status.geoip.app
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:6e:90:e5:f3:b8:21:0e:bf:f2:33:4e:56:f3:e7:c7:d9:7c was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=status.geoip.app
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:6e:90:e5:f3:b8:21:0e:bf:f2:33:4e:56:f3:e7:c7:d9:7cSerial Number (int): 298960520967171349708773924435792394443132
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 90:3c:10:a8:27:d2:d4:fd:9d:49:a0:75:c6:5a:5f:a3:9e:dd:4d:1c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): ff:40:be:51:3d:f0:51:11:17:a9:e2:99:49:ad:d4:f6:6b:f6:b7:0b
Fingerprint (sha256): 79:ef:23:5d:13:06:97:b4:81:56:b8:66:1f:b8:2a:52:7c:f7:38:01:07:30:24:32:16:27:b5:b7:a8:74:77:af
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate status.geoip.app
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for status.geoip.app
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
status.geoip.app
Other certificates including the domain name geoip.app
(limited to 100 certificates)
Certificate
The complete raw certificate details for status.geoip.app in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGWTCCBUGgAwIBAgISA26Q5fO4IQ6/8jNOVvPnx9l8MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA2MTYxMDI2NDhaFw0x OTA5MTQxMDI2NDhaMBsxGTAXBgNVBAMTEHN0YXR1cy5nZW9pcC5hcHAwggIiMA0G CSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCsc74ujv8zpesgtTRhxXHJmB9JX3Yq kdOGdiTkyzj3kzv4khxZrbXooXsy56faY408P2xaWPnGAO2skKJKieZJeyj0Bn+X eeoTI+Vc9P9jHLV7F1I+2GMJetTvyFdUw3XchNnZmzJBLYZa2IBClOcbINbiTKdz kvpAEq/TtiUctMVUpkTku2UIuFA7Y6q5+Df/sloJ7XXI+lSRdyjlIXBHP4kLEAdx eKXsnoVEAqfNg/2texwIeOSu5cxUy2X9iQPKvvW7IuC7HkN2stWc/7a5sZVV6CdU DBiOZ/jIpPCCf1EBdSnZ79cf2J5mUIirq9oGMBZq/FnSDTip5gtahBrNzQvVuWa1 m0/gg4P5/zwx6FOkMYvmWnC0oMyFzBXA1Ow5PuA9b3umXpFLnMLq2iFomsEw195x d9ej4p7RSSNosk0tdffRHEeSUFQHdZ5EyTJpehCxbPjCbWpXu9lycsG0b84Lu6qv 7IfmYzSIjljkE/IeB2gXYA11ym9OtRRyTjkxx0+Sy1E8A/HLKN9THwMV051pQCpz YT9xbmkM2iUuNL/Qw1lrQ689JToequLAhYN+T3p0gHP6ix3JcalbPWu4wsXwP1PI 18Z+fYfqPo1yw5Qwq934i/quPQm/ktTgjGWV8VsX3mrLWbxcjVIg5dIcm8kb9fRJ LNS8fUkEba7woQIDAQABo4ICZjCCAmIwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQW MBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBSQ PBCoJ9LU/Z1JoHXGWl+jnt1NHDAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv 86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmlu dC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0Lmlu dC14My5sZXRzZW5jcnlwdC5vcmcvMBsGA1UdEQQUMBKCEHN0YXR1cy5nZW9pcC5h cHAwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEF BQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEFBgorBgEEAdZ5AgQC BIH2BIHzAPEAdgBvU3asMfAxGdiZAKRRFf93FRwR2QLBACkGjbIImjfZEwAAAWtg Ci68AAAEAwBHMEUCIQDshM0qo8ElsH4EGGvK776tWwFhCDwfHx5uCaL0m54pRAIg VIKzRA4SVLhl0cmIbb7ZBtcpgtijl5HOnEcLww69ia4AdwApPFGWVMg5ZbqqUPxY B9S3b79Yeily3KTDDPTlRUf0eAAAAWtgCi3DAAAEAwBIMEYCIQCn/ozhKt8Q5ag5 7ii48VXWVlUWlVbs9WmiGprejPRexQIhAKJWpfxzBNeNcedwCbVd63zSbFRiW4dJ YN+pxfxB9pf2MA0GCSqGSIb3DQEBCwUAA4IBAQBC0DoN1MfyWwXa7wBovCVtx+yU ILEwu72cH1fDm7Y9Xe8viSatnMGJPpUnKLijSyc6e7SBhibi24KfWXYRaMeg0G8m +KUokMnR+94Cj91EmhvSu4noPWAcaC7VNf7WwFunPopjSyVPqOz5xIZI4vwPATXj epEG7Bfray+g+14j2QeJGJ28XiIbVlIALH9K4Vd5iNsqHIU1XEh7LKqoUAlRN8u9 buhE6V8h8HBsBGnZJEFUGUDGV6+XAEPp2kcdiizhI5VqwvlmBx9R39gaX+cfhJFg ALXR5IOH0JxSwnPdv+ul7/G1z8CNOXvqmCn6Y61LnHZaoSQhIsBS7uvP0DRe -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEArHO+Lo7/M6XrILU0YcVx yZgfSV92KpHThnYk5Ms495M7+JIcWa216KF7Muen2mONPD9sWlj5xgDtrJCiSonm SXso9AZ/l3nqEyPlXPT/Yxy1exdSPthjCXrU78hXVMN13ITZ2ZsyQS2GWtiAQpTn GyDW4kync5L6QBKv07YlHLTFVKZE5LtlCLhQO2Oqufg3/7JaCe11yPpUkXco5SFw Rz+JCxAHcXil7J6FRAKnzYP9rXscCHjkruXMVMtl/YkDyr71uyLgux5DdrLVnP+2 ubGVVegnVAwYjmf4yKTwgn9RAXUp2e/XH9ieZlCIq6vaBjAWavxZ0g04qeYLWoQa zc0L1blmtZtP4IOD+f88MehTpDGL5lpwtKDMhcwVwNTsOT7gPW97pl6RS5zC6toh aJrBMNfecXfXo+Ke0UkjaLJNLXX30RxHklBUB3WeRMkyaXoQsWz4wm1qV7vZcnLB tG/OC7uqr+yH5mM0iI5Y5BPyHgdoF2ANdcpvTrUUck45McdPkstRPAPxyyjfUx8D FdOdaUAqc2E/cW5pDNolLjS/0MNZa0OvPSU6HqriwIWDfk96dIBz+osdyXGpWz1r uMLF8D9TyNfGfn2H6j6NcsOUMKvd+Iv6rj0Jv5LU4IxllfFbF95qy1m8XI1SIOXS HJvJG/X0SSzUvH1JBG2u8KECAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 298960520967171349708773924435792394443132 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-16 10:26:48 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-14 10:26:48 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'status.geoip.app' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 703543271210968447068632812262695809126433007225767454147097191764908266916765442957971518465071065970521223301564317035186865196401478276285172949945431284747656844987223480753356424618095737447389959907711999455353457982777495486152190358345890160008109295677603188441614515234710099843009959266650509604401274197817672246722174658903860367843044386474807491186866456876881479097530016719646118561654942904491597595032892113694149421499728033233614617210994562148860415043116243566840241518054717731699616785660940655753637169901167777452679274165240052364485932867200060693979879883154464556249913484949042117816840629431650611552137412385697071968248206464096845677022439323314035221427344619649178048259832654354142078833457166835785572766708918241653598836454219737640504174456433286880050448241834645415370462790650300486772248396236179020095643089949430801264088824466636177117131168033333209828923004778633939121705828378888804441469748651314437697335228658136108503478778977687648350731968712643964642318683941995041952617158843066200235840322395105836753898708580940909958395217453019245265184580190888300876331835039257299777857040261601697676341265319812748367154760854849120943018569528425604460669099255155618948772001 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 903c10a827d2d4fd9d49a075c65a5fa39edd4d1c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.geoip.app' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f10076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016b600a2ebc0000040300473045022100ec84cd2aa3c125b07e04186bcaefbead5b0161083c1f1f1e6e09a2f49b9e294402205482b3440e1254b865d1c9886dbed906d72982d8a39791ce9c470bc30ebd89ae007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016b600a2dc30000040300483046022100a7fe8ce12adf10e5a839ee28b8f155d65655169556ecf569a21a9ade8cf45ec5022100a256a5fc7304d78d71e77009b55deb7cd26c54625b874960dfa9c5fc41f697f6 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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