5XU69I2YaCwrIK/dl4kFve2hY0jfdvyY6PF5MSSmkbhWORSAc
2QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 372585412890089600985398409550708141220969
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-21 07:08:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-19 07:08:16 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aoiweb-pro.onelightmedia.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21914443164264768245404490572591026207287660890634744841343291007573736534239922091438983548023806208415252243331284503176348201954682659863082878395371216484871309938041147579862553615074995365460325743778661702426617087212926998750815276405561970544825854900303179222152768636062957293246437031155340185651524469614685074701499342258383714251143929487247701541066235177604984982155277883265935482071399702110859677894095930874505047199335073594698626857846701767745189045440999421272295411355000203808910515396518830008776846979401052206949440714965165005666233187942298832274380442023916954963555323774520763882713
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b0b865e768cd33c442451a4a8b3cc5e7d633369b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (78 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aoiweb-pro.onelightmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aoiweb.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aoiweb-pro.onelightmedia.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016ad96f14d1000004030047304502204ce1a0ea24f58835915069b7d081678cdfb6282d9b1ab0b6765fc470ced4d45c022100d72c66fdf328802dd1b97fcd9e376e74d87d4c18e183dec8c585ab71e8a584f6007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016ad96f14c10000040300483046022100f021a75ed0ca1b32a41aca65878ff353bc0efe777a6daa2a02ad9bb76efe78d2022100c32775fb650f1e0a519fad52d1f8d4b5b48051c28597bed95dadd5af59d67bdd
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0043fc07eb3639417e317c4b532db5c758a61a47c139ddf211b3e8ca15ddd9946c36a691ae2c8e288c354a7b17d04957b43e063e624a082022b04e3ee1145bd7651f69a26fd0199aa9b8ec35e328fa4277554c6525ddae9431be9d952f34ac57f0146691046d7617daa1f91fd341df27a3eb726decc632e80e834f758ace5e69df2c21607e88d7b4b9dc6d3850f4ba2246b2caf4d2e093a79492defb2c3879e9bbb4a1b3ad57a1ffa18825d12098ea3b4c49fca06276bad3f7a6427c04125edf6eb7a91828ec1c2d16ddf20327f8f709248593e3a5827be060c42d014d5aca592d2c127b4997e5c5c1808c62c9645dbd36ea082ca386d411158e3ef3897ea3c350