api2.geo-real.it
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:1d:79:6e:09:f0:88:fc:a6:7b:97:1c:1d:5f:8f:e6:0a:70 was issued on by Let's Encrypt.
With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=api2.geo-real.it
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:1d:79:6e:09:f0:88:fc:a6:7b:97:1c:1d:5f:8f:e6:0a:70Serial Number (int): 271366454377731209865093456073606534924912
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 64:89:e1:70:51:db:89:ce:f8:43:26:69:b4:bc:5e:88:4f:96:1d:28
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 39:8b:ef:de:12:b9:cd:13:ce:aa:2a:01:be:23:d4:40:f6:df:07:37
Fingerprint (sha256): 5f:76:3a:b5:89:eb:d7:ac:2d:32:62:42:80:6a:8d:2e:25:d7:b9:76:1f:46:e1:56:d3:23:ef:57:ae:06:f1:6e
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate api2.geo-real.it
5
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for api2.geo-real.it
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
api.geo-real.it
api2.geo-real.it
forms.iib-it.de
wohnlagenkarte.de
www.wohnlagenkarte.de
api2.geo-real.it
forms.iib-it.de
wohnlagenkarte.de
www.wohnlagenkarte.de
Other certificates including the domain name geo-real.it
(limited to 100 certificates)
gkdev.geo-real.it
api2.geo-real.it
hdop.geo-real.it
kepler.geo-real.it
hdop.geo-real.it
kepler.geo-real.it
kepler.geo-real.it
api.geo-real.it
gauss.geo-real.it
api.geo-real.it
api2.geo-real.it
gkdev.geo-real.it
wldev.geo-real.it
api.geo-real.it
api2.geo-real.it
hdop.geo-real.it
gkdev.geo-real.it
kepler.geo-real.it
api.geo-real.it
api.geo-real.it
gkdev.geo-real.it
api.geo-real.it
api2.geo-real.it
api.geo-real.it
api2.geo-real.it
kepler.geo-real.it
kepler.geo-real.it
kepler.geo-real.it
api2.geo-real.it
api2.geo-real.it
gauss.geo-real.it
api.geo-real.it
kepler.geo-real.it
kepler.geo-real.it
kepler.geo-real.it
api2.geo-real.it
kepler.geo-real.it
api2.geo-real.it
api.geo-real.it
api.geo-real.it
hdop.geo-real.it
api.geo-real.it
hdop.geo-real.it
gkdev.geo-real.it
api2.geo-real.it
gk.geo-real.it
api2.geo-real.it
hdop.geo-real.it
kepler.geo-real.it
hdop.geo-real.it
kepler.geo-real.it
kepler.geo-real.it
api.geo-real.it
gauss.geo-real.it
api.geo-real.it
api2.geo-real.it
gkdev.geo-real.it
wldev.geo-real.it
api.geo-real.it
api2.geo-real.it
hdop.geo-real.it
gkdev.geo-real.it
kepler.geo-real.it
api.geo-real.it
api.geo-real.it
gkdev.geo-real.it
api.geo-real.it
api2.geo-real.it
api.geo-real.it
api2.geo-real.it
kepler.geo-real.it
kepler.geo-real.it
kepler.geo-real.it
api2.geo-real.it
api2.geo-real.it
gauss.geo-real.it
api.geo-real.it
kepler.geo-real.it
kepler.geo-real.it
kepler.geo-real.it
api2.geo-real.it
kepler.geo-real.it
api2.geo-real.it
api.geo-real.it
api.geo-real.it
hdop.geo-real.it
api.geo-real.it
hdop.geo-real.it
gkdev.geo-real.it
api2.geo-real.it
gk.geo-real.it
Certificate
The complete raw certificate details for api2.geo-real.it in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFpTCCBI2gAwIBAgISAx15bgnwiPyme5ccHV+P5gpwMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTAxMDMxMzAxMzVaFw0x OTA0MDMxMzAxMzVaMBsxGTAXBgNVBAMTEGFwaTIuZ2VvLXJlYWwuaXQwggEiMA0G CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDh47VUP2LDnv17dEc7PmFdQSpCfheM D7YvElPBpuP2UnZ0yWjf4UGnnL0eWRwFv4SPbtYHzmYVK549cJRRL6sJ6Ppmb57k 08VppTZ+K7p31DqpHKyUXOYUnp1fthjkTDeBfxt1zKn3NVAlsinxdPyN4hzzY5ke G+zqZw7JXtUqJ6F80lbXOKkXa9dZipbX7LNjjcY65XvyVcp9tY3QYBpv0gCcd1++ NFCrgPDRYwSREV7S/5YZRW1MdIAIP/qUDcyNBJ/AdbV3RKvfjEZBX/mpbjTyxtNo DjoZPcJuqDtFCC+tCWHPt2wa/HNcur999dJ370it3A2S3iHw1cJgKHWDAgMBAAGj ggKyMIICrjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsG AQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFGSJ4XBR24nO+EMmabS8XohP lh0oMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEB BGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0 Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0 Lm9yZy8wZwYDVR0RBGAwXoIPYXBpLmdlby1yZWFsLml0ghBhcGkyLmdlby1yZWFs Lml0gg9mb3Jtcy5paWItaXQuZGWCEXdvaG5sYWdlbmthcnRlLmRlghV3d3cud29o bmxhZ2Vua2FydGUuZGUwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMB AQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEF BgorBgEEAdZ5AgQCBIH2BIHzAPEAdwBj8tvN6DvMLM8LcoQnV2szpI1hd4+9daY4 scdoVEvYjQAAAWgUBPP3AAAEAwBIMEYCIQDN4nBHcWJQXHiRRQodbb7H2YbFsHFK 1/YaaAMzX5+a/QIhAM5l6KBCNr1j6JQ7j3Be/X+h4hv5N4QQ3hl/cBPMeXvUAHYA dH7agzGtMxCRIZzOJU9CcMK//V5CIAjGNzV55hB7zFYAAAFoFAT1iAAABAMARzBF AiAKAjyKr83dqMgAEvQBOi9bZoCQTAqb/J80tJn9/gXgHAIhAOSebj8U1rh7UMez Qc2QwKftju6hH1dF8uL4yFfn5YpIMA0GCSqGSIb3DQEBCwUAA4IBAQBKG6yh1ugp GBPrrTdf+UJVqTvh7Un1qIYLLcPGDTUqfNgvEMMcrgimymtYw6sKJ3DWHFFCBIW3 OBa2p3sDbBUDlxSZMozcFxoyVdnHO47sCfymEMxsKoglo8UI4B10Qgv6oozRaDZo luKI7xyG87riXsrE4rM9d8YAhEwnSS+BrzvDfk/D6QRNDCajhJ8j1zdBC6KprpcH WJkfdFrTKufwxC3F2JLP8IPQ9ea4LLcco0T/IPEEUpZxtBt5f+oTrIoF/RXN5hwn NLwMPXAXlBp4YsqjRPoOSRyNnCSVk2jo4BHRjZfs7NUn6uJforuRPxZSrwtsrUNr Df3Y/o4Rsu9K -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4eO1VD9iw579e3RHOz5h XUEqQn4XjA+2LxJTwabj9lJ2dMlo3+FBp5y9HlkcBb+Ej27WB85mFSuePXCUUS+r Cej6Zm+e5NPFaaU2fiu6d9Q6qRyslFzmFJ6dX7YY5Ew3gX8bdcyp9zVQJbIp8XT8 jeIc82OZHhvs6mcOyV7VKiehfNJW1zipF2vXWYqW1+yzY43GOuV78lXKfbWN0GAa b9IAnHdfvjRQq4Dw0WMEkRFe0v+WGUVtTHSACD/6lA3MjQSfwHW1d0Sr34xGQV/5 qW408sbTaA46GT3Cbqg7RQgvrQlhz7dsGvxzXLq/ffXSd+9IrdwNkt4h8NXCYCh1 gwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 271366454377731209865093456073606534924912 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-03 13:01:35 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-03 13:01:35 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'api2.geo-real.it' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28515905773360302485348094081481940859665890248075480029003379281426135179892699023531798909175850484946832406721961330091781723553742766579815007255601508370370235103865762325426109612161178381951495823945520039771751450741978528373586152016338655069111232988102832622995271184510840751892399474010154037633887250512654160068079195803720748862010828833552245405851453187430450703551288451972180592275593934201073770601762679639395046061949413592874386851325684084943876065354862197437463255487267449858518315010495692910915561672075618981459873523727126873107358213101046369679373419890791415272781735963016445851011 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 6489e17051db89cef8432669b4bc5e884f961d28 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.geo-real.it' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api2.geo-real.it' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.iib-it.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wohnlagenkarte.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wohnlagenkarte.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f100770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d000001681404f3f70000040300483046022100cde270477162505c7891450a1d6dbec7d986c5b0714ad7f61a6803335f9f9afd022100ce65e8a04236bd63e8943b8f705efd7fa1e21bf9378410de197f7013cc797bd4007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc56000001681404f588000004030047304502200a023c8aafcddda8c80012f4013a2f5b6680904c0a9bfc9f34b499fdfe05e01c022100e49e6e3f14d6b87b50c7b341cd90c0a7ed8eeea11f5745f2e2f8c857e7e58a48 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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