app.geovina.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:67:11:9b:05:0b:9e:9c:4d:4d:57:c3:2e:4e:74:db:5c:27 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=app.geovina.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:67:11:9b:05:0b:9e:9c:4d:4d:57:c3:2e:4e:74:db:5c:27
Serial Number (int): 296409343372411463539664904680155494702119
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ce:b8:a7:3a:8e:ba:90:3c:8c:fd:ab:ac:3f:1b:95:8b:43:97:4d:d0
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a4:08:88:b1:ed:49:0c:e8:83:fb:2c:70:66:21:56:86:22:9e:b7:89
Fingerprint (sha256): 1f:7c:1c:be:e4:54:25:96:97:f9:b6:ba:a0:a2:1f:ba:24:3e:72:48:f1:77:97:7d:39:1d:5a:1f:92:f2:bd:78

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate app.geovina.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for app.geovina.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

app.geovina.com

Other certificates including the domain name geovina.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for app.geovina.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 296409343372411463539664904680155494702119
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-18 01:00:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-17 01:00:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'app.geovina.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 716531644392221042495252581966525649545899951260813408390287122238993761304115751778628755881778264743255066005941539935417965492633047021920618189407716923568903472698373154522260936065722464383522924889108042242442281534052437128208782396425332240481521955500352967126835703201502578259342853714408667503038607981468150504797105367290195079404896188836965038296669816507510010429604011950205689698347203989981015152355480764658048801926888603144418215141731231541824518215851034736524166674015820605962638728420660884384843425496441063493194851263808968907270285171879498187482674087429173362589039296259129640982273310560201818969267720695189821636575025332376837203229592262027996846344458521177573793423630679544274627753191761485808321626109104896242668606763753457445943707097044536012058908725652194949783419742489043105105490792730362147159191012842065539016264859530268911962764498804725768083576780296318291931369571328656649606850417606313007404351372226142080552571559088987202780138000294334548601515536704709896714667721071811121876140828169686126272314331928016175321456126924504832141951488610869725577692822873646392390555401062117578690731953200019656088049229004993023980194103187398783549549759145840729470597459
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ceb8a73a8eba903c8cfdabac3f1b958b43974dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.geovina.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016fb66170b00000040300483046022100a9c7dd4ffa07638c130048de99c59a5c983845e4d9a36cfdd4032ef554d5b587022100e2e70798e00ce0ef324fb2dcb82f38888fd508aa393420bed468526fd9da882b007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016fb66171450000040300483046022100c37631b3bcec2efb5ff04e78dea3b5af33d9a5c686b147fc0cfcebf7e56d9e9e022100f00a06dd380d2fc63615f4ba170ed47d869195dd9ab84903d2d2186001425106
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00368d012ff747f26fce9dffaeb16326d54331df34d9e034567fcf6892b1c188c3fcc11224e1696e783f3bb879c19255767a04052b09f65bcbc7c89dfed1ca55a8aaa5de61742cb035ae5f5506ac37b3ea402523ad52b3e7d2cde32e5df9fd53ca6b5364648297b1a61cf740f9ae2be934b62722771f92e108af575498ef3a625268d086fce2ed87337689bcbe1f2667c170d61ec163778377dc7114d4f449d9cc8c4b2b179edf039eb2045ea9a214830cbd136582d2617747d8c2a7afc7ba242f2922672e39280e3e324ff7bf637ab13d62f36afbfcdd88a3a0602d3ce2f1a3709e861c9ba76ce11a90904167a5602e098a85d724a8b7ecb205a807b946c57c0c