ballerup-vidi.mapcentia.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:e8:38:07:df:21:73:ff:64:3a:71:34:b1:a7:a3:9e:82:3e was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ballerup-vidi.mapcentia.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e8:38:07:df:21:73:ff:64:3a:71:34:b1:a7:a3:9e:82:3e
Serial Number (int): 340356844560408198998872021218183415235134
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 9d:43:07:a5:90:31:84:82:6f:18:9a:cb:61:1e:4e:84:aa:c2:77:2d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 92:9f:e3:02:85:a2:dd:14:c8:63:3d:b7:e7:5d:cb:b0:7d:1d:bb:65
Fingerprint (sha256): 15:fd:a2:03:51:b6:8c:b9:98:53:d5:50:25:42:af:c1:d2:32:62:a9:29:af:99:8e:e6:89:a0:5d:ac:10:6a:98

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate ballerup-vidi.mapcentia.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ballerup-vidi.mapcentia.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ballerup-vidi.mapcentia.com

Other certificates including the domain name mapcentia.com

(limited to 100 certificates)
drayton.mapcentia.com
vidi-furesoe.mapcentia.com
cowi-vidi.mapcentia.com
geofyn.mapcentia.com
vidi-dragoer.mapcentia.com
geofyn.mapcentia.com
odder.mapcentia.com
vidi.mapcentia.com
eu1.mapcentia.com
rm.mapcentia.com
watsonc.mapcentia.com
geofyn.mapcentia.com
*.mapcentia.com
fkg.mapcentia.com
vidi-furesoe.mapcentia.com
assens.mapcentia.com
dragoer.mapcentia.com
geofyn.mapcentia.com
drayton.mapcentia.com
cowi-konflikt.mapcentia.com
ballerup-vidi.mapcentia.com
naturparklillebaelt-vidi.mapcentia.com
naturparklillebaelt-vidi.mapcentia.com
vidi-dragoer.mapcentia.com
vidi-furesoe.mapcentia.com
blog.mapcentia.com
dragoer.mapcentia.com
assens.mapcentia.com
furesoe.mapcentia.com
ballerup-vidi.mapcentia.com
geofyn.mapcentia.com
cowi.mapcentia.com
drayton.mapcentia.com
rm-vidi.mapcentia.com
rm.mapcentia.com
vidi-geokon.mapcentia.com
odder-vidi.mapcentia.com
*.mapcentia.com
odder-vidi.mapcentia.com
ballerup.mapcentia.com
drayton.mapcentia.com
cowi-vidi.mapcentia.com
vidi.mapcentia.com
furesoe.mapcentia.com
ballerup.mapcentia.com
eu1.mapcentia.com
assens.mapcentia.com
furesoe.mapcentia.com
cowi.mapcentia.com
rm.mapcentia.com
vidi-furesoe.mapcentia.com
vidi-dragoer.mapcentia.com
watsonc.mapcentia.com
geofyn.mapcentia.com
assens-vidi.mapcentia.com
cowi-konflikt.mapcentia.com
cowi-vidi.mapcentia.com
naturparklillebaelt-vidi.mapcentia.com
assens.mapcentia.com
geofyn.mapcentia.com
cowi.mapcentia.com
fkg-kort.mapcentia.com
eu1.mapcentia.com
gc2.mapcentia.com
furesoe.mapcentia.com
cowi.mapcentia.com
rm.mapcentia.com
gc2.mapcentia.com
assens.mapcentia.com
assens.mapcentia.com
drayton.mapcentia.com
vidi.mapcentia.com
furesoe.mapcentia.com
cowi.mapcentia.com
cowi-konflikt.mapcentia.com
vidi-geokon.mapcentia.com
odder-vidi.mapcentia.com
*.mapcentia.com
vidi-geokon.mapcentia.com
dragoer.mapcentia.com
cowi.mapcentia.com
vidi-dragoer.mapcentia.com
cowi-konflikt.mapcentia.com
cowi-vidi.mapcentia.com
gc2.mapcentia.com
eu1.mapcentia.com
vidi-furesoe.mapcentia.com
rm.mapcentia.com
fkg-kort.mapcentia.com
assens-vidi.mapcentia.com
fkg-kort.mapcentia.com
odder.mapcentia.com
furesoe.mapcentia.com
vidi.mapcentia.com
fkg.mapcentia.com
geofyn.mapcentia.com
vidi-geokon.mapcentia.com
watsonc.mapcentia.com
cowi.mapcentia.com
ballerup-vidi.mapcentia.com

Certificate

The complete raw certificate details for ballerup-vidi.mapcentia.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 340356844560408198998872021218183415235134
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-15 22:17:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-13 22:17:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ballerup-vidi.mapcentia.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 773947906924656733378207327434215767007559567425891132857383180822686809107462489060671547044487505840831541921578009508978160712515566358750238405137778374733305704362170565514158833992521280101565612159528468224418260850479471294464839981382429924810186092787980902037441652544255718992153213664795362678136701728211027428318453957281391480772667798299477162760467258185853392931527141927743253195462389015024999380571060302954020386579949550497955701469568148659550609456150609257257068847143617225964115457605084363290236478555550743035579516378648547166722393105501050200488740487648377425433300027367270043659082318806413728062743201884930216740795114011493089056114428474511916919697113364918698327630795075468705741204053575851483918403735830584969634559338246544575419418279865882978194710723005695069864907210172882030150141595891915858945916659520550997726746207317221531562527636869395171246028910540345174365679387403058434141659057949481689070153405689491144596158290095222211279855921057668906398641787671833759809926436901895894224953886778561773480620501442309009712992171077435067948089988931796358160563344457901693000828263630256513484982152375529180236621504411518293134251691142182551466494287228545401732857209
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9d4307a5903184826f189acb611e4e84aac2772d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ballerup-vidi.mapcentia.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016bf7ed345c0000040300483046022100f20852fdd1330200818a9ed916ad86dbc784b823c8a43672cea1b82f838bc020022100fdcc2e9436715b942ed2ce628e693eb00c2cff794c93254d254ce2b1643864c200760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016bf7ed3444000004030047304502203483cab874431aeae41d258d250313e2800ee54dfa30432de74b9984059fd09e022100c563842d2ea7882bf257157ae8576de585ad1ca8972abb462d186d7d7cf46686
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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