app.geovina.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:d2:c4:52:cb:05:60:11:f1:9b:2f:d8:a0:b0:c4:4a:77:31 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=app.geovina.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d2:c4:52:cb:05:60:11:f1:9b:2f:d8:a0:b0:c4:4a:77:31
Serial Number (int): 333057113421949083241630267462541831206705
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e6:e2:4b:d4:c3:32:d7:86:68:8f:47:f6:48:70:e3:e5:e7:4f:ba:39
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 6f:74:bc:e9:ec:e3:f4:bf:ed:87:21:31:57:9d:cc:85:c0:0e:ea:6c
Fingerprint (sha256): 66:22:3f:5f:1a:7c:38:0d:64:4d:61:e6:d2:bd:24:04:09:25:53:a6:90:6c:0c:3c:d7:63:07:5a:5f:69:14:65

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate app.geovina.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for app.geovina.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

app.geovina.com

Other certificates including the domain name geovina.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for app.geovina.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 333057113421949083241630267462541831206705
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-24 01:00:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-22 01:00:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'app.geovina.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 900994121529460666435855364181301378287488649055432926185683093075628046529994253816641324196970170826561272159516423614179388043829860192856607270387795343555154123748433258597968131943087780786133725907470824767939230884259897474307362954759803425832336283507682730126801206488147739337890774607554090175853711272633945699472073506300551608056799591410553181332376650493675581956888346611587069963565943379680659977454730464284542857726514091370014032644137282138792740903752994716889998135560972208641143704725028931125157035149949716428202933126354355238637904677177606649018449405642372744783637054440913037355053279420963153438917762728468920203826695663721658525186098205345455364996606911748615429688308040199053820170128615013772592213964829668009767759221267489395620453397938184586522242473756813490956698890526982410595087474620408290718307460099044456507453314651543910198893473112573536827264052325175675234469239941451705179656986225697851541657179304570799664599735079056432031480549355837322839200437291071664644181625129849659998478170552555769831917059857699803398026507413998527926187580785973665995214269442053967377515337801115376867439612398771716120969025553244134896342229794760422687503035421146374281158971
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e6e24bd4c332d786688f47f64870e3e5e74fba39
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.geovina.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000169ad6d8eab000004030048304602210098dbc901607ae2aabd96551da817a5214d94b7cb6fced9b102218554829dc753022100bf7e17bacfba549adfe82b1f9b00fb5f23ef666742501da81ca6ec65a0cdb661007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000169ad6d91650000040300473045022100c460ff3755b7c93fb07289a74fff450ba10e76f1715d3e961fc7fbaef27ea3cf02203b2b0e515b62c3d50d87aff534ee816439475278dc0fce6171aee06c40d3f83e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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