ballerup-vidi.mapcentia.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:9e:e8:b1:48:04:e4:56:73:3f:ab:3c:58:d6:ad:e4:48:ce was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ballerup-vidi.mapcentia.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:9e:e8:b1:48:04:e4:56:73:3f:ab:3c:58:d6:ad:e4:48:ce
Serial Number (int): 315410773161076149521172530267418272221390
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 30:ab:92:d4:d3:7f:10:02:db:c0:de:d7:39:36:aa:33:fb:8a:38:2c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 0a:ec:44:0e:91:62:8c:ee:15:3f:eb:15:31:df:21:4c:34:6d:07:5d
Fingerprint (sha256): 0f:be:e7:79:bf:c7:ff:21:6c:e6:e7:27:9e:ab:ac:45:0a:10:53:be:ec:a5:35:1b:e0:29:4e:18:65:61:e5:e2

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate ballerup-vidi.mapcentia.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ballerup-vidi.mapcentia.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ballerup-vidi.mapcentia.com

Other certificates including the domain name mapcentia.com

(limited to 100 certificates)
drayton.mapcentia.com
vidi-furesoe.mapcentia.com
cowi-vidi.mapcentia.com
geofyn.mapcentia.com
vidi-dragoer.mapcentia.com
geofyn.mapcentia.com
odder.mapcentia.com
vidi.mapcentia.com
eu1.mapcentia.com
rm.mapcentia.com
watsonc.mapcentia.com
geofyn.mapcentia.com
*.mapcentia.com
fkg.mapcentia.com
vidi-furesoe.mapcentia.com
assens.mapcentia.com
dragoer.mapcentia.com
geofyn.mapcentia.com
drayton.mapcentia.com
cowi-konflikt.mapcentia.com
ballerup-vidi.mapcentia.com
naturparklillebaelt-vidi.mapcentia.com
naturparklillebaelt-vidi.mapcentia.com
vidi-dragoer.mapcentia.com
vidi-furesoe.mapcentia.com
blog.mapcentia.com
dragoer.mapcentia.com
assens.mapcentia.com
furesoe.mapcentia.com
ballerup-vidi.mapcentia.com
geofyn.mapcentia.com
cowi.mapcentia.com
drayton.mapcentia.com
rm-vidi.mapcentia.com
rm.mapcentia.com
vidi-geokon.mapcentia.com
odder-vidi.mapcentia.com
*.mapcentia.com
odder-vidi.mapcentia.com
ballerup.mapcentia.com
drayton.mapcentia.com
cowi-vidi.mapcentia.com
vidi.mapcentia.com
furesoe.mapcentia.com
ballerup.mapcentia.com
eu1.mapcentia.com
assens.mapcentia.com
furesoe.mapcentia.com
cowi.mapcentia.com
rm.mapcentia.com
vidi-furesoe.mapcentia.com
vidi-dragoer.mapcentia.com
watsonc.mapcentia.com
geofyn.mapcentia.com
assens-vidi.mapcentia.com
cowi-konflikt.mapcentia.com
cowi-vidi.mapcentia.com
naturparklillebaelt-vidi.mapcentia.com
assens.mapcentia.com
geofyn.mapcentia.com
cowi.mapcentia.com
fkg-kort.mapcentia.com
eu1.mapcentia.com
gc2.mapcentia.com
furesoe.mapcentia.com
cowi.mapcentia.com
rm.mapcentia.com
gc2.mapcentia.com
assens.mapcentia.com
assens.mapcentia.com
drayton.mapcentia.com
vidi.mapcentia.com
furesoe.mapcentia.com
cowi.mapcentia.com
cowi-konflikt.mapcentia.com
vidi-geokon.mapcentia.com
odder-vidi.mapcentia.com
*.mapcentia.com
vidi-geokon.mapcentia.com
dragoer.mapcentia.com
cowi.mapcentia.com
vidi-dragoer.mapcentia.com
cowi-konflikt.mapcentia.com
cowi-vidi.mapcentia.com
gc2.mapcentia.com
eu1.mapcentia.com
vidi-furesoe.mapcentia.com
rm.mapcentia.com
fkg-kort.mapcentia.com
assens-vidi.mapcentia.com
fkg-kort.mapcentia.com
odder.mapcentia.com
furesoe.mapcentia.com
vidi.mapcentia.com
fkg.mapcentia.com
geofyn.mapcentia.com
vidi-geokon.mapcentia.com
watsonc.mapcentia.com
cowi.mapcentia.com
ballerup-vidi.mapcentia.com

Certificate

The complete raw certificate details for ballerup-vidi.mapcentia.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 315410773161076149521172530267418272221390
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-22 05:05:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-20 05:05:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ballerup-vidi.mapcentia.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 787256331716508891128648164175098602818700183866814728495330642258929238399373795563593127785033114315051525015949600005127620520669111403931096170962844049606883876065846835988668899612678755706746376746171116830021775179759258852987890096199636852198820325856270464727651365101688394286123910977447250927613701259491904019735819179921882893165404587470653269698099933966640897607627576862114561320097277288463725574920453386707640035132383374560387145967641719472732765292523543885880262434120527359122055915880814666879133213194462938927373454631800634671994302601543458642876641392465018796951223302106588544467933457551433713571497722607693316151319368883324848867493836358327913537278823836494102262139374060938346909007992320019864640011106502285475022945970578795516246898451585150947969902850094660230588846500250113156387261212008199323740867212336564559016685922914695703054703149648806334678199136076456510575677264667375634360111571222384020559280214022435256947197543901892256267077773671768230464349906093712576386856850169167157711198768346105263912347440855172714983669248213657268486486855340558460668076021229540312951330546889663993995389033438031267989423838421862964342081128426128227462133586173098390185818287
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							30ab92d4d37f1002dbc0ded73936aa33fb8a382c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ballerup-vidi.mapcentia.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf6400000163867434d800000403004830460221008e1f3b95ec0db85c8b05336a4013bc9f921dde0459af20b289795e9b44cd1f3f022100d72d317a315a3efeb94435eb32a02de33f907cf6cd62b2e9c7f6e154e53cfd37007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000163867434f90000040300473045022010998108d30da7e97113bbc219c3b16bf90b0d91199308b2d03c0d68b84c3e6902210099c750cbf049feb54d3271ecbd738ba7cac27b8c91884e1594359f89a0b130b7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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