aquaticmasters.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:86:99:2c:82:30:c0:00:e5:49:0a:82:58:af:c2:ec:55:08 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=aquaticmasters.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:86:99:2c:82:30:c0:00:e5:49:0a:82:58:af:c2:ec:55:08
Serial Number (int): 307138297947678984184990669456073055556872
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3a:6b:96:17:78:23:0a:a5:93:99:57:72:8c:c5:06:a9:66:73:dd:69
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): e3:ba:32:1d:75:93:db:71:81:64:54:fc:6b:4a:5b:87:99:3f:e4:b7
Fingerprint (sha256): fd:25:88:4c:32:3c:33:32:1d:08:97:05:01:a9:bb:5d:3c:4e:14:aa:1f:f7:3a:45:d5:e4:43:b1:78:e7:fb:b2

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate aquaticmasters.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aquaticmasters.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aquaticmasters.com

Other certificates including the domain name aquaticmasters.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for aquaticmasters.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 307138297947678984184990669456073055556872
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-16 14:08:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-16 14:08:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aquaticmasters.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 712003011597273518417789107747756588327991554381047242682635224251427072530831107891480256837725226560040652381767191843099455932686658697380113508812544515324557415402608287803311722931093537226800262414266777325638750638308703980459413079628863011638269872083622771854443809873668503362357879446504957224990420726336679644562713323218121941437754089883246975185051122013980185204974159920017558657570221302396913795969537500113798267804924465353239948588957396230077988698738774837245099128783969020327631979421407305933430711172905739143719277642629641136703824068172424037875845432660243395493619977816750679375555729072343252239341989196824726506875394643884882900342118434216873143395192774691481932777576898491569665546011593642780888545609786715909982476683293464718770702321366509020607645487854556993831342837325958219256440798505212798036633345769164262689955097564600931588460285646580579495122232577463373432631557508906959311998356536711728759029594967514556151030200812546220335788409220336173531840249033289180239328520175941056038687336928122092551755830485990231144953264565365101526250605505889838752174296072235649511608934108033632813602245464294862397324991550007470712666665896830589665075770114139791102413811
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3a6b961778230aa5939957728cc506a96673dd69
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aquaticmasters.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076005ea773f9df56c0e7b536487dd049e0327a919a0c84a112128418759681714558000001704e8b6282000004030047304502205c30e8308dca88045541ee09547198b528d5a98e84b20426fa7986d93a792cd8022100bc35159cce2f4407064c6830f9893881f80402cf30bfff876688c5cf2a3b7f34007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001704e8b6271000004030046304402207263d14b23044f1adf776c5f1ba62d8237c26ddadc014e01ac1aa1e7840eaba002203e80577ed7db10833d24df5316d8e835815cbd69dcfc55a76db585ddccd16964
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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