heineken.mindtek.it

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:43:18:8c:6d:ef:eb:91:ce:e4:71:3d:ed:27:ca:07:35:33 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=heineken.mindtek.it

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:43:18:8c:6d:ef:eb:91:ce:e4:71:3d:ed:27:ca:07:35:33
Serial Number (int): 284168407002233732736250109010755031872819
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 9f:99:73:f0:07:35:ed:1d:ed:55:23:8c:96:9e:3d:9c:76:11:36:4e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c4:69:bd:f0:bd:e2:57:8f:51:aa:6f:23:3c:5b:27:99:ef:63:ea:7c
Fingerprint (sha256): 1f:b7:26:6c:c5:c7:34:98:83:0d:b8:d0:38:43:ee:87:54:67:d8:7e:97:ca:c1:5e:b3:f6:68:9d:73:07:9a:a9

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate heineken.mindtek.it

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for heineken.mindtek.it

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

heineken.mindtek.it

Other certificates including the domain name mindtek.it

(limited to 100 certificates)
mindtek.it
mindtek.it
okoban.mindtek.it
app.mindtek.it
mindtek.it
mindtek.it
mindtek.it
heineken.mindtek.it
mindtek.it
heineken.mindtek.it
mindtek.it
mindtek.it
mindtek.it
mindtek.it
heineken.mindtek.it
mindtek.it
mindtek.it
mindtek.it
mindtek.it
mindtek.it
mindtek.it
mindtek.it
okoban.mindtek.it
mindtek.it
mindtek.it
mindtek.it
mindtek.it
app.mindtek.it
mindtek.it
mindtek.it
okoban.mindtek.it
mindtek.it
mindtek.it
mindtek.it
app.mindtek.it
mindtek.it
mindtek.it
mindtek.it
heineken.mindtek.it
mindtek.it
mindtek.it
mindtek.it
app.mindtek.it
mindtek.it
mindtek.it
mindtek.it
mindtek.it
api-cp.nearit.com
mindtek.it
mindtek.it
mindtek.it
mindtek.it
mindtek.it
mindtek.it
mindtek.it
mindtek.it
mindtek.it
dev.mindtek.it
mindtek.it
mindtek.it
mindtek.it
mindtek.it
mindtek.it
mindtek.it
mindtek.it
mindtek.it
mindtek.it
mindtek.it
mindtek.it
mindtek.it
mindtek.it
okoban.mindtek.it
dev.mindtek.it
app.mindtek.it
mindtek.it
mindtek.it
mindtek.it
mindtek.it
cms-dev.tts-indeva-pi.mindtek.it
dev.mindtek.it
mindtek.it
mindtek.it
mindtek.it
mindtek.it
mindtek.it
mindtek.it
mindtek.it
app.mindtek.it
mindtek.it
mindtek.it
app.mindtek.it
mindtek.it
okoban.mindtek.it
mindtek.it
login.iab.mindtek.it
mindtek.it
mindtek.it
app.mindtek.it
mindtek.it
app.mindtek.it

Certificate

The complete raw certificate details for heineken.mindtek.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtUz5bEjn9l8XR/IuVbi
BbTuj+pOAX0dC5w40bkEtzI3pcGy8ieK5z9kfkwrFqpD96BVtxblORbZrlbZ6fJk
BQbHO/dmr51H65kRaSQPqhXWNNVKHPRcmmRTsxH9QQM5/iUEW2t4lCe3ZtXnp026
vr5D9BKiZl+a2nhVmTYDk1KWhUjY2neYa3gmOlIO5aSnj6PJ8dR0w0iPiQCoM7gN
bKIn9rP14sTfbY+mzkXRoVE/5FY31fTLqCjcYOpT8OT94R2bu5kdBfjCh/ulOOtE
GvuvFZy0SW144VZF7XoVwVKwOQi70/q0quuzPzRe5DpUH4awqkXBcVrK+83pdb9S
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 284168407002233732736250109010755031872819
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-13 10:33:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-11 10:33:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'heineken.mindtek.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21565646025627433341419369142605072443605073575842009119546231846687645704962229952952892711567874207383343043104368661393554738349297268085349179375777460039737577113482466835524555205775215855850130198237835732223647546006418753010049864433040465146022264435052413093571054941858093556457005862555864129451435495593197847931547089469233111562938062542997089013644547427374354989025692205870422262038982541173797108838777311784728034750057205392135206998489965878312364586554447048375756871435656790672729024108604800044715477572562759905331395597547076756447063381448131268432466029144493422377840812174051542782549
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9f9973f00735ed1ded55238c969e3d9c7611364e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heineken.mindtek.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001670cd9709e0000040300483046022100dc257c6756214863c6a8c111653da4df5271d09bcc10ef617029eaa96baf6215022100bfff437b4985cc03f3eaeda69a11495c3c057cbfa62d8afce070395d65bd208f007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc56000001670cd9726200000403004830460221009166c01e966bb31e47124599af2009555b6c34e47206736d92733e3a23ccad31022100abaeb0a2d2cade86b288f46786f207c7417e87481cc8c360828fc50b1f27c9a1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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