www.aquaviva.appladesign.net

Issued by R3

About this certificate

This digital certificate with serial number 03:75:ea:0f:63:06:e4:9b:d1:ff:40:d1:05:50:b4:26:62:5d was issued on by Let's Encrypt.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.aquaviva.appladesign.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:75:ea:0f:63:06:e4:9b:d1:ff:40:d1:05:50:b4:26:62:5d
Serial Number (int): 301461013969001759195785896504880399802973
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 79:f0:23:aa:47:74:09:7a:0a:47:10:ba:48:a8:cc:33:e3:22:2d:f1
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): de:d0:74:58:1c:b2:20:24:ae:df:15:c3:5a:4b:df:f9:67:44:00:f3
Fingerprint (sha256): e8:2f:81:27:55:5f:ac:e9:78:cf:5c:bd:d9:f1:d2:ca:37:b2:64:56:33:bc:9a:db:a0:2d:92:d8:1b:b6:00:0a

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.aquaviva.appladesign.net

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.aquaviva.appladesign.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.appladesign.net
cpanel.aquaviva.bg
cpcalendars.aquaviva.bg
cpcontacts.aquaviva.bg
mail.aquaviva.bg
webdisk.aquaviva.bg
webmail.aquaviva.bg
www.aquaviva.appladesign.net

Other certificates including the domain name appladesign.net

(limited to 100 certificates)
*.appladesign.net
intoquality.eu
uk-train.eu
aquaviva.bg
uk-train.eu
portmoneto.com
sosbg.eu
sicily-transfer.eu
innowork-project.eu
innowork-project.eu
aquaviva.bg
techtrain.eu
automatic-project.appladesign.net
sosbg.eu
descoperabulgaria.appladesign.net
ariale.appladesign.net
osanna313.com
uk-train.eu
automa-project.eu
el-vision-project.eu
www.restrain.eu
kristalnavoda.com
icreate-project.eu
ahead-project.net
restrain.eu
investirai.appladesign.net
prohear.eu
mirmi.org
portmoneto.com
ahead-project.net
automa-project.eu
ariale.eu
coled-project.eu
www.appladesign.com
el-vision-project.eu
ariale.eu
appladesign.net
investirai.appladesign.net
mirmi.org
osanna313.com
www-applades-com.appladesign.net
osanna313.com
mirmi.org
mirmi.org
ucc-bg.appladesign.net
portmoneto.com
mirmi.org
intoquality.eu
innowork-project.eu
icreate-project.eu
ariale.eu
osanna313.appladesign.net
appladesing.appladesign.net
jobassist.eu
sicily-transfer.eu
prohear.eu
descoperabulgaria.com
icreate-project.eu
techtrain.eu
portmoneto.com
restrain.eu
techtrain.eu
www.appladesign.com
aquaviva.bg
techtrain.eu
proconsulta.net
el-vision-project.eu
digittrain.eu
www.sosbg.eu
intoquality.eu
kristalnavoda.com
appladesign.net
automatic-project.appladesign.net
automatic-project.appladesign.net
innowork-project.eu
descoperabulgaria.com
eaqom.eu
webmail.icreate-project.eu
intoquality.eu
techtrain.eu
aquaviva.bg
mirmi.org
automa-project.eu
appladesign.net
appladesign.net
sicily-transfer.eu
mirmi.org
sosbg.eu
uk-train.eu
restrain.eu
proconsulta.net
investirai.appladesign.net
kristalnavoda.com
ariale.eu
proconsulta.net
uk-train.eu
restrain.eu
osanna313.com
automa-project.eu
uk-train.eu

Certificate

The complete raw certificate details for www.aquaviva.appladesign.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvjFlW3L0SzA3ZmZJQDL
XEzQcis0ofVMsh4DdhHzpZvGfRitYaS26Ej3vb/tutlO2++uv2afIR+eP5woJFom
MW4652sP4svculZTn/faBhDdIASaWIh8Wo1DIr4Js1TJWkwlESIQCghJSd8r0hrC
SEibk+VWAedYSmXPBSaYhdSwFhBkH2yjJz5nFeMIzFpKBOeZxr3RKQrKt2VvBENj
yzi7i1F2UszVYziPfvWBxG9Iv/4nJJywCMNq2TKEzztihXeTSihJ7+T+uIQhB/ru
NZo+lakwEGnrcFDyQ/LZEMZzJSWagQtgdcc+xemOiAou/Gk6XticzSwcdmiSi0QN
zQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 301461013969001759195785896504880399802973
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-04 05:47:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-03 05:47:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.aquaviva.appladesign.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23098045456122108331790664362315171862875134074828668855251722604773199525407314807629743781245950602082727997904736677716018541520761645794785320047730442339273650702284706677681610726278416519638460684627578188766329111010437706929863782925735089605466234526330018844143736119144990898546904829400193092030550910893694433310714897501943549256879969556499278616740671902989600590693994201044908819905618351297213997499730089126591414579009191948150340193037915940267641785133289515166915161532190156789153037476999721293456509323430149866339137033251870483464397794588071649763938792118027644219205321181850868387277
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							79f023aa4774097a0a4710ba48a8cc33e3222df1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (181 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.appladesign.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.aquaviva.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcalendars.aquaviva.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcontacts.aquaviva.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.aquaviva.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.aquaviva.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.aquaviva.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aquaviva.appladesign.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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