digibox.soprasteria.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:1d:f2:cb:65:72:e2:39:92:06:bb:6f:43:23:76:f6:12:ab was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=digibox.soprasteria.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:1d:f2:cb:65:72:e2:39:92:06:bb:6f:43:23:76:f6:12:ab
Serial Number (int): 271527775704855581297586757497230653264555
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ec:f4:25:97:19:e4:83:8b:a9:41:97:6e:d2:db:9f:23:de:d9:82:4f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 24:30:eb:b7:17:8d:0f:b8:ba:22:9b:8b:41:23:81:27:ac:c9:e0:04
Fingerprint (sha256): 2f:df:e5:22:ca:6a:e1:65:e0:16:b5:22:a1:3f:3d:ab:27:e9:1d:0c:5e:1a:0a:c9:d0:50:c3:55:d0:0d:a9:95

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate digibox.soprasteria.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for digibox.soprasteria.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

digibox.soprasteria.com

Other certificates including the domain name soprasteria.com

(limited to 100 certificates)
svs.soprasteria.com
soprasteria.com
blog.soprasteria.com
innersource.soprasteria.com
soprasteria.com
blog.soprasteria.com
blog.soprasteria.com
webext.soprasteria.com
soprasteria.com
soprahr.tn.web.soprasteria.com
via22latam.workspace.training
agenciasur.soprasteria.com
go.soprasteria.com
rpa.soprasteria.com
soprasteria.com
blog.soprasteria.com
www.soprasteria.com
soprasteria.com
active3d.soprasteria.com
cdn.soprasteria.com
soprasteria.com
mgw08.soprasteria.com
solpm.sciforma.soprasteria.com
soprasteria.com
vpn-in.soprasteria.com
www.soprasteria.com
svncassiopae.soprasteria.com
soprasteria.com
digitaldesk.soprasteria.com
ras-ghc.soprasteria.com
svs.soprasteria.com
www.isacampillo.com.mx
*.sbs.msuk.soprasteria.com
vpn-uk.soprasteria.com
soprasteria.com
soprasteria.com
preprod.digitaldesk.soprasteria.com
videoconferencing.soprasteria.com
mgw02.soprasteria.com
speed.soprasteria.com
cci-paris-idf-a3d-rec.soprasteria.com
gda-grs.soprasteria.com
www.soprasteria.com
soprasteria.com
soprasteria.com
parici.soprasteria.com
parici.soprasteria.com
blogtech.soprasteria.com
soprasteria.com
agenciasur.soprasteria.com
soprasteria.com
portal.restricted.soprasteria.com
blogtech.soprasteria.com
www.soprasteria.com
digibox.soprasteria.com
webext.soprasteria.com
app.ameicontabilidadeonline.com.br
soprasteria.com
soprasteria.com
slnxoccitaniekeycloak01.soprasteria.com
*.sit.fes.soprasteria.com
worktime.soprasteria.com
klif.f2fmobile.soprasteria.com
digitaldesk.soprasteria.com
svs.soprasteria.com
soprasteria.com
soprasteria.com
svs.soprasteria.com
digibox.soprasteria.com
ras-ghc.soprasteria.com
soprasteria.com
blog.soprasteria.com
quill.morishin.me
*.dev.fes.soprasteria.com
*.trn.fes.soprasteria.com
livingactor.soprasteria.com
soprasteria.com
uat.digitaldesk.soprasteria.com
api.cicd.arcus.soprasteria.com
staff.soprasteria.com
soprasteria.com
soprasteria.com
dev.digitaldesk.soprasteria.com
csadeo-wekan.soprasteria.com
soprasteria.com
soprasteria.com
blog.soprasteria.com
portal.soprasteria.com
uat.digitaldesk.soprasteria.com
soprasteria.com
remote.siiecome.soprasteria.com
soprasteria.com
blog.soprasteria.com
staff.soprasteria.com
blog.soprasteria.com
*.apps.cicd.arcus.soprasteria.com
diwocs.soprasteria.com
klif.vpn.soprasteria.com
blog.soprasteria.com
soprasteria.com

Certificate

The complete raw certificate details for digibox.soprasteria.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwk/bzh26BLrBb7gE04E
g4SmJKmqpyBI1eNUFzAwqfw9ELZm61dkiRNanItiCkNgaClz1k6pMzILNosdzEDu
4Hp2uRbPWFplvhZbYXYlszmf6bC5GTcjNnxgW4T0rk7GLFK7F7l14naHCEUNomtf
J+Q5YvEdStgAKZL3LcctWPOn0CdnzBRO8uI3EUC6dVW/kh9H9WusUzTu3a05GrJZ
zgnOi1G8sPfcqtjKVOssO0CPw5QsgK12bQBNlInDQZCVYR0F57ipQH11N/SarbKk
x4AoDPbNjVA7bvMGnvxU8llWFc8gZgKPSCeVnwJnFcDAh4KAXHyipjXpHocy7GwH
vwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 271527775704855581297586757497230653264555
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-11-15 11:33:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-02-13 11:33:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'digibox.soprasteria.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24621029724008247887183816634336034586195526152358398526889661895225931576928317638980761592644062930280847560791353562159408056721203253713544590780430651667979272061395103727211410196939164608323042749514816396972016497221632294403455490629232876837696708738001826634472056824465151366237000839671017511983607416471696143257728489839376781979421562086706460683267562711918360075550367314139427058169929304242073516702079206604173827401770745311114936351563088186017227910060505612045573416095824730043500895242724563654567436594468637029885228711594462853823985658720878753676480999508005497435493441529360423847871
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ecf4259719e4838ba941976ed2db9f23ded9824f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digibox.soprasteria.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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