getviva.com

Issued by R3

About this certificate

This digital certificate with serial number 04:32:1e:22:69:a1:8c:1a:07:b8:2a:21:9e:5b:e9:d4:94:0a was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=getviva.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:32:1e:22:69:a1:8c:1a:07:b8:2a:21:9e:5b:e9:d4:94:0a
Serial Number (int): 365503317593506749338112865958796136322058
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 8e:59:4d:11:9e:ae:fe:09:1b:3d:36:6a:f2:17:a3:56:ee:b3:c3:95
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 61:f8:80:7a:c2:14:1b:af:98:2c:10:4d:76:65:2f:4b:26:0f:7e:b6
Fingerprint (sha256): 3d:c5:6a:4d:5d:e8:89:a2:14:13:2e:b9:4f:ad:2d:14:3d:20:f8:3a:d6:76:21:90:31:bc:f8:49:a3:15:0a:05

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate getviva.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for getviva.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

getviva.com
www.getviva.com

Other certificates including the domain name getviva.com

(limited to 100 certificates)
san.bestbuy.com
getviva.com
e.getviva.com
san.bestbuy.com
*.social.getviva.com
san.bestbuy.com
getviva.com
san.bestbuy.com
shop.getviva.com
getviva.com
getviva.com
san.bestbuy.com
www.getviva.com
san.bestbuy.com
nyarthritisclinic.com
san.bestbuy.com
san.bestbuy.com
www.getviva.com
*.getviva.com
*.getviva.com
san.bestbuy.com
san.bestbuy.com
getviva.com
san.bestbuy.com
san.bestbuy.com
getviva.com

Certificate

The complete raw certificate details for getviva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAltnviTP/dVqr8FiLZbe5
b4f0sZl00QHNfxnhw5FnXczbGirjKZpgKsmL9Dej8n5uZj4VCALywzFvFwi6Q4zm
t25UJqC2EcNihdu3+R1PeQa1AqMUf7l19KlaeXQBMy3dt4/8QjSCMRX0/yjcSCDN
kgHCebwAY5Eus6T/QpttFtf6JYWrcAShdxMGx2uxzhKUxJbuw5LAT0T/f8vazhG0
d/c2OV9tq1imO76Wui6IFCtMqbk6/CvSFsKLEYsV8/gOiBrgQ69pervN400j7308
/GBFWS7rYM+DXFoyqlh4p11OQcBx6h6xZi+vOsytodyXVHpyMFcA1GfhxZTJK2bv
fAgjx+S7wX5nBCE/ZptOD6R4JLhtAJ95h6UMQVY2NZJW+oQxOU2veFT24noML/NM
bjk+Szzg2rhiMlf2s+bis834FPKjPB8GEVuJiWjmrABAXtT1WQDuuyaG4Y1xRLHF
f3/4efy+Hgt71FR8tp0GV65bfO67AfFQUo13xiNPiTD9okxmYGEVLuowpqd7FNBl
V52D6ujCy1zpbv/pNtMnOOXk44dKY6beGo834XQr05GmAjYVQxUASaQgkuFZQ/jL
H4RFy4MjHd+t3O/ToBCeZaE5uznxbgZxISqSgo2MHDRI8fUf+SwghB/PdzK7ONHR
qCXTBUYZtvVaN9hAcciLXSsCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 365503317593506749338112865958796136322058
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-30 21:02:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-29 21:02:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'getviva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 615419657210508400168783418135154311727957007482234743706524343271932464290753164921036079831687399067155449663985834816204267314943922187882970213847717976298757517370599022253834946879648794867613411389755023858919915547007561339264677720699097523768799853602549407588938718944217883723794652265874338206260536430591889855337025447991730469779872278072025826233222934836301312275560118849560112563320038476202326013699870712247264040513474393696374142238113406753657629860791724002981779895053242038061322548053801903703093873211272201364140502512827928517185757645565657146578124390710636013851329554596924701340856892087844168445246958661750900405481607950458054395619108557321405379836782308550827925671947354537090854593544335449285511053272828081755849454362102920814460791109598964219009838266716405076232829718775805397530987380858278110664167032038261885897445879903065585671455172051902949135046084676299823064796058204848025992323579257310664636393259164484370774384657147150807597531558373047407172508043260599826447201527107878280434619674135590649260749440437578639064163238069361379601462901661757538433086761087481022389447030242809872156976145337391322654293150367039212346729929948120859503594614143001124838006059
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8e594d119eaefe091b3d366af217a356eeb3c395
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.getviva.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018ae81cfe44000004030047304502205b32ff14675f2c855510b6d9942391e8f4e4f2622584821ca3d766766d4ded19022100e662e3dae03286936bd4bee87f3ce53461256a5c6c97c7a9c12bda765d148475007700e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018ae81cfe2b0000040300483046022100e17518e1632767ea0498d56e5952b1d0d1749a1d6b683df07187807b7df290f4022100bc70c15f6cb713e067f5008c893deb2be724adff841f2253760d25f4ab704d01
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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