shop.goveo.app

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:3c:b5:52:30:25:43:0c:22:87:d5:5d:00:bc:31:47:66:09 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=shop.goveo.app

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:3c:b5:52:30:25:43:0c:22:87:d5:5d:00:bc:31:47:66:09
Serial Number (int): 281994816822624370530677275180727582287369
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e9:fa:c4:95:3e:ab:29:3d:af:76:5f:fc:06:7a:6a:5c:72:e7:a2:de
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ff:fd:af:4c:9f:80:6b:02:66:af:16:cb:d6:64:a3:a0:ba:bd:ee:d4
Fingerprint (sha256): 27:4d:ae:1b:66:39:2d:e5:fe:6a:fb:75:8f:c7:ce:5a:ad:6a:eb:19:63:05:61:88:ea:8c:d0:ca:fc:12:03:1d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate shop.goveo.app

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for shop.goveo.app

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

shop.goveo.app

Other certificates including the domain name goveo.app

(limited to 100 certificates)

Certificate

The complete raw certificate details for shop.goveo.app in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGVTCCBT2gAwIBAgISAzy1UjAlQwwih9VdALwxR2YJMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEyMjMxODIyNDNaFw0y
MDAzMjIxODIyNDNaMBkxFzAVBgNVBAMTDnNob3AuZ292ZW8uYXBwMIICIjANBgkq
hkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA2/8V0e2Dlfd7A/FQ3UU1nbD5J9hBlScv
dE0uw7h6SS/sNOzTnGhXEjkYQ7VbPp8qmwdt+lIIxso7mc0QZD0F+rrMrCwo9gUj
lNzm72mKcVbZyXe4zAj6q2lnKuBHcnQOSSLuO+LjyIwWkHcQ+070wgTpD/NVckQb
UrhaD/mxQKJPibp8g1kaDD/v9qBQgj4Z4U48bfzTGBdFzYUpZj+v/u4ZQ8FuC+3R
Dyu620IHaqnx4WS5KD5K9gHac1ZpJmte/5tvf2PhkWLAmAc6gwHuowTfB9pcKhb1
hUjjMQaMx0+oYgePvype4F8fwIcYMGyAojaFx+O3C5rrbbSu/hi9s4e3ubtUjbQp
p4bWD7GiKqD38RgCUQAA3H0Ml5bdDUSe6oN+q/lgeZO7YnVFLrvtU5JsFEMXf3WZ
FHqUXUrbCJ73PNfCormmz5e+kMYySUARsLDMmhc+VmY3AoXXwqoyG08ANesPqDpx
Im0kPLAVFGIAU7hOqXkhKaobhc9fhHs82pOeFBlGa85khhT/PyG2zhZaYc41jXXP
qa6QQdSLqqH4jzeEXCkAF+LgTXWqQc9ewEKw7Aa8wlMK3gTLZtrWumu77YS+mGdW
isRuio2lMzC3p5IyF7nYeOlLNBK8TvPAIzNGDhRfWi1cjPWiNcHN1guHh+Gq8kct
bq919x4ZFsMCAwEAAaOCAmQwggJgMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAU
BggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU6frE
lT6rKT2vdl/8BnpqXHLnot4wHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo
7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQt
eDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQt
eDMubGV0c2VuY3J5cHQub3JnLzAZBgNVHREEEjAQgg5zaG9wLmdvdmVvLmFwcDBM
BgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIB
FhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQUGCisGAQQB1nkCBAIEgfYE
gfMA8QB3AF6nc/nfVsDntTZIfdBJ4DJ6kZoMhKESEoQYdZaBcUVYAAABbzQ2L0AA
AAQDAEgwRgIhAL6MisPgbD9MfgYpbpIWVTBl+ce7HazthcrUkkXhuq8zAiEAldrg
yUJ1u/MPPLvpBGng3kgtmN01tVZdmjB1tQbaeisAdgAHt1wb5X1o//Gwxh0jFce6
5ld8V5S3au68YToaadOiHAAAAW80Ni9gAAAEAwBHMEUCIERGvEDbwuYUDbKooRAj
Q9WTD/LCa2fKjV0ny0l199YSAiEAl3KyQwc3zb1hlYlvZvLBcBg4fBy5O06LblsK
tLNZbrUwDQYJKoZIhvcNAQELBQADggEBADe7w3U3fEujBXGfhvuVQAN2Q33vd/Wu
eUzGw8ziY/zGl4n7kmrsB1Tj8BGHSeIWzz8K3WRVz7wovUKAr290XVOI0uBjWSvE
rRSRpfTbvQsyrUcIU2zYMbEm/TUlsNXobMN+ZQjEVPKhESWasoMhjjMNgbTzW1jc
5ODc3C+fl9Le10sH61zCGdvFv5/9s2c5hd7vAUq4S30YaJgtQF8UrQg8Wue8JgCm
l+6OKihOxFIr9XAkwOdwP9g+NvRDmeACmWk7WSHP2sE1GdJ7td3IblMDChe/JIgY
7jgQu8jppoZ1O3X6MOrToa6AGPjq22vTJEi5M/SBmZruySEXfcUM+6M=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 281994816822624370530677275180727582287369
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-23 18:22:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-22 18:22:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'shop.goveo.app'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 897507117161026428483042046328141893259266531087304575913438887050803954435287444408945086896704869871471051096755116887101318857678010499738742248356721905854195863772997788339665059431793502980043630245090436633000703444009814868883433034580532301766327257542459779411229416768665770050126629366234487223026252243537043715523816640829234483481508670813300056509447558075967854541332546394127599784549750809209765421103512313333066810742112936424867752842805590230656073521189631930010193220223417270364091164104111319866884210855225838620941348605627756321319516181631281005093506811622191530032542201652615704044027073658133410519374572187475425348907403601240676949194608678306580582642594882293266492224851490535640069041134687852055556238109945754330371797335851434179132811602472703148569093719817604569920540079128348876740344108545282088021491963604674025070293669458999394734775300270139923581527906277080393480775890507673853252777126599167737776080277357531946939228705551747335237021194970185633183287498816129180480901748627984299168442114923881755291059205966729047412707227470471009331357867270350606072838516216384736929071406885343240993512218678086208086631145620663195115279871053348393968737041619851954150250179
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e9fac4953eab293daf765ffc067a6a5c72e7a2de
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.goveo.app'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016f34362f400000040300483046022100be8c8ac3e06c3f4c7e06296e9216553065f9c7bb1daced85cad49245e1baaf3302210095dae0c94275bbf30f3cbbe90469e0de482d98dd35b5565d9a3075b506da7a2b00760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016f34362f60000004030047304502204446bc40dbc2e6140db2a8a1102343d5930ff2c26b67ca8d5d27cb4975f7d6120221009772b2430737cdbd6195896f66f2c17018387c1cb93b4e8b6e5b0ab4b3596eb5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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