aiming.org

Issued by R3

About this certificate

This digital certificate with serial number 04:f4:84:54:22:b6:86:a3:79:8e:b1:b6:a4:5c:c7:13:79:e6 was issued on by Let's Encrypt.

With 13 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=aiming.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:f4:84:54:22:b6:86:a3:79:8e:b1:b6:a4:5c:c7:13:79:e6
Serial Number (int): 431653936208192818214319250286129578211814
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 96:39:46:71:c0:ee:52:d5:16:ff:9b:27:00:46:4f:23:a6:f2:f4:5f
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 1b:9b:e0:a3:b6:4c:2a:05:66:62:a6:92:63:c3:48:8a:82:b9:93:3b
Fingerprint (sha256): d9:48:e9:c3:03:ef:c0:ee:11:df:96:7b:13:68:8c:00:2e:21:94:8d:0c:72:f0:ac:e3:d1:ed:1c:89:5e:22:1d

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate aiming.org

13

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aiming.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

177academy.com
addatab.com
aiming.org
avantgardecreations.net
flyovertwins.com
gypsyai.com
homekitchens.com
houstonpetgrooming.com
jesusfamilyreunionremix.net.cpamarketingcourse.com
sultraid.com.orderdollar.com.norwaymoney.com
texaswomanmagazine.com
usahalfmarathons.com
visitsanantonioriverwalk.com

Other certificates including the domain name aiming.org

(limited to 100 certificates)
leaselock.ca
dumptruck.ca
allanblock.ca
theqtree.org
leaselock.ca
sculpit.space
proassislife.ec
musicoldies.ca
geothermal.world
dumptruck.ca
dumptruck.ca
xian.bible
umidigitalfaith.net.flanaganleague.org
hb.ninja
justwanna.world
coal.world
sculpit.band
real.finance
detroit.world
dumptruck.ca
allanblock.asia
grocer.cc
youtranslate.bible
xn--lgbt-lge-c6a.de
detroit.world
bestmile.org
chicago.world
allanblock.ca
dumptruck.ca
allanblock.asia
fc.vc
tryabsolutetruth.com.aiming.org
dumptruck.ca
wiwak.vc
detroit.world
wuoa.org
detroit.world
aiming.org
thejewishmind.org
real.finance
dumptruck.ca
real.finance
leaselock.ca
aiming.org

Certificate

The complete raw certificate details for aiming.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQvFXAbAs4+/PeTyCq71
qoDry9QZ8NRe5qPoR5agcsrzUY4NkDkUQUiGKlmjlrs8uZL9S3jctC5uFadh7JXE
tkHNKJb1iX4fkIJK+5SLR0FpiTrgGvoRlba0/wEiDxth19MwjyaACxzVAr4H/PAs
VeBYXrfLB/bhmUganlehTDjRtCh/kAqsO0KssaXfPPtewsFiMoWrJ24A4Iz5DNeZ
GVMqLjQyDdj5jlzW3TY7oBYLH84xlcDqiTSyNG2/wa1ottsuXirz5/7z1r8vpaM+
Df28tTyqPxtVEXryhgoGTPKZErijTz0Au2E6k8lpSlVyJ20N/oMI2PGEKMaAGHJn
9QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 431653936208192818214319250286129578211814
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-10 11:59:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-09 11:59:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aiming.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21845031223739363030872048596399927086627451395373805743518803724936521032780948312312936653674412689448049676145898870168860614303935866864733758015298198293046803251961967443036852655821442778531973758618810069771230005692668352038869605332488937057921909927913303055365811146385371616067807377491427438627841323100080477116359147580639062444370364840831033984853399912432955496915583089940876349727010558073899283428596899206412573431023356997748038119261256275397043887463316879094163033426898565752554845798839426200627665190365736441867880493604037104917418421371636441979054603170325104335748919704970434078709
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							96394671c0ee52d516ff9b2700464f23a6f2f45f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (317 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '177academy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'addatab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aiming.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avantgardecreations.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyovertwins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gypsyai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homekitchens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'houstonpetgrooming.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jesusfamilyreunionremix.net.cpamarketingcourse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sultraid.com.orderdollar.com.norwaymoney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'texaswomanmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usahalfmarathons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitsanantonioriverwalk.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018a7f2d72350000040300473045022032eb0fde107bb96813c55130b3584ad5013de749aeeb7b51ab940458e2d7cceb0221008a698e8acc9fb057d68185428f6dea01f7907d3d94ecce94f287cb0d1b5387a00076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018a7f2d72410000040300473045022100af42677d1061ac48af176c9b5fe4d9f09f9b15cd77e9263a67613d64d090128602202b9b3c3e4768bbf415e6b26e0d737a3590fb6ea87276d598d246b5da198f5018
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0075247474d31aeeb830f9d66acb51d21e8e16823978b4b30e2865a28cdd56d8452fc9b60955f6181ff5522c0c15771aed86641b785f3e7206e5fc3f1f7e79e74d95b1f7d4ec27e36d53e02e3c7716aafbc5a33dc86b86d024e9322ab1c51ac7fdfa6eb7a39ebef30d369951ca09032b103c67bdab66ba356864b46159989dc5a097d0a300180e40d129a48b783ea45696aae6bf07dc47cd358cc22f3c8d451ef8979539483dd6e4b432d24afbebdc900f084113dc5488a76e3915e2fdad0542ef6ddac93ee00a8e140f8ef2c146b68b96d49e0489ea6def4cfd064f0c6599152338fd29cd58169bd12bd920f1ada723d4202449b2e41b3de2d6d28aee756ea72f