wiki.d4science.org

Issued by R3

About this certificate

This digital certificate with serial number 03:4e:da:95:0b:9b:25:1e:99:84:f1:fa:9a:0c:bd:d3:cc:70 was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=wiki.d4science.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:4e:da:95:0b:9b:25:1e:99:84:f1:fa:9a:0c:bd:d3:cc:70
Serial Number (int): 288169428005825332207616402582279422200944
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 26:de:90:75:b3:04:fd:59:3f:14:ad:49:23:f7:47:f8:cd:e2:30:56
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 2a:ab:41:cb:e9:c8:9f:6a:0c:0b:64:0b:ea:ef:10:70:81:72:ea:16
Fingerprint (sha256): 78:57:10:91:6b:76:b2:3f:69:46:0c:b5:30:a2:75:bf:a0:ec:1e:df:8c:4e:bc:49:57:ca:ec:49:8e:4d:32:8a

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate wiki.d4science.org

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for wiki.d4science.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gcore.wiki.gcube-system.org
gcube.wiki.gcube-system.org
wiki.d4science.org
wiki.gcube-system.org

Other certificates including the domain name d4science.org

(limited to 100 certificates)
sharelatex.d4science.org
*.d4science.org
geonetwork-french-tunaatlas.d4science.org
shinyproxy.d4science.org
*.d4science.org
catalogue-ws-t.pre.d4science.org
fusionregistry.d4science.org
smartfish.d4science.org
mapping-d-parthenos.d4science.org
sharelatex-d-d4s.d4science.org
ckan-aginfra.d4science.org
portlet-proxy-d-d4s.d4science.org
vocbench1.d4science.org
wiki.d4science.org
catalogue-ws-t.pre.d4science.org
registry.d4science.org
portlet-proxy-d-d4s.d4science.org
swat.d4science.org
aggregator1-d-parthenos.d4science.org
playerank.d4science.org
tagme.d4science.org
portal.d4science.org
ckan-bb.d4science.org
dev-openaire.d4science.org
geonetwork-iotcss3.d4science.org
accounting-service1-d.dev.d4science.org
ckan-grsf.d4science.org
geoserver-protectedareaimpactmaps.d4science.org
node6.d4science.org
geofence-d-d4s.d4science.org
geonetwork1-d-d4s.d4science.org
geonetwork-french-tunaatlas.d4science.org
portal.d4science.org
portal.d4science.org
socialnetworking-t.pre.d4science.org
ckan-d-d4s.d4science.org
ckan-d4s1.d4science.org
nnet.sobigdata.d4science.org
support.gcube-system.org
virtuoso-grsf.d4science.org
ckan-bb.d4science.org
registry.d4science.org
recolecta-d.dnet.d4science.org
portal.efg.d4science.org
socialnetworking-d-d4s.d4science.org
pg-admin.d4science.org
portal.d4science.org
virtuoso-grsf.d4science.org
infra-lb1.d4science.org
socialnetworking-d-d4s.d4science.org
virtuoso.parthenos.d4science.org
shinyproxy-nauth1.d4science.org
shinyproxy-auth.d4science.org
sp.d4science.org
*.d4science.org
services-lb1.d4science.org
zulip1.d4science.org
geoserver-dev.d4science.org
mapping-d-parthenos.d4science.org
access.d4science.org
ckan-ecoevo.d4science.org
nnet.sobigdata.d4science.org
smartexecutor1.pre.d4science.org
recolecta-d.dnet.d4science.org
preprod1.d4science.org
support.gcube-system.org
ckan-ecoevo.d4science.org
ldap-liferay-d.d4science.org
redmine-d.d4science.org
smart-grsf-d-d4s.d4science.org
ckan-ecoevo.d4science.org
dataminer1-d-d4s.d4science.org
access.d4science.org
geonetwork-aquacultureatlasgeneration.d4science.org
virtuoso.i-marine.d4science.org
geoserver1-spatial-dev.d4science.org
gw.d4science.org
geoserver-wecafc-firms.d4science.org
code-repo.d4science.org
node0-p-efg.d4science.org
dev-openaire.d4science.org
ssk-application.parthenos.d4science.org
ckan-sobigdata.d4science.org
sp.d4science.org
smart-grsf-d-d4s.d4science.org
geonetwork-french-tunaatlas.d4science.org
geothermcatalog.d4science.org
geoserver-wecafc-firms.d4science.org
code-repo.d4science.org
portlet-proxy-d-d4s.d4science.org
docker-exec1.d4science.org
*.d4science.org
geonetwork1-d-d4s.d4science.org
thredds.d4science.org
resourceregistry1-d-d4s.d4science.org
socialnetworking-t.pre.d4science.org
dataminer1-p-d4s.d4science.org
shinyproxy.d4science.org
geoserver2-protectedareaimpactmaps.d4science.org
geoserver-french-tunaatlas.d4science.org

Certificate

The complete raw certificate details for wiki.d4science.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 288169428005825332207616402582279422200944
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-02 00:55:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-31 00:55:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'wiki.d4science.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 751677424334864548809525623865712413903493789418946200241655295017948355895844678103641711644340703690960914031294199134615692056783075370626753587697192338386453383622573136177209407840688412666673503156757955522766234361281314784459128217914265571581520971859682569302322115005685026415151109412879842795735957661867147870799763589796481608836203883589717683790331573960063335923012574340347547457840086737973208240698697820152140610693218670658408206898875005623213248325230082502075224983467429522099599988417539053571807262203898207180344764205209253531964124068848404171275631485834408119834179059679129985443263739756114332977344269537572454523263231564248815445182755766897051141476063925720648833147044266307136487896665619624036143485985719722438980626241554412867797671496709985480903669499961829023775240407736006757320617778922688422252034081957627327832671211458763023540094441283566466979540963759695160139749256489184526351113780196848473543238772854654440076037192735876733767505199834421027742406933116192234371055350751049773192010909260112154257116284716326795472775932942751644145527560187617042636585135351112380673013026710443501680343621208578459385354622604264586325933736317333641942757181430573734467683289
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							26de9075b304fd593f14ad4923f747f8cde23056
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gcore.wiki.gcube-system.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gcube.wiki.gcube-system.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiki.d4science.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiki.gcube-system.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076005cdc4392fee6ab4544b15e9ad456e61037fbd5fa47dca17394b25ee6f6c70eca0000017c3eb6de2c000004030047304502206bfe303c898889b28039acd81e040ba38e1d5b69990fc648f0369a401f2039c80221009d67f7e51e9a3f6f3cb7f2f1ad5a52503d710fd8b3268ebf06bd1c84d2407cbd0075007d3ef2f88fff88556824c2c0ca9e5289792bc50e78097f2e6a9768997e22f0d70000017c3eb6de5b00000403004630440220143c6f653986f9b45af21168818d1beadeefcb3efe35e8c1b1ac2ba9b04ce67a022055ba5256315bc5b60d17a24d5f4fd8cd0e88ddf6bed2d0fbde1d063fd2784c58
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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