medias.trinnov.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:45:e2:2a:91:52:a5:61:7c:05:1a:69:0c:fe:d9:44:01:7a was issued on by Let's Encrypt.

With 17 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=medias.trinnov.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:45:e2:2a:91:52:a5:61:7c:05:1a:69:0c:fe:d9:44:01:7a
Serial Number (int): 285116967663838228102635697470061555220858
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 97:df:1a:bc:60:c6:7f:48:ed:77:9c:ca:dc:09:50:0e:5c:4a:fd:36
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 78:85:13:f0:07:db:44:b3:d9:b0:46:ae:f8:64:64:6f:ba:22:51:5e
Fingerprint (sha256): 12:f8:e1:cc:44:c7:33:ec:a7:81:b4:33:3e:5b:c6:a0:17:42:20:e9:74:ab:59:59:f3:8c:a6:ad:c6:4e:fb:d4

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate medias.trinnov.com

17

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for medias.trinnov.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

asica.trinnov.com
craft.trinnov.com
fast-loudness.trinnov.com
files.trinnov.com
medias.trinnov.com
opensource.trinnov.com
svi.trinnov.com
test.trinnov.com
trinnov.com
users.trinnov.com
www.asica.trinnov.com
www.fast-loudness.trinnov.com
www.files.trinnov.com
www.medias.trinnov.com
www.opensource.trinnov.com
www.trinnov.com
www.users.trinnov.com

Other certificates including the domain name trinnov.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for medias.trinnov.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAwjK2m5/Si0/JO9+fdxsF
cOBC8YVxwppPV3k/TaOkOHce25QXoZk7XdyO0BrFvw4YKfK6B/bF86vJsdC/ye+J
3fCuS1nmko42hqVJa4Sl1PKPvG+Hzwn+NW3CJMi3WJlhHCDXyUNMELxHbxvJkpED
QDIiek7/ccq9akCfDrSIzHM6OWzBPX2nWPlckOtRLD2/AUvf929qLoIjFT2n3tPk
JTjyi7bjXiyuV6+LSzsx4WfrFub15ZP8QOMgnHmyeGTIPoCj5XXi0YZTWgyB99hW
eh4yZQmfs2gcEAYAEMi/KOwXFHNuiXtcFbmGe0UKDjN5Gw01ltKWsXN9T/uqbE5I
3b4bt1jYAoqA580iJBOl5OPjs0698Jh4sMGXttRqtsFAaRr80mFeJERriBGfIk6L
bpMXp/by93GhwONMMRQrf/Tj29z6rPRLUZQB9cEueJxTT2e3ImlNA5ezWfKsRKsk
Vq1Z185cHb26AaYJ938hEYE068o9J5Bo8n6DIDWqPph6WC2VxyZIMqQpgnF3kOnr
uItiM3swX0foAnn0g7aYHC1tHaFJWdqcEhEkq49e3gmvLo6bWbLZYFMZ3IvCdQID
zzdxxyRVHwakQOxj6qxLMexQ0xBdxw6X2GJodnynvLhcRd8e0IyeEWqMHSd/xNlF
T9S2qyEIxfl2F9lkz8CKZVkCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 285116967663838228102635697470061555220858
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-01-11 22:48:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-04-11 22:48:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'medias.trinnov.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 792259122098386427595330840398929889163716142106310937481004221411564258474568359209851022835220774192910750612085163675198233170595164202459203374938628825874130565703155392571800237425272700929173546061791121562611641043892015451181527044719908204509660477094945725576549635144384070952972318667105535014487229506601579304194769304370280294841100574973865530721968886357829497252950869753164993192150988429842021105052733652771995784427992485667577317493632507502522136967486919943941494956226686887185271738340425679211011461466576799230508579790884642377340127268556119179921658353136597552355231857483500689314867074897575007564377382250281180502105564307724178332436700367974435374787774122962063006683359197150689697962236665654390979473347196964457705771163222324060318057845461305581602462068266972983024001199077099708965975435485509020230441921917977024775712940475434633963778813596481204444240020668005248894534743384201723336332628010400658101394412052558562571463138298353656637312469924136662641322410774688822906519778961268129863578758239670471548239569172273723071244377285230519848780375901798989391192999558854446774583529215098494439840950439542899011322640098657217285099734194478584033557657764842618986587481
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							97df1abc60c67f48ed779ccadc09500e5c4afd36
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asica.trinnov.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'craft.trinnov.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fast-loudness.trinnov.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'files.trinnov.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medias.trinnov.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opensource.trinnov.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'svi.trinnov.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.trinnov.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trinnov.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'users.trinnov.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.asica.trinnov.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fast-loudness.trinnov.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.files.trinnov.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.medias.trinnov.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opensource.trinnov.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trinnov.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.users.trinnov.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0093f787ef111754dddf04ca12730da39ca82e23042bc8ddb5c9efdf5dec06854e2ef43b835827d8c4e2a48216acd1c77daefb87177497469a5d65d23a85f0534c502f83c0bae8cefd5a347e3586a78ca4a6df7ea62b5e0fdf1826a9072819431523e3357362cdc13603d66ec85cca6f37564c2a6630686833822a5dcf9ec7564d4a5d0c545a063ce0201687ca05b07d1441fcbc49b73f46b3c00bf897f7bc277cf78d56e727dc30465bd524c67f8f1def6db16f36355eda363658b67295fbb91a29618a2737cc4240f81433cc01b5969da2237988096547d51a095ff7e716d650d34c58ea35343bd4c5f7d45eedc95c2a0cfd80958aeb4da5b2f9c3656e368c48