pro.geovina.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:f6:28:b1:fe:a4:17:f2:86:3c:c0:30:7f:55:fa:ac:51:ff was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=pro.geovina.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f6:28:b1:fe:a4:17:f2:86:3c:c0:30:7f:55:fa:ac:51:ff
Serial Number (int): 345100413378939828580323892898674886070783
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 1f:e7:bb:94:f3:d4:0e:cc:73:82:89:2f:3b:02:c9:3d:c2:f5:b5:7f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 49:34:0d:5d:60:3d:ab:66:50:29:c3:f1:26:40:0c:4b:f0:0c:81:d6
Fingerprint (sha256): 30:7f:ab:df:72:9f:bf:26:c7:80:45:fc:19:fb:4d:6c:a3:38:32:c9:5d:30:cd:ee:09:c3:d3:4c:a5:72:3a:e4

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate pro.geovina.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pro.geovina.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

pro.geovina.com

Other certificates including the domain name geovina.com

(limited to 100 certificates)
geovina.com
blog.geovina.com
learning.ovb.at
geovina.com
app.geovina.com
app.geovina.com
geovina.com
pro.geovina.com
pokemonbrowser.com
geovina.com
isehararenkei.info
pro.geovina.com
pro.geovina.com
pro.geovina.com
pro.geovina.com
geovina.com
dariuszczajka.com
connect.geovina.com
pro.geovina.com
geovina.com
geovina.com
blog.geovina.com
connect.geovina.com
geovina.com
pro.geovina.com
geovina.com
backoffice.geovina.com
app.geovina.com
connect.geovina.com
app.geovina.com
geovina.com
geovina.com
pro.geovina.com
backoffice.geovina.com
geovina.com
app.geovina.com
connect.geovina.com
pro.geovina.com
pro.geovina.com
backoffice.geovina.com
geovina.com
geovina.com
pro.geovina.com
connect.geovina.com
idanbirman.dev
pro.geovina.com
pro.geovina.com
geovina.com
pro.geovina.com
backoffice.geovina.com
connect.geovina.com
connect.geovina.com
connect.geovina.com
connect.geovina.com
pro.geovina.com
geovina.com
connect.geovina.com
app.geovina.com
srauto-stagging.poolkargo.com
pro.geovina.com
pro.geovina.com
app.geovina.com
geovina.com
pro.geovina.com
geovina.com
backoffice.geovina.com
geovina.com
backoffice.geovina.com
backoffice.geovina.com
pinhasov.com
geovina.com
geovina.com
backoffice.geovina.com
pro.geovina.com

Certificate

The complete raw certificate details for pro.geovina.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAk9jKALPN3Vt98nc31SZb
Nvr5IvXTB/SXivlYZ/3tS5eHqlj23LSZvueQylFUpJATU0wzKYLZY+yKIrKfUsJc
K+TXq6Ybe+RrR7mil53ZGdTXXF+weNcVER4P/AEiC2urMxgxr1i8+z+rxFXNjbAd
aFFdC+EaTESgn5wrbNAQZcvFRJjRo+5n+QdQ+K65sWNnwMNznonNr/C5j/Hy+wG4
U+h/4j9VB0pWEw3KtSMKl6AE0MGlwgHzkvsgeJmYXehTUzjnuiAwRoniRTuAbXBQ
Imp9uwpyDj6We02BHy+/PUxjBKV2SgPOx0XGVz89gm3umPe9E9ypl7rxmesxhdzk
9iPEJg/IGSakrlN/1qAzpFBfPB677GPAguEuY0qdsxkX40KpwM5G67yAR4rDzCPa
cKYycbEQMjEDMqUVmHYM/6PxAMssH+TbZLyzYkm4DSZNv4r94fqVH+UIgoQjFlnI
y8cgFzLu/jVOHbUTJrq1x+cHeGYHS3aarz5OCnEP/dEainlCJTdQn+Bf/16aydya
5xkdO01GQAB9oKHs373xxQ9W0TPX8Gpmyt7GeB1B7P06xbl+nOOuUX2orItcME43
p6Vlg1zEuSdXP7KGryR7q2KIMWDOpI3eq/18vVirPz9kjTwdRQChsxBdEW4s5bHj
lNaDdN2eAz6G+D7GaV4tTvsCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 345100413378939828580323892898674886070783
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-31 09:55:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-29 09:55:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pro.geovina.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 603162452438653900717507520047555558246432892620688238671271687332854283812794770195086506109039276574728283514342720683056034457538049017450907286713322497303526164527096848560978595338021684333163987822121278064430252814074023362529382911092988147323090458369550520524304460463752730080793253140483829176667612390776129357785406838061813174858951128757586852622319107400902022224225861045836541192244356249744704776300352411036918911493256194217305868031773969944843762570073452216168381661161758353608202122160652222634298782136971924784880187289756095330652546653059733948624376890278857850082534038057103996036591954324257699535368611112850266887162946875586685136831247109228493008512312699008435312118014860764016211194822228488290098213621136305652289173338379661133073288878215169944643062680609927769964641236638638632108160396610495154049535293530413647358563839136706504670499446055927595521911362556764890099626130233942035132404683719019810801768531971249167499114995307526050389209720472329956475755416918811203264129289930759192191346191168485941080257840522724589026940113852498171449536834308897808699793012647121432242477525623704028858542348863884495737351809145623755168051381864519431511197979832701134847168251
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1fe7bb94f3d40ecc7382892f3b02c93dc2f5b57f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pro.geovina.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000169d36430980000040300483046022100af18c8d51a0c4c18b684a583aed4876efb0be9d73a4692a3129d92f65cbf6c3b022100ee30ff9f09cea9c65323cc259728d2f79398dfa96de12ffc59d11d78275f267b00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000169d364309b00000403004730450221008ef4a5113f5a7b59a2e86c9dbb31f793be0c3fc8f0dbd5387251318e3699ae4e02202279a402bcece483242dc22000fe80c495b69eb3d588b0a10851840be65bf858
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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