cowi-konflikt.mapcentia.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:07:c9:e0:ae:79:f0:70:b7:bc:8f:b3:9c:7e:b2:05:99:08 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cowi-konflikt.mapcentia.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:07:c9:e0:ae:79:f0:70:b7:bc:8f:b3:9c:7e:b2:05:99:08
Serial Number (int): 263987175804176680445294744123555205978376
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f5:64:c9:d4:13:f6:b0:ca:9e:99:16:01:55:65:88:16:0f:b7:1b:6d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 3b:44:d4:4d:b0:f4:74:ab:fd:6d:48:02:60:09:bc:e9:0d:fe:51:7e
Fingerprint (sha256): 0f:7d:6b:e8:3c:be:b8:2d:a4:21:5c:87:ff:bc:e5:c0:15:40:79:c9:db:ff:c4:da:95:43:af:12:55:99:6b:11

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate cowi-konflikt.mapcentia.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cowi-konflikt.mapcentia.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cowi-konflikt.mapcentia.com

Other certificates including the domain name mapcentia.com

(limited to 100 certificates)
drayton.mapcentia.com
vidi-furesoe.mapcentia.com
cowi-vidi.mapcentia.com
geofyn.mapcentia.com
vidi-dragoer.mapcentia.com
geofyn.mapcentia.com
odder.mapcentia.com
vidi.mapcentia.com
eu1.mapcentia.com
rm.mapcentia.com
watsonc.mapcentia.com
geofyn.mapcentia.com
*.mapcentia.com
fkg.mapcentia.com
vidi-furesoe.mapcentia.com
assens.mapcentia.com
dragoer.mapcentia.com
geofyn.mapcentia.com
drayton.mapcentia.com
cowi-konflikt.mapcentia.com
ballerup-vidi.mapcentia.com
naturparklillebaelt-vidi.mapcentia.com
naturparklillebaelt-vidi.mapcentia.com
vidi-dragoer.mapcentia.com
vidi-furesoe.mapcentia.com
blog.mapcentia.com
dragoer.mapcentia.com
assens.mapcentia.com
furesoe.mapcentia.com
ballerup-vidi.mapcentia.com
geofyn.mapcentia.com
cowi.mapcentia.com
drayton.mapcentia.com
rm-vidi.mapcentia.com
rm.mapcentia.com
vidi-geokon.mapcentia.com
odder-vidi.mapcentia.com
*.mapcentia.com
odder-vidi.mapcentia.com
ballerup.mapcentia.com
drayton.mapcentia.com
cowi-vidi.mapcentia.com
vidi.mapcentia.com
furesoe.mapcentia.com
ballerup.mapcentia.com
eu1.mapcentia.com
assens.mapcentia.com
furesoe.mapcentia.com
cowi.mapcentia.com
rm.mapcentia.com
vidi-furesoe.mapcentia.com
vidi-dragoer.mapcentia.com
watsonc.mapcentia.com
geofyn.mapcentia.com
assens-vidi.mapcentia.com
cowi-konflikt.mapcentia.com
cowi-vidi.mapcentia.com
naturparklillebaelt-vidi.mapcentia.com
assens.mapcentia.com
geofyn.mapcentia.com
cowi.mapcentia.com
fkg-kort.mapcentia.com
eu1.mapcentia.com
gc2.mapcentia.com
furesoe.mapcentia.com
cowi.mapcentia.com
rm.mapcentia.com
gc2.mapcentia.com
assens.mapcentia.com
assens.mapcentia.com
drayton.mapcentia.com
vidi.mapcentia.com
furesoe.mapcentia.com
cowi.mapcentia.com
cowi-konflikt.mapcentia.com
vidi-geokon.mapcentia.com
odder-vidi.mapcentia.com
*.mapcentia.com
vidi-geokon.mapcentia.com
dragoer.mapcentia.com
cowi.mapcentia.com
vidi-dragoer.mapcentia.com
cowi-konflikt.mapcentia.com
cowi-vidi.mapcentia.com
gc2.mapcentia.com
eu1.mapcentia.com
vidi-furesoe.mapcentia.com
rm.mapcentia.com
fkg-kort.mapcentia.com
assens-vidi.mapcentia.com
fkg-kort.mapcentia.com
odder.mapcentia.com
furesoe.mapcentia.com
vidi.mapcentia.com
fkg.mapcentia.com
geofyn.mapcentia.com
vidi-geokon.mapcentia.com
watsonc.mapcentia.com
cowi.mapcentia.com
ballerup-vidi.mapcentia.com

Certificate

The complete raw certificate details for cowi-konflikt.mapcentia.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 263987175804176680445294744123555205978376
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-20 18:36:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-19 18:36:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cowi-konflikt.mapcentia.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 741064622239233707191930102825550985302933629386472691751305579997919104239297000312556781308245893275696647301892400582645018494747296835681486735831975221563527565059902407977564133856062645258227139128359511872743542024026560588309510620720377531073200716666812439094565786054738965767045611749644227581878515630087356892685878871582170767989826443467929638414836758978318216289805249564391200864344899032341383583033012643868924011512970265068009947229777179180039242403962373113154452634032320450943430138698430549591731630500131333121781231194829683125516364630863331299928485749693233993132369534074804017030206031432522353930428545423379959862070168722781432027823685426655765793733093581098269461122693746463798961737679098640521110185867103988093200984696481879681016204776482013685452855866240207419723270410991038119385388503410114541535940332132234443740017703352199292001398858332816917709923063366385316708388602054594596645937945350139130310762941781266372887365306236476759431300622215692927434851304872908994805648577017514068478356998859529985256132748833265006507833452116825727535897665288730840252938090013655529267429247736869337630776526538461527671129284551501390093958778421959630981792988852497574476780769
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f564c9d413f6b0ca9e991601556588160fb71b6d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cowi-konflikt.mapcentia.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016fc474667b0000040300483046022100c443b1e30fe8104d3d0ce035585b94c2ba27c86c43302b4caf14285d6ce646e1022100e78ad6c0be28e0a00aba755429c05d3655c4ff08ae41555df5ac3e687f4f07c5007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016fc47466660000040300473045022100ee9ada89dff956114ce9e47f3e907f5e2d6fe71f20f1a89c6ea6bf0cd6a91e6802207b40221260c43c6b8d8870be35ec8584d24d29f6a6afb6a469a0a95bd19c54cb
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00510964106fd67287c08d682690eb9e6c3bc5480ad24005e250414988d16a77d0b1a2874f0ff9494f4aac37fdd516ead71e4006a99ce3d1693a5f5e08241ce26e49cfc2d6c73d6868f9116b7d99443612c91bd6d57ab3a3eb8cc7dd17c199f24d946b0dc11e727a8987ac616088d30849ec4e0a6af38beac20773bcf005fd8a2a2f9794cd90d4e66c15cb744e4b8a17da8313ba5830645e1b57af637c782f68764be7c40548fcfe5e43e73ab576ae064e3a0c3df7a1374140d41c38ad24d6b53153dbcaf7bcaf973b9c46502cc59fe8c8193f3b23a1e8ef6feb81053c101c296e4fad94b3c92b9e2ebc3b2d243ef7e715f6d4c7042e0cebbc9ddf2bc970f36682