web.viasatgroup.com

Issued by R3

About this certificate

This digital certificate with serial number 04:d9:97:53:18:f7:41:58:28:ba:b6:75:ad:59:20:36:39:b1 was issued on by Let's Encrypt.

With 23 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=web.viasatgroup.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:d9:97:53:18:f7:41:58:28:ba:b6:75:ad:59:20:36:39:b1
Serial Number (int): 422491562243254823577662327115077146524081
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: bc:3e:37:92:87:1f:96:bf:6a:36:8c:2f:c1:6d:f1:ad:99:9a:5e:ce
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): dd:c7:d3:da:9a:c7:db:35:83:af:f7:f7:dc:b7:b2:98:63:24:02:19
Fingerprint (sha256): 69:9d:0e:7e:cb:e7:c7:8b:2a:fa:76:f7:7b:9a:f0:10:67:fe:d8:c0:b2:c7:6e:fd:82:a1:aa:e9:ce:1d:90:7f

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate web.viasatgroup.com

23

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for web.viasatgroup.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

login.viasatonline.it
mediacenter.viasatgroup.com
viasat.com.pl
viasatconnect.be
viasatconnect.co.uk
viasatconnect.fr
viasatelematics.com
viasatfleet.it
viasatgroup.com
viasatonline.it
viasatsicurieprotetti.it
viasatsystems.ro
web.viasatgroup.com
www.viasat.com.pl
www.viasatconnect.be
www.viasatconnect.co.uk
www.viasatconnect.fr
www.viasatelematics.com
www.viasatfleet.it
www.viasatgroup.com
www.viasatonline.it
www.viasatsicurieprotetti.it
www.viasatsystems.ro

Other certificates including the domain name viasatgroup.com

(limited to 100 certificates)
web.viasatgroup.com
web.viasatgroup.com
web.viasatgroup.com
web.viasatgroup.com
web.viasatgroup.com
web.viasatgroup.com
web.viasatgroup.com
web.viasatgroup.com
web.viasatgroup.com
web.viasatgroup.com
web.viasatgroup.com

Certificate

The complete raw certificate details for web.viasatgroup.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8s9bzoQuzC2z/2mcVTSl
A14eao6mm4Z3HKYKMGa07b48Fk27AbQkHVxtvgerNaZ5LImoEXFmljhPm4TxDPWJ
Vi3DUXivLLyo9pgWvYQjwn4s6orcJab0z6Nf1RMqRjaxISZpikMxkPQIds4zGI/J
vnw6iu2aABMD/K9J1N9SRq8nzc/Wv4nysGcJEO0Pm/9vUIqskZJmfsPrR4AGi5nu
UhnPlvJ3WtxjGGV3m5PT6G6bdndjpoAmLUsq1L4fVq93GQuR9hDr+8yDM8LoSHp9
sHfb9mYjQ8+KW2LOWv3elUOIxXxF0d/iQxHvFiB0+Ove9ynzFvi7KujfkRcsGuVd
7wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 422491562243254823577662327115077146524081
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-06 13:36:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-04 13:36:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'web.viasatgroup.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30651922148275377330386644713110022265828687634193856747869421617034770856250774766354672300482763905329357480167015344707453541484363869471108913918649700303757396126077662328771877475384532251224358481382100985588076887408240674226593032969299172526415895742091633990201506507962369208016571285580868253747609903141664182652440554609511394085401096279071597407374977136290126885809853384839519411625574094790482276081055043735298181321492830851549481173330227385645812978298575330543733955153151763282581111838668166032146364007480740761414526614062773897060659376234303561149445729171043393982479969539148732521967
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bc3e3792871f96bf6a368c2fc16df1ad999a5ece
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (491 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.viasatonline.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediacenter.viasatgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viasat.com.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viasatconnect.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viasatconnect.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viasatconnect.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viasatelematics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viasatfleet.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viasatgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viasatonline.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viasatsicurieprotetti.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viasatsystems.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web.viasatgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.viasat.com.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.viasatconnect.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.viasatconnect.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.viasatconnect.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.viasatelematics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.viasatfleet.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.viasatgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.viasatonline.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.viasatsicurieprotetti.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.viasatsystems.ro'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018ba5105ab10000040300463044022000a8fb93d819940de76ece7a4cc3391646760845fcbde61bd5931efdbedbb74c02207ce90705f6c21d2acf5ca8461ef0a0cfc70a888b14896c44d3dcb18bbd53dbc600770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018ba5105adb0000040300483046022100c0a926a27f7166f3a4ea362e8852d4d0234f4106f17d874edace080316883178022100e1260ea5ae5dd1f5e0a0060c4070e9b7bf0c7909933eabbf567df300f9943ba2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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