aquariumh2o.com

Issued by R3

About this certificate

This digital certificate with serial number 04:09:1d:85:ff:24:16:16:0d:3f:1d:3b:c5:2a:ff:ba:a6:b3 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=aquariumh2o.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:09:1d:85:ff:24:16:16:0d:3f:1d:3b:c5:2a:ff:ba:a6:b3
Serial Number (int): 351550928391562878560883365459035212654259
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 52:2b:1d:8e:e8:38:b6:d2:2b:a7:ac:02:6a:a7:0b:7c:bb:57:02:05
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 4c:88:7e:a6:92:0a:dc:70:c0:a9:ce:6b:23:35:4e:dd:ae:93:c2:5d
Fingerprint (sha256): eb:0e:39:30:b2:bb:2c:83:3c:83:6d:32:68:f7:ac:0c:a9:3a:af:1b:19:43:b5:74:bd:32:0a:a4:ec:79:23:e7

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate aquariumh2o.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aquariumh2o.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aquariumh2o.com
www.aquariumh2o.com

Other certificates including the domain name aquariumh2o.com

(limited to 100 certificates)
aquah2o.pondh2o.com
aquah2o.pondh2o.com
aquah2o.pondh2o.com
aquah2o.pondh2o.com
unitedaquatics.com
aquah2o.pondh2o.com
aquah2o.pondh2o.com
aquariumh2o.com
aquah2o.pondh2o.com
aquah2o.pondh2o.com
aquariumh2o.com
aquah2o.pondh2o.com
aquah2o.pondh2o.com
aquah2o.pondh2o.com
aquariumh2o.com
aquah2o.pondh2o.com
aquah2o.pondh2o.com
aquariumh2o.com
aquah2o.pondh2o.com
aquah2o.pondh2o.com
aquariumh2o.com
aquah2o.pondh2o.com
aquariumh2o.com
aquariumh2o.com
aquah2o.pondh2o.com
aquariumh2o.com
aquariumh2o.com
aquah2o.pondh2o.com
aquah2o.pondh2o.com
aquah2o.pondh2o.com
aquah2o.pondh2o.com
aquah2o.pondh2o.com
aquah2o.pondh2o.com
aquariumh2o.com
aquah2o.pondh2o.com
aquariumh2o.com
aquariumh2o.com
aquah2o.pondh2o.com
aquariumh2o.com
aquah2o.pondh2o.com
www.unitedaquatics.com
aquah2o.pondh2o.com
aquah2o.pondh2o.com
aquariumh2o.com
aquariumh2o.com

Certificate

The complete raw certificate details for aquariumh2o.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ixmEytIPLKe5l7EY0Rd
PI+a4RpjJ1vej6cfkijmcQwLSCHk4s3p8z4M7DCTbuUd+6cq69Ufs1oBAzNF3QQ0
wrhhLOYcR6qbbaZe2N+lshIjO7hM2rQW22OYtvnY4up0TQ910vbjFEYtkCLVX7/4
UUQvEha9kMTCaP1SuEUisWcbXEoBassH8a3Nl3eJW7HNMxnpGhdgz3bHngLk1xSk
Q8rhalrNE5XmxfMDpv9b9xDVpe18OGumyvaBAxzkMICsHZYXOJdTMvUaIK2rksEY
GFmA7aWN/BmrttKAGoTbT0RojqOmauffXJ0xfOu8194OqOh15r98JbJWeLFrjACl
fwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 351550928391562878560883365459035212654259
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-29 07:20:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-28 07:20:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aquariumh2o.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26531937872627947833855345438837638573392228228804980066661650314960821845250657592998455055058539693930592062254315301331169908888181732880593542848867155436541262014957582700061338932955577714716085403443741113484692478678796486236433301877454736480970667171785840127389684554122268438258020397386318623014943078634055734893535627106371898485205478721179074592107728633819846575559174012065602160126561066448805149217875696139173685372843196315843782244844524759155745401527240477537812069767756036973253358130813603637351135962042161725777348573517755419891820352663825905624265610236969134691864159585021443745151
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							522b1d8ee838b6d22ba7ac026aa70b7cbb570205
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aquariumh2o.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aquariumh2o.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018f28f132780000040300473045022100af0ab8a50b87b85e2e5b1fa29128a140a6ae195ece253c88affec53c7e2d45810220183dab7e7fcf5b096cfca9e88728e72c6fad1171286f8ca9888239cd9708906d0077003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018f28f13a180000040300483046022100c7a7a6f3fde8745a736b965a858aa970eedba1a1a5d0a07b36fa91978a3204c90221009e2ef192b9110532310c5f9eca40c58155be77d963397faabc6e177224e22842
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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