aqua-scape.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:cf:24:bd:02:fe:06:5e:58:af:23:56:59:61:d6:66:7e:15 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=aqua-scape.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:cf:24:bd:02:fe:06:5e:58:af:23:56:59:61:d6:66:7e:15
Serial Number (int): 418936427292320512031071902535036439002645
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 00:54:bc:49:f5:65:9c:13:84:a6:3b:9f:de:78:b2:8a:d3:de:51:1d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 08:68:f9:6e:f7:d9:5d:3a:87:61:83:60:d2:fc:6d:5e:fa:b3:34:fd
Fingerprint (sha256): f1:73:55:4f:76:f9:98:b3:ec:45:bb:c9:17:35:bd:fa:23:f1:0d:32:36:a8:83:a4:42:fc:a7:d9:51:84:d1:19

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate aqua-scape.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aqua-scape.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aqua-scape.com

Other certificates including the domain name aqua-scape.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for aqua-scape.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGUjCCBTqgAwIBAgISBM8kvQL+Bl5YryNWWWHWZn4VMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEwMTMwMzEyMjFaFw0y
MDAxMTEwMzEyMjFaMBkxFzAVBgNVBAMTDmFxdWEtc2NhcGUuY29tMIICIjANBgkq
hkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAyjkMr4Am9ujTUgQ/EOPqioKxpNvqiBwQ
/SYJwupWPRrOdFqwrr6Fuh9KKsvsaTXsAx5lJx4XLeMtQmKemMwoeWGuEcUi9B1Q
PZ05wQoBguXvMHjbrq5p4wSl0Ur5s+x6SOf54J8X318v7xNaD5wGUq68p6Pe8MTL
jQO7Q+PXC1+SMn17Leil6klGo3Xfs+K7dPBnGZ4jhAo6FsF5n83SxP59Z1D0HhI8
oEHZYiuKJEyA5A1ImLG6CmnjAX8LxDjuS/+tQQMWEifEo2HlgDdmKH617+p3gZLx
JxxVWEYZj/C46PqU/vx7yPMx+okwHEMObliZzr58pRzxLImJb2TH2kc9BpDrG2cI
Sc3qwuQkmUhXGbTEgdDpXkxv/ACu53Zd29/Uex9tu3BmHe/rmqFJL38gPe/Ad/UA
WkG54NXU3GSo0YZX+CUs9vV+KKCkS47ZuFy8FObosaaJ4rnEAD/RZWNE2Saw3XlN
cLpDnFb3E7a21ZI+5zW0aSaXV5hb05b6GwGbujpTBMGEQUYJ0O0Ebxi/r57pNRHH
MtKFIzlToVT19jSuu5NLW4lbKfceGiusQYyBefHmaFMbYuypAX3DRIZs8nOFSwhD
LhdlbBS2EfbbhbIjIsndcP8Y8M6xFP8IL9/MBcZS1y9Rnw5cszAIQMFr3MRXLhYJ
wtdNWMrRTSUCAwEAAaOCAmEwggJdMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAU
BggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUAFS8
SfVlnBOEpjuf3niyitPeUR0wHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo
7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQt
eDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQt
eDMubGV0c2VuY3J5cHQub3JnLzAZBgNVHREEEjAQgg5hcXVhLXNjYXBlLmNvbTBM
BgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIB
FhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQIGCisGAQQB1nkCBAIEgfME
gfAA7gB1ACk8UZZUyDlluqpQ/FgH1Ldvv1h6KXLcpMMM9OVFR/R4AAABbcNRMg8A
AAQDAEYwRAIgJr14vmKj7KGoMAJNaJC5UFho9BM0bgmKRdvxq577qP8CIHTS0brr
vwJ0kTT9hnZ1iqoGVlz+/jwN98E1mOMXCa5bAHUAb1N2rDHwMRnYmQCkURX/dxUc
EdkCwQApBo2yCJo32RMAAAFtw1E0NwAABAMARjBEAiByupUK/TUUqJKOJW7xamlY
I2MQDzRnsjL5f07DbJXWUwIgaeyQuJ8BKHA6CkFJdJd1HupgFbD7cQR3yRKejLNR
NH4wDQYJKoZIhvcNAQELBQADggEBABX8hMV4C+LqpKMq+KcxE1rrhuPny2N8zQKa
B1NiR/m4vI6D3D1VjY66TajSmMfK8KykULRc0vJ2+SBSddFY2/GQcKf60qa6P7Cr
jRXAlL1b3LfxUTMmcOYE2EJlMGkWOdLQzkSG89MUjsc3yYloNFSbl9+KG0LnZiOq
33LPpe8zrkKD0gfQFr9h+zcpAUiEYJDX1uC+qSNJjICLCCiWk6GvDuPNCO+wyh7V
zLHWKm+UFYdQ7hmFX6pXVz/6/U+NpRzq07i3Y7ZHcRjazRwSDchq/80cNbTV8hqN
pyXVTO00DmOoh4MLN44jhUDic6ua+5S8wUmrLBcvT7N2Xjnv7Gk=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 418936427292320512031071902535036439002645
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-13 03:12:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-11 03:12:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aqua-scape.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 824997249670456316113830141242877109195121908720303462707084515302483120020268169519809943410111200109795773763050260714241975862648849059448284236021663487575669555412778861657623715975365299250671832589114977648076212238714152787979718427744237781557721827599367062497134881116585463011993787085911920521003802107593900545953859497794261087834908128668714218570944849740515057345372506928092083055010765057658083958689659817531880849495024882736650214183096929669542315966514424445131424044876543409302751206257067938002618675994261448206445976985144771921225642210772748644400022397301876456027551129500947141802051947315010911955308111203460409011926006116403553509232324477252204633968099458295950453568919529017024829326365591285402365865343973920345824783926054603152738550498758209296505355443626317773485611159316211463426011857270262766357563667818320758891157115560620952430556255059991877931070537632065527058428884741156173861148174273993506306534854340009767270245817070007320215026866490143853045821709635424270474762650969462679051837091373120259226693399233855381763370374524174707200415392741782543336143054838539220585852922047274525869538955970087051730058341815309953056724083822911873972897341194777254620646693
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0054bc49f5659c1384a63b9fde78b28ad3de511d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aqua-scape.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016dc351320f0000040300463044022026bd78be62a3eca1a830024d6890b9505868f413346e098a45dbf1ab9efba8ff022074d2d1baebbf02749134fd8676758aaa06565cfefe3c0df7c13598e31709ae5b0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016dc35134370000040300463044022072ba950afd3514a8928e256ef16a69582363100f3467b232f97f4ec36c95d653022069ec90b89f0128703a0a41497497751eea6015b0fb710477c9129e8cb351347e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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