customer.gbc.msg.team

Issued by R3

About this certificate

This digital certificate with serial number 03:36:d5:29:77:79:69:9d:b2:c7:31:62:db:5e:ac:b2:f4:2f was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=customer.gbc.msg.team

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:36:d5:29:77:79:69:9d:b2:c7:31:62:db:5e:ac:b2:f4:2f
Serial Number (int): 279995446479510841046170588659961228882991
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b1:7b:b6:44:e1:29:dd:53:ba:32:18:01:08:e2:2e:94:13:41:39:59
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 35:3d:58:26:7f:da:de:50:95:9a:b9:74:bf:63:c9:d6:4b:cd:0f:c7
Fingerprint (sha256): 10:8d:d4:93:12:66:32:88:61:1f:d1:94:d7:3c:c3:2f:77:71:13:64:d9:44:a6:b0:46:69:1a:6e:91:a8:82:7c

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate customer.gbc.msg.team

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for customer.gbc.msg.team

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

customer.gbc.msg.team

Other certificates including the domain name msg.team

(limited to 100 certificates)
servicecenter.msg.team
*.automotive.msg.team
*.de.hub.msg.team
*.spielwiese.msg.team
customer.gbc.msg.team
*.awsdev.msg.team
*.spielwiese.msg.team
chatx.xqt.msg.team
*.dnstest.msg.team
*.xt.msg.team
mep.gbp.msg.team
ct-dev.hub.msg.team
support.greendaisycleaningservices.co.uk
zoho.profitroom.com
vote.xt.msg.team
*.gbp.msg.team
*.rt.hub.msg.team
*.dnstest.msg.team
*.spielwiese2.msg.team
support.ethos.ltd
*.dnstest.msg.team
*.dnstest.msg.team
apps.mro.msg.team
*.spielwiese4.msg.team
*.xis.msg.team
airflow-test.zt.msg.team
*.spielwiese.msg.team
*.automotive.msg.team
*.zt.msg.team
minnosphere.com
*.dnstest.msg.team
*.spielwiese4.msg.team
*.publicsector.msg.team
operations.gba.msg.team
minnosphere.com
cd-dev.hub.msg.team
guru.msg.team
*.spielwiese2.msg.team
*.xis.msg.team
guru.msg.team
ai.msg.team
*.spielwiese2.msg.team
*.gbm.msg.team
*.gba.msg.team
*.gbg.msg.team
guru.msg.team
status.msg.team
*.ipw.gbv.msg.team
*.spielwiese3.msg.team
customer.gbc.msg.team
*.spielwiese.msg.team
*.gbl.msg.team
guru.msg.team
desk.locster.fr
aditoapi.bsm.msg.team
*.publicsector.msg.team
*.myapp11.spielwiese.msg.team
*.apps.oc2.msn.msg.team
support.42nerds.com
support.evocion.fr
*.apps.oc2.msn.msg.team
*.msg.team
guru.msg.team
customer-test.gbc.msg.team
chatx.xqt.msg.team
*.gbl.msg.team
*.demo.hds.msg.team
servicecenter.msg.team
guru.msg.team
*.spielwiese2.msg.team
support.fyooz.co.uk
tamara.msg.team
aditoapi.bsm.msg.team
minnosphere.com
zoho.profitroom.com
servicecenter.msg.team
*.gbp.msg.team
*.demo.hds.msg.team
vc-dev.hub.msg.team
training.xt.msg.team
*.demo.hds.hds.msg.team
support.xn--musikverein-grningen-2ec.de
mep.gbp.msg.team
pm-dev.hub.msg.team
guru.msg.team
*.xt.msg.team
*.xt.msg.team
*.dnstest.msg.team
support.tpc-group.com
sd-test.msg.team
*.gbp.msg.team
*.gbv.msg.team
servicecenter.msg.team
*.spielwiese2.msg.team
*.spielwiese4.msg.team
support.crmsocius.co.uk
soporte.esycontrol.com
support.bimequity.dk
*.dnstest.msg.team
minnosphere.com

Certificate

The complete raw certificate details for customer.gbc.msg.team in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF9jCCBN6gAwIBAgISAzbVKXd5aZ2yxzFi216ssvQvMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDAyMjIwMDMzNTdaFw0yNDA1MjIwMDMzNTZaMCAxHjAcBgNVBAMT
FWN1c3RvbWVyLmdiYy5tc2cudGVhbTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCC
AgoCggIBANExiqDTVdU1ENWHzaKGnFi/0lsKRktyKKuw6gpd4lZJ27GDun9iwa5T
vBsED8SaDnt9ZH1Oic8knUZ3UuQrXZZCZr80BFAMfTm1FoV01RvxVToBFvNVYiY6
5Rit7mbXUzqyCTBEt2Qm1uJ2UWjWP0akyVaRfHz1s4z5/jBmhL/7oGoKikqs70gt
Gz9v9icrdC+I+E9X4UFr+xEt6CoRWXUFqYN+jl9B5YQiKe0jTV4Ujr1OXUmNRkVU
GWyceTw+QLsc4Bz3PVw5ajhRcjDZ8ussngz4b4wwBkI19tStYsGEPxZ+uj1S2J88
AaLaEPTBhmz4mu68dwlnnrYZFf1xZMKmJnSqDGnzlzsRhsWLuc+uhpSTosUg0duq
7MMMRuO29q2HXa2hGXtK/GEI/HCvx8tY37Y0mwLxqRI1yMPVIdozjrV81w41QnBy
8cQBH40q1tB/bh6DUJzwwBN8F62T/jAnGD+9NJ76RNuYNJh05YPr1+x4N2NeiViP
PMsVnwg9USAXLjYGAmzlu7i4jIWzvWsgQZzTRYN8hqFHXQP8obX7xXDfR8YY3m+J
MGUjJPF98V72lk+kAKM97tvW0tNGNGpilJNkCadhsFlYv6YCgFtNt7jC5h12ap9q
9g/e4HIei3cwPDuAwMliJpezwQyzEt//yqeQC8T3oqua8aFW7/QFAgMBAAGjggIW
MIICEjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUF
BwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFLF7tkThKd1TujIYAQjiLpQTQTlZ
MB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkw
RzAhBggrBgEFBQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAC
hhZodHRwOi8vcjMuaS5sZW5jci5vcmcvMCAGA1UdEQQZMBeCFWN1c3RvbWVyLmdi
Yy5tc2cudGVhbTATBgNVHSAEDDAKMAgGBmeBDAECATCCAQMGCisGAQQB1nkCBAIE
gfQEgfEA7wB1AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAABjc5y
qX0AAAQDAEYwRAIgKznMqbovgEm/AdIQ+OlOUEzwvcnxOmGiDye9PxX5RYsCIAt/
mcDr9GeArJS0QcyuuxCPJwiACmGkTz5020Wr2OTVAHYAouK/1h7eLy8HoNZObTen
3GVDsMa1LqLat4r4mm31F9gAAAGNznKpiQAABAMARzBFAiA2YBGcxihkt644RmCV
3ewPKpznOjMDcZj9WVwjIzvrHgIhAMoftVhaK6+NbktNl6hslCvqen9PqI7UnelV
F+vCJJ55MA0GCSqGSIb3DQEBCwUAA4IBAQCLciE5H0I7yvrXvwjeMlymHUz/4qeM
ro8TjfvaRfUXFdxGuI2L0LVf82G5hofntUhygGAInMmlO79uJLWa53raMdhzt5hp
T0zb9ZZDL27eHjhEKbzxz8gjxKYxdT4KvUipqyUnbi/6imQigZUFjNDUW+WSWMU/
KZEPp6EIGzhyzjlinRqLlSk4dj/0gdJR8S8IBnNdf0jA6+v8RC3Jrni1Khp57kKF
OVPRbP83YzIhNkiKJoN9mXlWOV3rsGBSfs6bL8zdPBv0ndVVfvV2isbYA6oKzd1O
laPubYPoyyJUfgGb2kx1VBRnBzloRYodiUyaMF5VzroiFndXaaczfOXV
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 279995446479510841046170588659961228882991
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-22 00:33:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-22 00:33:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'customer.gbc.msg.team'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 853435109254962119366342349544649781834857245314078735469714448798290691154799552324923542187017027613157006113458915413256757756309398610257758336863704390275954797251279600707926488121858686308821686620268351274439196140274168342248813431654368290489489897530596850675191830853405141577800935675419500590294413346939079641719618218831500399332767464884176672778120340055716081478513342865404817081688666051608424098589338115593534656435210656200570231356731346501518568867640998850235314696139317606008204390085091964424477359600756357303007957674223259088457663713610649507801052576347070155432158593573584724687087535328512222707843142477577931501760790269660802999742763227430753885766371927061568753816424982655290439736072631665214400585149300360316384747735935048507952573005270126285304333256776228295002421117437192399425100801756331741968429814513909990510194766227964417317096581415358873063400523022811607816934601226851590116600653529826139688790336340209230044135926617841177719351404443938179678574199080416583500879306695197543737700343350607406203952031031957463550471291559237876999504432073066604706791837863774369924953752264899795550155867499909000114166459815275262193923280874377959929368414827524397101741061
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b17bb644e129dd53ba32180108e22e9413413959
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.gbc.msg.team'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018dce72a97d000004030046304402202b39cca9ba2f8049bf01d210f8e94e504cf0bdc9f13a61a20f27bd3f15f9458b02200b7f99c0ebf46780ac94b441ccaebb108f2708800a61a44f3e74db45abd8e4d5007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018dce72a989000004030047304502203660119cc62864b7ae38466095ddec0f2a9ce73a33037198fd595c23233beb1e022100ca1fb5585a2baf8d6e4b4d97a86c942bea7a7f4fa88ed49de95517ebc2249e79
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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