aqua-scape.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:cf:24:bd:02:fe:06:5e:58:af:23:56:59:61:d6:66:7e:15 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=aqua-scape.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:cf:24:bd:02:fe:06:5e:58:af:23:56:59:61:d6:66:7e:15Serial Number (int): 418936427292320512031071902535036439002645
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 00:54:bc:49:f5:65:9c:13:84:a6:3b:9f:de:78:b2:8a:d3:de:51:1d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 08:68:f9:6e:f7:d9:5d:3a:87:61:83:60:d2:fc:6d:5e:fa:b3:34:fd
Fingerprint (sha256): f1:73:55:4f:76:f9:98:b3:ec:45:bb:c9:17:35:bd:fa:23:f1:0d:32:36:a8:83:a4:42:fc:a7:d9:51:84:d1:19
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate aqua-scape.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for aqua-scape.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
aqua-scape.com
Other certificates including the domain name aqua-scape.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for aqua-scape.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgISBM8kvQL+Bl5YryNWWWHWZn4VMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEwMTMwMzEyMjFaFw0y MDAxMTEwMzEyMjFaMBkxFzAVBgNVBAMTDmFxdWEtc2NhcGUuY29tMIICIjANBgkq hkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAyjkMr4Am9ujTUgQ/EOPqioKxpNvqiBwQ /SYJwupWPRrOdFqwrr6Fuh9KKsvsaTXsAx5lJx4XLeMtQmKemMwoeWGuEcUi9B1Q PZ05wQoBguXvMHjbrq5p4wSl0Ur5s+x6SOf54J8X318v7xNaD5wGUq68p6Pe8MTL jQO7Q+PXC1+SMn17Leil6klGo3Xfs+K7dPBnGZ4jhAo6FsF5n83SxP59Z1D0HhI8 oEHZYiuKJEyA5A1ImLG6CmnjAX8LxDjuS/+tQQMWEifEo2HlgDdmKH617+p3gZLx JxxVWEYZj/C46PqU/vx7yPMx+okwHEMObliZzr58pRzxLImJb2TH2kc9BpDrG2cI Sc3qwuQkmUhXGbTEgdDpXkxv/ACu53Zd29/Uex9tu3BmHe/rmqFJL38gPe/Ad/UA WkG54NXU3GSo0YZX+CUs9vV+KKCkS47ZuFy8FObosaaJ4rnEAD/RZWNE2Saw3XlN cLpDnFb3E7a21ZI+5zW0aSaXV5hb05b6GwGbujpTBMGEQUYJ0O0Ebxi/r57pNRHH MtKFIzlToVT19jSuu5NLW4lbKfceGiusQYyBefHmaFMbYuypAX3DRIZs8nOFSwhD LhdlbBS2EfbbhbIjIsndcP8Y8M6xFP8IL9/MBcZS1y9Rnw5cszAIQMFr3MRXLhYJ wtdNWMrRTSUCAwEAAaOCAmEwggJdMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAU BggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUAFS8 SfVlnBOEpjuf3niyitPeUR0wHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo 7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQt eDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQt eDMubGV0c2VuY3J5cHQub3JnLzAZBgNVHREEEjAQgg5hcXVhLXNjYXBlLmNvbTBM BgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIB FhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQIGCisGAQQB1nkCBAIEgfME gfAA7gB1ACk8UZZUyDlluqpQ/FgH1Ldvv1h6KXLcpMMM9OVFR/R4AAABbcNRMg8A AAQDAEYwRAIgJr14vmKj7KGoMAJNaJC5UFho9BM0bgmKRdvxq577qP8CIHTS0brr vwJ0kTT9hnZ1iqoGVlz+/jwN98E1mOMXCa5bAHUAb1N2rDHwMRnYmQCkURX/dxUc EdkCwQApBo2yCJo32RMAAAFtw1E0NwAABAMARjBEAiByupUK/TUUqJKOJW7xamlY I2MQDzRnsjL5f07DbJXWUwIgaeyQuJ8BKHA6CkFJdJd1HupgFbD7cQR3yRKejLNR NH4wDQYJKoZIhvcNAQELBQADggEBABX8hMV4C+LqpKMq+KcxE1rrhuPny2N8zQKa B1NiR/m4vI6D3D1VjY66TajSmMfK8KykULRc0vJ2+SBSddFY2/GQcKf60qa6P7Cr jRXAlL1b3LfxUTMmcOYE2EJlMGkWOdLQzkSG89MUjsc3yYloNFSbl9+KG0LnZiOq 33LPpe8zrkKD0gfQFr9h+zcpAUiEYJDX1uC+qSNJjICLCCiWk6GvDuPNCO+wyh7V zLHWKm+UFYdQ7hmFX6pXVz/6/U+NpRzq07i3Y7ZHcRjazRwSDchq/80cNbTV8hqN pyXVTO00DmOoh4MLN44jhUDic6ua+5S8wUmrLBcvT7N2Xjnv7Gk= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAyjkMr4Am9ujTUgQ/EOPq ioKxpNvqiBwQ/SYJwupWPRrOdFqwrr6Fuh9KKsvsaTXsAx5lJx4XLeMtQmKemMwo eWGuEcUi9B1QPZ05wQoBguXvMHjbrq5p4wSl0Ur5s+x6SOf54J8X318v7xNaD5wG Uq68p6Pe8MTLjQO7Q+PXC1+SMn17Leil6klGo3Xfs+K7dPBnGZ4jhAo6FsF5n83S xP59Z1D0HhI8oEHZYiuKJEyA5A1ImLG6CmnjAX8LxDjuS/+tQQMWEifEo2HlgDdm KH617+p3gZLxJxxVWEYZj/C46PqU/vx7yPMx+okwHEMObliZzr58pRzxLImJb2TH 2kc9BpDrG2cISc3qwuQkmUhXGbTEgdDpXkxv/ACu53Zd29/Uex9tu3BmHe/rmqFJ L38gPe/Ad/UAWkG54NXU3GSo0YZX+CUs9vV+KKCkS47ZuFy8FObosaaJ4rnEAD/R ZWNE2Saw3XlNcLpDnFb3E7a21ZI+5zW0aSaXV5hb05b6GwGbujpTBMGEQUYJ0O0E bxi/r57pNRHHMtKFIzlToVT19jSuu5NLW4lbKfceGiusQYyBefHmaFMbYuypAX3D RIZs8nOFSwhDLhdlbBS2EfbbhbIjIsndcP8Y8M6xFP8IL9/MBcZS1y9Rnw5cszAI QMFr3MRXLhYJwtdNWMrRTSUCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 418936427292320512031071902535036439002645 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-13 03:12:21 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-11 03:12:21 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aqua-scape.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 824997249670456316113830141242877109195121908720303462707084515302483120020268169519809943410111200109795773763050260714241975862648849059448284236021663487575669555412778861657623715975365299250671832589114977648076212238714152787979718427744237781557721827599367062497134881116585463011993787085911920521003802107593900545953859497794261087834908128668714218570944849740515057345372506928092083055010765057658083958689659817531880849495024882736650214183096929669542315966514424445131424044876543409302751206257067938002618675994261448206445976985144771921225642210772748644400022397301876456027551129500947141802051947315010911955308111203460409011926006116403553509232324477252204633968099458295950453568919529017024829326365591285402365865343973920345824783926054603152738550498758209296505355443626317773485611159316211463426011857270262766357563667818320758891157115560620952430556255059991877931070537632065527058428884741156173861148174273993506306534854340009767270245817070007320215026866490143853045821709635424270474762650969462679051837091373120259226693399233855381763370374524174707200415392741782543336143054838539220585852922047274525869538955970087051730058341815309953056724083822911873972897341194777254620646693 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 0054bc49f5659c1384a63b9fde78b28ad3de511d . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aqua-scape.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes) 00ee007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016dc351320f0000040300463044022026bd78be62a3eca1a830024d6890b9505868f413346e098a45dbf1ab9efba8ff022074d2d1baebbf02749134fd8676758aaa06565cfefe3c0df7c13598e31709ae5b0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016dc35134370000040300463044022072ba950afd3514a8928e256ef16a69582363100f3467b232f97f4ec36c95d653022069ec90b89f0128703a0a41497497751eea6015b0fb710477c9129e8cb351347e . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0015fc84c5780be2eaa4a32af8a731135aeb86e3e7cb637ccd029a07536247f9b8bc8e83dc3d558d8eba4da8d298c7caf0aca450b45cd2f276f9205275d158dbf19070a7fad2a6ba3fb0ab8d15c094bd5bdcb7f151332670e604d8426530691639d2d0ce4486f3d3148ec737c9896834549b97df8a1b42e76623aadf72cfa5ef33ae4283d207d016bf61fb37290148846090d7d6e0bea923498c808b08289693a1af0ee3cd08efb0ca1ed5ccb1d62a6f94158750ee19855faa57573ffafd4f8da51cead3b8b763b6477118dacd1c120dc86affcd1c35b4d5f21a8da725d54ced340e63a887830b378e238540e273ab9afb94bcc149ab2c172f4fb3765e39efec69