heineken.mindtek.it

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:a3:01:0d:cb:29:35:00:1a:4a:32:d5:71:28:43:de:01:7a was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=heineken.mindtek.it

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:a3:01:0d:cb:29:35:00:1a:4a:32:d5:71:28:43:de:01:7a
Serial Number (int): 403916570383602809033702449490646123020666
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: a2:e1:4f:ed:05:9e:0a:de:8f:20:62:7c:5a:49:9c:d4:05:34:99:77
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 44:77:58:fb:e6:f9:59:55:c1:b9:69:b8:e0:14:bb:c9:2d:bd:10:0e
Fingerprint (sha256): 08:c8:3e:fa:ec:4e:5b:5c:d3:39:31:5b:97:a1:6c:28:63:07:f7:ac:64:dd:4a:e5:0c:8a:03:9f:ac:c2:6c:81

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate heineken.mindtek.it

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for heineken.mindtek.it

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

heineken.mindtek.it

Other certificates including the domain name mindtek.it

(limited to 100 certificates)
mindtek.it
mindtek.it
okoban.mindtek.it
app.mindtek.it
mindtek.it
mindtek.it
mindtek.it
heineken.mindtek.it
mindtek.it
heineken.mindtek.it
mindtek.it
mindtek.it
mindtek.it
mindtek.it
heineken.mindtek.it
mindtek.it
mindtek.it
mindtek.it
mindtek.it
mindtek.it
mindtek.it
mindtek.it
okoban.mindtek.it
mindtek.it
mindtek.it
mindtek.it
mindtek.it
app.mindtek.it
mindtek.it
mindtek.it
okoban.mindtek.it
mindtek.it
mindtek.it
mindtek.it
app.mindtek.it
mindtek.it
mindtek.it
mindtek.it
heineken.mindtek.it
mindtek.it
mindtek.it
mindtek.it
app.mindtek.it
mindtek.it
mindtek.it
mindtek.it
mindtek.it
api-cp.nearit.com
mindtek.it
mindtek.it
mindtek.it
mindtek.it
mindtek.it
mindtek.it
mindtek.it
mindtek.it
mindtek.it
dev.mindtek.it
mindtek.it
mindtek.it
mindtek.it
mindtek.it
mindtek.it
mindtek.it
mindtek.it
mindtek.it
mindtek.it
mindtek.it
mindtek.it
mindtek.it
mindtek.it
okoban.mindtek.it
dev.mindtek.it
app.mindtek.it
mindtek.it
mindtek.it
mindtek.it
mindtek.it
cms-dev.tts-indeva-pi.mindtek.it
dev.mindtek.it
mindtek.it
mindtek.it
mindtek.it
mindtek.it
mindtek.it
mindtek.it
mindtek.it
app.mindtek.it
mindtek.it
mindtek.it
app.mindtek.it
mindtek.it
okoban.mindtek.it
mindtek.it
login.iab.mindtek.it
mindtek.it
mindtek.it
app.mindtek.it
mindtek.it
app.mindtek.it

Certificate

The complete raw certificate details for heineken.mindtek.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6NIlnegkHMyqtaILkiOr
v180x2yTkiTFAf6KfTW9HMKVeKxNfjd/0BtWVMz0BUHMron8Rxhlj9pIBBqF97V/
+KwLv33GYxzLnMWlN9ti6RbOra+Wo0GDO9HWJZ7w7gmR0dbrW2CERHj1xwgCpfh3
E8vsPCgc+MidazP03uG3LAtGaoLIVckx1WEyk3Cu9D4IkEOrJD5b4XIUBi0rbYzT
a6atjf57evcPKqYCLDlL0OtOF8RnZvfbZAcmjyWjqKHhULa2+sYcNFu6c8TRKuC6
pBSYvSWYVbQIJRtdSy8KeZRIIEZ8+b+ix4T97czMLwPO0k+A8DTEdh0EN7TZF01M
6wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 403916570383602809033702449490646123020666
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-16 01:06:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-16 01:06:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'heineken.mindtek.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29390914070836000427699284373135995423912977283563654063262425761935224782269626789100109144614930853124499157656763507870086637799400750623466441562120938292076251031135422868426720766499248711588199928778594286562314652726354551394934998847066762634748211778927455862275891182587449645945189442543267754240994674340401992567795035945948815874663996106827585357828213824539942005927616791720553882904292246795305113836746687151442317326233372817444458127011973400514000838145709596166524556714609870902183089298639834367120731530867038883004412362568029412388135297679392020429367770113641634932279294335703449423083
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a2e14fed059e0ade8f20627c5a499cd405349977
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heineken.mindtek.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016854692d6c0000040300473045022100c18efdab271e3439a677119d2513d51cb78d45869dab8808112f1e327092f3e402204f2f3ac720e0b527b805435b1198f8dfe6f9ecbd6a56c64f493bcb4572cadf8c007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016854692d610000040300473045022002f8079edc486949cd0cbd66120ec2746d763e35e49defc86220f75be3efcba60221009ea0479792243a74129df8296a51ccf495defb9b6d605910be40d4f4ffc69615
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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