aligntek.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:60:d8:ef:1b:6d:0d:40:a8:b8:cf:77:ce:54:d7:31:e6:0b was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=aligntek.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:60:d8:ef:1b:6d:0d:40:a8:b8:cf:77:ce:54:d7:31:e6:0b
Serial Number (int): 381404605713754841217126768179671129515531
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: e1:6d:ba:37:1f:ac:4e:29:c3:a0:21:e3:3b:90:56:cf:78:ec:0a:fd
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 22:ac:d5:c9:74:35:4f:8d:1d:b1:3e:b1:1f:dd:ee:cf:46:89:ac:15
Fingerprint (sha256): fd:d5:45:32:3c:a9:f3:20:e2:e8:7e:2e:11:5f:a6:37:0b:26:bb:7a:fc:98:f6:5e:9a:98:48:3d:9e:0c:95:05

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate aligntek.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aligntek.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aligntek.com

Other certificates including the domain name aligntek.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for aligntek.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 381404605713754841217126768179671129515531
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-15 20:19:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-14 20:19:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aligntek.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 716113060423335838644275665780229604917677433668058456010520984627949705506086323169202533575044709569832449388135789307914942685180448599918227763832038543922280324123847686231079796011025743870764519190340975183135625808047813851451750180882310124890401254866836582363635936822933250093610553146333826956843091696646459807657125326633005571807634254458149220445820225251023402016120827200121242666285798060604394882261603084008670606498330380237504883064991947791502121001930419202456578868986737929421115637175994772530618831945210397892215954418036460176291048925271475470654276277807060854993112330054451633207284843084269538470343774708601638679297404490678311084693994817591102733540167907915732881666561268458758050400657726478444444041815662898049519739519377420576448307086612299282378722025703672288493908139232897899431790994525772682295335160136938515751211096230078783294573275903133226197266245523694837402264319945838316273662695289422988208654250703405648808148020756547061833941418870393500488022808763037188916858643854471564479406445114263876388045622823214201700181678891723631714098411764694999282708213001385231532907240402649822777885324366515837480847917059240662397283677964007147771088362170971330201994691
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e16dba371fac4e29c3a021e33b9056cf78ec0afd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aligntek.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016f0b6e6e0d000004030047304502200161562412815554f37559c59af1df1150435cb143cbe235195a8043fa0060b1022100f641178e20e3fe0d87ae98f4d862f70a4e758fdd0c3f286c8b77fc406cd183e200750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016f0b6e6e2a0000040300463044022039d9f004ba34302c0ae94631b6ba8dbb9ab33b4f45067f11062da7c072d9edc902202e8f47055afb92f1799c3f221ed92723f9765a911f047f7e9541f7d69a4df497
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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