go.1spatial.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:56:5f:fc:3d:33:21:64:04:c6:ce:07:d2:10:8d:7d:d9:48 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=go.1spatial.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:56:5f:fc:3d:33:21:64:04:c6:ce:07:d2:10:8d:7d:d9:48
Serial Number (int): 290728727710167321613652376354508364437832
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3d:49:a4:d6:3e:3c:3a:c5:ee:3b:f0:3f:da:0a:2c:25:41:d2:60:f8
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 21:17:a8:22:72:63:50:a1:a1:0b:c3:77:90:83:f2:ea:b5:f0:9c:f0
Fingerprint (sha256): 13:bd:03:77:0d:a2:35:93:c7:ab:82:a1:0b:1e:4b:fb:43:a7:96:32:7b:07:69:ba:97:39:4f:fe:5e:4c:47:08

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate go.1spatial.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for go.1spatial.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

go.1spatial.com

Other certificates including the domain name 1spatial.com

(limited to 100 certificates)
demo-1int.trial.1spatial.com
*.1spatial.com
mt911-1dg.1spatial.com
go.1spatial.com
1spatial.com
go.1spatial.com
rizing-1dg.1spatial.com
pentest.1spatial.com
pentest.1spatial.com
spatial.shr.kisshosts.co.uk
pentest.1spatial.com
pentest.1spatial.com
go.1spatial.com
go.1spatial.com
*.1spatial.com
pentest.1spatial.com
1spatial.com
1ssupport-1int.1spatial.com
missouri911-1int.1spatial.com
*.1spatial.com
pentest.1spatial.com
pentest.1spatial.com
pentest.1spatial.com
*.1spatial.com
www.1spatial.com
1spatial.com
go.1spatial.com
1spatial.com
pentest.1spatial.com
pentest.1spatial.com
pentest.1spatial.com
mt911-int.1spatial.com
*.1spatial.com
prod.30.slot.cdn.salesforce-communities.com
customer1.publicsafety.1spatial.com
pentest.1spatial.com
*.1spatial.com
publicsafety-test2.1spatial.com
pentest.1spatial.com
prod.30.slot.cdn.salesforce-communities.com
pentest.1spatial.com
missouri911.1spatial.com
prod.30.slot.cdn.salesforce-communities.com
go.1spatial.com
pentest.1spatial.com
pentest.1spatial.com
prod.30.slot.cdn.salesforce-communities.com
prod.30.slot.cdn.salesforce-communities.com
mt911-1int-dev.1spatial.com
tmpa-bulktest.1spatial.com
www.1spatial.com
pentest.1spatial.com
publicsafety-1int-test.1spatial.com
pentest.1spatial.com
pentest.1spatial.com
www.1spatial.com
1consultants-us-int.1spatial.com
1spatial.com
go.1spatial.com
*.1spatial.com
prod.30.slot.cdn.salesforce-communities.com
dg-example-cloudcommon.1spatial.com
pentest.1spatial.com
defrarules-dev.1spatial.com
1spatial.com
pentest.1spatial.com
mt911-1dg-dev.1spatial.com
go.1spatial.com
www.1spatial.com
www.1spatial.com
pentest.1spatial.com
*.1spatial.com
pentest.1spatial.com
go.1spatial.com
1spatial.com
*.1spatial.com
*.1spatial.com

Certificate

The complete raw certificate details for go.1spatial.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 290728727710167321613652376354508364437832
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-09 12:52:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-07 12:52:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'go.1spatial.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 735367320117015875582770252217582918874093494476880134683292332906397058023197474877939496970440716112186159560061887453118227308421976781952213289724517465786022206952711840997818716641304134169063728728125839845427049948535987008366131293704385130571100993242594407996597446669471392113827576243936475916845476102403186528237803170065846585023708509283992082893701637418138298796505005338650586711314463868067522975844492027037330783919473305723407645581050516228036230804066672780614337790808635657986024296895071466961294590810900095236097356381592215431593906771564334598309281448907151226191446209925299461884224982250378512737206873562240192513610249126705440407266710164247826486639680712614901203780049100870604883701613178350715108913258394794699109544110328965933053319820775757163742317844951207496460148540602758881332303415680514858528982922598534575959556593830865077398932780533685495068368006301990453000264165894923945831719368198067973093984581690956706417722165468637096258597473122002631458248479929325705727113000608258424943541896066076181427653930240265400705884393722121563764469080852339941336912269641612360832886316258366788171282583545869778556007163066532125467142317557617340825384018103894164868320063
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3d49a4d63e3c3ac5ee3bf03fda0a2c2541d260f8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.1spatial.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016bd7024692000004030046304402203cceded2509d1c832fa78237dff7e14b63d953527ed6644762b93128afd36b99022055f7b86489ce50bda135e226f81f4d316c017c7c3281e0b75e6f52b642ae718500760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016bd70246b100000403004730450221008cf7524ad4b7d0640f33e3c21e6adc84e00cb0b6d24aa7df61b2d6901bd7b87402207d7d95982aecbbba7d1d515b33798ec14f5e2e734530583510c0568404cd4526
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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