cowi-konflikt.mapcentia.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:79:ed:52:70:1e:47:60:17:c9:a7:4d:63:e5:90:d6:17:a6 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cowi-konflikt.mapcentia.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:79:ed:52:70:1e:47:60:17:c9:a7:4d:63:e5:90:d6:17:a6
Serial Number (int): 302826479270086529026009063961438700574630
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 37:3a:e4:04:9e:da:2e:e5:e1:04:89:7c:f5:45:61:1b:ed:3a:97:1b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 45:66:80:78:ac:7f:04:e0:3e:3a:ef:22:ed:85:9a:69:65:4d:16:36
Fingerprint (sha256): 2c:da:fa:dd:9a:17:eb:87:48:36:75:05:1a:11:2d:0b:82:fa:e8:46:12:08:d4:2e:67:f6:85:d9:99:f4:56:0a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate cowi-konflikt.mapcentia.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cowi-konflikt.mapcentia.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cowi-konflikt.mapcentia.com

Other certificates including the domain name mapcentia.com

(limited to 100 certificates)
drayton.mapcentia.com
vidi-furesoe.mapcentia.com
cowi-vidi.mapcentia.com
geofyn.mapcentia.com
vidi-dragoer.mapcentia.com
geofyn.mapcentia.com
odder.mapcentia.com
vidi.mapcentia.com
eu1.mapcentia.com
rm.mapcentia.com
watsonc.mapcentia.com
geofyn.mapcentia.com
*.mapcentia.com
fkg.mapcentia.com
vidi-furesoe.mapcentia.com
assens.mapcentia.com
dragoer.mapcentia.com
geofyn.mapcentia.com
drayton.mapcentia.com
cowi-konflikt.mapcentia.com
ballerup-vidi.mapcentia.com
naturparklillebaelt-vidi.mapcentia.com
naturparklillebaelt-vidi.mapcentia.com
vidi-dragoer.mapcentia.com
vidi-furesoe.mapcentia.com
blog.mapcentia.com
dragoer.mapcentia.com
assens.mapcentia.com
furesoe.mapcentia.com
ballerup-vidi.mapcentia.com
geofyn.mapcentia.com
cowi.mapcentia.com
drayton.mapcentia.com
rm-vidi.mapcentia.com
rm.mapcentia.com
vidi-geokon.mapcentia.com
odder-vidi.mapcentia.com
*.mapcentia.com
odder-vidi.mapcentia.com
ballerup.mapcentia.com
drayton.mapcentia.com
cowi-vidi.mapcentia.com
vidi.mapcentia.com
furesoe.mapcentia.com
ballerup.mapcentia.com
eu1.mapcentia.com
assens.mapcentia.com
furesoe.mapcentia.com
cowi.mapcentia.com
rm.mapcentia.com
vidi-furesoe.mapcentia.com
vidi-dragoer.mapcentia.com
watsonc.mapcentia.com
geofyn.mapcentia.com
assens-vidi.mapcentia.com
cowi-konflikt.mapcentia.com
cowi-vidi.mapcentia.com
naturparklillebaelt-vidi.mapcentia.com
assens.mapcentia.com
geofyn.mapcentia.com
cowi.mapcentia.com
fkg-kort.mapcentia.com
eu1.mapcentia.com
gc2.mapcentia.com
furesoe.mapcentia.com
cowi.mapcentia.com
rm.mapcentia.com
gc2.mapcentia.com
assens.mapcentia.com
assens.mapcentia.com
drayton.mapcentia.com
vidi.mapcentia.com
furesoe.mapcentia.com
cowi.mapcentia.com
cowi-konflikt.mapcentia.com
vidi-geokon.mapcentia.com
odder-vidi.mapcentia.com
*.mapcentia.com
vidi-geokon.mapcentia.com
dragoer.mapcentia.com
cowi.mapcentia.com
vidi-dragoer.mapcentia.com
cowi-konflikt.mapcentia.com
cowi-vidi.mapcentia.com
gc2.mapcentia.com
eu1.mapcentia.com
vidi-furesoe.mapcentia.com
rm.mapcentia.com
fkg-kort.mapcentia.com
assens-vidi.mapcentia.com
fkg-kort.mapcentia.com
odder.mapcentia.com
furesoe.mapcentia.com
vidi.mapcentia.com
fkg.mapcentia.com
geofyn.mapcentia.com
vidi-geokon.mapcentia.com
watsonc.mapcentia.com
cowi.mapcentia.com
ballerup-vidi.mapcentia.com

Certificate

The complete raw certificate details for cowi-konflikt.mapcentia.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 302826479270086529026009063961438700574630
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-06 09:43:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-04 09:43:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cowi-konflikt.mapcentia.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 777531048181443152685999497851019554393721854048374463812586080082725985413135122556148798679954112427515605271050583340845232205910383808415168635544047863045277414805793521726867603877407776501645554720628571890281514214089583181241034848458266165991267585806544039597133099062164684714055334001733104011060286708329143862777998091817585414271205410474232469587541451995004072578062122365025374208015044224579936930593402972489370349505471839229544279161983622944097495912889884961711500864630467331352890180800101022739898034521930343205930505026004605807522614102356821782778168265285670549399369289106775132850303718879525898714749616353195797415589088829757604679529773639066586355602002145889584436577865807864135337415867019730329347775296940948706797184461064124997378277128703430708289334496804960106353248061738020172833329901581415352267722115153723566586843099717337187023134606228386357477443279925253455887414183756833748065080624173206764126124447973360060417062779275274793416582363154610321093121934011576024199221940596838311356410755610689904101294150192830616924702118377776455999892247421165210322102475938292665874920524153846912911520654167070761006289076304948338561305367666364960639914492972186226769869941
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							373ae4049eda2ee5e104897cf545611bed3a971b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cowi-konflikt.mapcentia.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016648f99ac9000004030047304502202c7c4548c4218de139b2db9a1177a9600916fd154dba015b42ae2d79d7f05b51022100b676070e8b00a32ca794351efbfb1cdd4f12060a2e8d89975eb74104e28317fe0076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c0000016648f99bed0000040300473045022100fc71afa066b5bdd66f67b1cde4535cffce3bde2a54446763a041459b3fdb182402203b77b258d042b83b1e119728a6b2e99f1f0f10bc48bff1be84803d6cd07b1547
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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