DV SSL/TLS Certificate for gestion.servei.org

Certificate is witin its validity period

Issued by Let's Encrypt (R11)

About the gestion.servei.org DV SSL/TLS Certificate

This certificate with serial number 05:81:91:03:b6:b1:28:1f:76:f8:66:15:53:1d:0f:01:2c:c4 for gestion.servei.org was issued on by Let's Encrypt.

This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for gestion.servei.org provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Let's Encrypt

Organization: Let's Encrypt
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 05:81:91:03:b6:b1:28:1f:76:f8:66:15:53:1d:0f:01:2c:c4
Serial Number (int): 479650612333316033494492219641150222445764
Serial Number Length: 139 bits, 18 octets

Subject Key Identifier: fd:b3:c5:20:39:ec:c6:eb:41:67:73:55:d8:b0:69:f1:b6:93:57:10
Authority Key Identifier: c5:cf:46:a4:ea:f4:c3:c0:7a:6c:95:c4:2d:b0:5e:92:2f:26:e3:b9

Fingerprint (SHA-1): d9:21:42:df:b9:34:1b:7c:d5:c5:09:a9:e9:98:45:e0:93:26:82:01
Fingerprint (SHA-256): a3:7b:1f:55:0f:ce:b4:55:37:6d:d8:e9:a3:32:06:3f:31:03:75:0c:4f:f2:fc:7a:65:7e:14:f1:24:f1:8c:1b

Issuing Certificate URL: http://r11.i.lencr.org/

Revocation Information

CRL Distribution Point: http://r11.c.lencr.org/69.crl

Check the revocation status for certificate gestion.servei.org
1
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for gestion.servei.org

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

gestion.servei.org

X.509 Certificate

The complete raw X.509 certificate details for gestion.servei.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLVJNXeN5eL+26ODi3NU
4OZCXQ8/jlakvk1TKZ7ZOkw9TzUrwMET6tCzpubJNU3F3TTd6Vgis65BsjaLXM7J
aVyV+HuXefLKEtoOwf9U4qjdHTorhhLQZ7yKcUeAXtB8dboRZ32eT5TDFDHAxw3R
GTu/xgScGorB3IGEs20Ig1qNPCyhixXhjM/fIbHb/JEYrsKiOr+ai4ad/oowaKxx
tlHGi6mUnRHgeRJM9IXr/6pI1FiletwujJgzmT7e7pgyUgW9MvVu+sDZYJFcgMMW
zzkK8TUKEfY/+3Nr1nxbkwnSXIRB7ey059fy3jA/bAcLV3IL3JdReFkxqstsuRbZ
hwIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 479650612333316033494492219641150222445764
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R11'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-08 02:18:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-09-06 02:18:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gestion.servei.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22307337118678639628409792694603655485807950895289118386522750992199364725445922304098213930029435354522993356712991997316989603193081421507522141309003845151469041426661104394952683946662882407978789735964750396552590926226698611107942931708585273452743894450144670309114891196326241893422911639090930626449375586158119770283649589846967873255955132263178360500767007596341882723013004537510458141462122880645364283577218891758787699677663982889740332249417566900855413231059848370928727472173426819826589243440882768211585081718042772034253249034263831079937732276621250605722545861752359479271454301692262257973639
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fdb3c52039ecc6eb41677355d8b069f1b6935710
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c5cf46a4eaf4c3c07a6c95c42db05e922f26e3b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gestion.servei.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.c.lencr.org/69.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600ccfb0f6a85710965fe959b53cee9b27c22e9855c0d978db6a97e54c0fe4c0db0000001974d8a92d00000040300473045022100e3303edff1381aac9968bc58f88777aafc50e15c17084dc65ca1a6b923ab9ac60220331b74f0487d994256f9752205a17b81c54851748aac95725b84abdae973c1b4007500a442c506496061548f0fd4ea9cfb7a2d26454d87a97f2fdf4559f6274f3a8454000001974d8a92d20000040300463044022006118f03569bd42b0f50e29be250391a0fb76e026acddb287437e306d4aeb70d02203d9edda602439d5826fc0754252608dbe0edfb8a650e5c2a6a7799b10287e30f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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