rmspain.eu1.civi-go.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:f6:83:53:e0:e0:ec:e1:86:ce:4e:b8:c4:af:90:68:e3:58 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=rmspain.eu1.civi-go.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:f6:83:53:e0:e0:ec:e1:86:ce:4e:b8:c4:af:90:68:e3:58
Serial Number (int): 432333170378759101696928765991064789640024
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 76:0e:88:61:e8:82:e6:7a:df:07:12:12:2a:41:80:3d:41:4c:a2:b3
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 47:1a:5b:86:6a:5c:99:b8:54:a5:8a:35:c4:e5:75:b4:45:1e:b2:27
Fingerprint (sha256): 21:a0:95:d1:77:ea:a0:b4:b2:10:7f:3d:eb:6a:6f:90:d0:46:06:76:c1:f6:1d:b4:22:a0:9f:54:d9:ab:e5:fc

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate rmspain.eu1.civi-go.net

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for rmspain.eu1.civi-go.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

rmspain.civi-go.net
rmspain.eu1.civi-go.net

Other certificates including the domain name civi-go.net

(limited to 100 certificates)
rmmalta.eu1.civi-go.net
asfes.civi-go.net
msfco.civi-go.net
asfes.civi-go.net
civicrm.demo.civi-go.net
asde.civi-go.net
rmfrance.civi-go.net
rmcroatia.civi-go.net
hbritanico.civi-go.net
rmphilippines.civi-go.net
invenies.civi-go.net
codigopropio.civi-go.net
invenies.civi-go.net
polisnetwork.civi-go.net
rmspanish.na1.civi-go.net
alboan.civi-go.net
polisnetwork.civi-go.net
bergwaldprojekt.civi-go.net
rmcanada.na1.civi-go.net
rmfrance.civi-go.net
barcelonaglobal.civi-go.net
lobomarley.civi-go.net
electronicswatch.civi-go.net
invenies.civi-go.net
msfco.civi-go.net
co.msf.civi-go.net
rmspain.civi-go.net
msfza.civi-go.net
amigosdeldesierto.civi-go.net
hosting.civi-go.net
hbritanico.civi-go.net
msfza.civi-go.net
rmcolombia.na1.civi-go.net
lobomarley.civi-go.net
rmfrance.civi-go.net
www.civi-go.net
amicsnepal.civi-go.net
msfza.civi-go.net
civi-go.net
rmireland.eu1.civi-go.net
intereconomia.civi-go.net
rmcostarica.na2.civi-go.net
www.civi-go.net
alboan.civi-go.net
whm.civi-go.net
rmfrance.civi-go.net
rmalbania.civi-go.net
rmfrance.civi-go.net
asde.civi-go.net
rmspain.eu1.civi-go.net
invenies.civi-go.net
amicsnepal.civi-go.net
bergwaldprojekt.civi-go.net
msfco.civi-go.net
msfza.civi-go.net
amicsnepal.civi-go.net
bam.civi-go.net
lobomarley.civi-go.net
www.civi-go.net
hosting.civi-go.net
asfes.civi-go.net
www.civi-go.net
prosalus.civi-go.net
www.civi-go.net
rmfrance.civi-go.net
rmfrance.civi-go.net
*.civi-go.net
intereconomia.civi-go.net
intereconomia.civi-go.net
intereconomia.civi-go.net
rmelsalvador.na1.civi-go.net
alboan.civi-go.net
bam.civi-go.net
*.civi-go.net
msfmx.civi-go.net
msfza.civi-go.net
radiomariam.civi-go.net
bergwaldprojekt.civi-go.net
msfza.civi-go.net
polisnetwork.civi-go.net
bergwaldprojekt.civi-go.net
fundacionrecover.civi-go.net
co.msf.civi-go.net
amicsnepal.civi-go.net
intereconomia.civi-go.net
bergwaldprojekt.civi-go.net
rmspain.civi-go.net
electronicswatch.civi-go.net
rmperu.na1.civi-go.net
rmcostarica.na2.civi-go.net
rmuruguay.na1.civi-go.net
prosalus.civi-go.net
hosting.civi-go.net
kubuka.civi-go.net
asde.civi-go.net
asfes.civi-go.net
amicsnepal.civi-go.net
barcelonaglobal.civi-go.net
rmlatvia.civi-go.net
msfco.civi-go.net

Certificate

The complete raw certificate details for rmspain.eu1.civi-go.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 432333170378759101696928765991064789640024
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-19 09:34:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-19 09:34:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'rmspain.eu1.civi-go.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 755176267581792971676999783446926994229843170231506763282019104445768685949370822073061375360306398225135042583897329402806408230102710065969457651010829738708032060165305424887951631041197061582796674941691641088015066766451307061786770545366038123381481960641711512733778508842001445555923089260839555153720933929613015322563199416901269525559945652585463917451052544898205829600247230651011079683630869869247785182792753334203789289354821982165029912056682301845691926823135200051241648988270700754080204738293456075351623680559240460126826560253521880445307037463646117256499070915458917045376142914546982230578668362745536095414228974952218510807171408687858066728046146080464380167390068781309564760516716445384668463620304184151253646025925373582011871273481698601827673759267402694565880674290475754723834730981396717507717979126535326162575331798391088212780291016511091234624141800088558409894045235330912971058038526629651549044133572791835810544972176849379942698163726884772013124531166060543233679046432169258398932714197058740442328414407845397793015138193385704491410185554150993241191668178347019144583886125381540450332014752827735544193183242807382990767711632258108441473553263971814015860768226177369866507213437
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							760e8861e882e67adf0712122a41803d414ca2b3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rmspain.civi-go.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rmspain.eu1.civi-go.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e000001705d033ed8000004030046304402205b5d131b52eb07f387f8373711baae6d17382f395b810d1487c17ec2bf6a437c02207a829381871403ed09574bf0f51e2dd0d6394d50c8e35b80d4c187dee750d0f500770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001705d033f0b0000040300483046022100ecb6438f4cf48cfc436a99200269f44d58f0a4967976d3415fa67b5e0ef9f7cc022100bee0aa845de69acb53def071fce91dafafcb95e8d43577e8c80dec5505f4e93e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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