backoffice.geovina.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:64:e0:20:d6:80:06:69:9b:3f:b0:b2:e6:11:3c:72:7d:1b was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=backoffice.geovina.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:64:e0:20:d6:80:06:69:9b:3f:b0:b2:e6:11:3c:72:7d:1b
Serial Number (int): 295663012062508725119918700764818176113947
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: de:9a:87:91:f3:3b:ee:99:4d:7a:36:0f:aa:ab:6e:14:5e:09:3c:6d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 52:d6:9d:e2:fd:45:64:88:2f:32:45:e2:30:52:07:94:20:f2:fc:b8
Fingerprint (sha256): 7d:b9:49:d3:ae:9f:c9:4c:b8:c1:a1:05:d4:a0:93:96:4e:2e:8d:bc:3b:ee:cf:dc:2a:37:4f:78:6d:7f:5b:96

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate backoffice.geovina.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for backoffice.geovina.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

backoffice.geovina.com

Other certificates including the domain name geovina.com

(limited to 100 certificates)
geovina.com
blog.geovina.com
learning.ovb.at
geovina.com
app.geovina.com
app.geovina.com
geovina.com
pro.geovina.com
pokemonbrowser.com
geovina.com
isehararenkei.info
pro.geovina.com
pro.geovina.com
pro.geovina.com
pro.geovina.com
geovina.com
dariuszczajka.com
connect.geovina.com
pro.geovina.com
geovina.com
geovina.com
blog.geovina.com
connect.geovina.com
geovina.com
pro.geovina.com
geovina.com
backoffice.geovina.com
app.geovina.com
connect.geovina.com
app.geovina.com
geovina.com
geovina.com
pro.geovina.com
backoffice.geovina.com
geovina.com
app.geovina.com
connect.geovina.com
pro.geovina.com
pro.geovina.com
backoffice.geovina.com
geovina.com
geovina.com
pro.geovina.com
connect.geovina.com
idanbirman.dev
pro.geovina.com
pro.geovina.com
geovina.com
pro.geovina.com
backoffice.geovina.com
connect.geovina.com
connect.geovina.com
connect.geovina.com
connect.geovina.com
pro.geovina.com
geovina.com
connect.geovina.com
app.geovina.com
srauto-stagging.poolkargo.com
pro.geovina.com
pro.geovina.com
app.geovina.com
geovina.com
pro.geovina.com
geovina.com
backoffice.geovina.com
geovina.com
backoffice.geovina.com
backoffice.geovina.com
pinhasov.com
geovina.com
geovina.com
backoffice.geovina.com
pro.geovina.com

Certificate

The complete raw certificate details for backoffice.geovina.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGZDCCBUygAwIBAgISA2TgINaABmmbP7Cy5hE8cn0bMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTAyMTcyMjE3NDBaFw0x
OTA1MTgyMjE3NDBaMCExHzAdBgNVBAMTFmJhY2tvZmZpY2UuZ2VvdmluYS5jb20w
ggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCbTr1UpKaa/v2nKNCARrov
3OMmeR0/q65qakGm+jN0t84e17RU4IiJ4KgGSp8Wojf16KmjXBQsSWYn8Q24YQ6O
SWR/wc99RVCELpjG6FekmWG+2qOZApNGEZtlUhAnQ5rCwBS+dxFQY+uN7MD589sJ
5QceqJWNbZS4A9buxd/dZ/cgq/p+8YoRzllOZnFK5NJUO6YTHL06jshFtSDvV8n8
RsT3AdBld2IuVbY+vQHt/+zEAX3ao3lchfCgOtQB/GX4YYOjF4pyyd0fYvuGs1jQ
/XloxNq5MO9GVnMSsekWR7jPmTld2eBUApd7Fe1PeULzKBmCu3qldHOMrVHsqX/n
qpAIeW9Lgd17KVuURS/Fs8T7vj6EfODHUW+zukBRhCaW3yXXcuVBkO++BEhUS0H3
SFA1lIFvz0HcKvJzEUieszycCWlwmF7dt4gr4SxyIsefUWb7ZyTJvIlxLSNaVwOR
/x/DIShqPApMv7EWEXztVGquKjK9EJwhZ3gWC9ZG7KrnzR7CEPEBYyecZE8qcIsL
S2S5FHsf2IueKv6jMtXBqk981ZiDQp5f+xNjLPrs0C/3zke2YlZAde00s0yPP8lX
4O5Uuv1JFHxgspLZwgKLtYO5i9DETepp2jj+cN8vZU/mx8wH1MvSORm25HjLwywb
r+GE888UcjbG42C0TZhzGwIDAQABo4ICazCCAmcwDgYDVR0PAQH/BAQDAgWgMB0G
A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1Ud
DgQWBBTemoeR8zvumU16Ng+qq24UXgk8bTAfBgNVHSMEGDAWgBSoSmpjBH3duubR
ObemRWXv86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9v
Y3NwLmludC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9j
ZXJ0LmludC14My5sZXRzZW5jcnlwdC5vcmcvMCEGA1UdEQQaMBiCFmJhY2tvZmZp
Y2UuZ2VvdmluYS5jb20wTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMB
AQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEE
BgorBgEEAdZ5AgQCBIH1BIHyAPAAdgDiaUuuJujpQAnohhu2O4PUPuf+dIj7pI8o
kwGd3fHb/gAAAWj9wD2QAAAEAwBHMEUCIQDuTsLmYwnp9VTbY2iL10UUQwylYkPK
7STSvMp+frxqkQIgVq+p06AvnWCM2o6tP29n4FsRJMU2RjusHF0Inyjzi6cAdgAp
PFGWVMg5ZbqqUPxYB9S3b79Yeily3KTDDPTlRUf0eAAAAWj9wD3aAAAEAwBHMEUC
IFIa0NY8s2f09n0ws9+36GIwz7CduY4YREnGUe+c6V9kAiEAj/OHlP1DwVuUcSzR
I0N1RCZBeC640nt4fhJon77RMCwwDQYJKoZIhvcNAQELBQADggEBAFQKWXnQtzQV
dztYli5N/LlK+7hZUesMvBhmF0/3K3swgCEozAeComWWAjUFJ7TDki2erRpIcG3a
5YDijY6c/kh/YL2XGt4Y9yX+Y1a+lSiVJYxv5JDQah+UouwgjvBrR+hGADwNYkJY
Jp/RRc4a2gAyQy+l6OawwCfGfIS9Oza1nFrEzdz7zTDnrzFhJv6NTuQWdTFvjbv+
LqDwOP+pd3FuIKAXQ1GWmxx+peQZfcoB6NbzQpWUG6DmhG2IsXSgsXmJJN85V1ze
JO2vsS5RDiV0Fs6G6mfj+nXXAJ0OMcxC7fJCFyRlnNybmhRVVi73c2Khsxmm2QtJ
5oCj7uMta8I=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 295663012062508725119918700764818176113947
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-17 22:17:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-18 22:17:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'backoffice.geovina.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 633599633008358245244286915613593690815310898745758829101157219313794791638352970238241620401440532053070403492822574941936454695347645440552237123512466671726872734943642705218562814332862109480795372126706449011970004326896579195514275465433712641897125873716321547696189029165897674281746449572957706555509542413111601701794213748120907312623155227268146836012531706786804021241974209380290446876267819997218169249004952681566360383419437436334452638127607983943430033584239844347811617677882912519791731804157643367941074142895498537112308013973297290864316629614393803649699886434378157140023011208698945909953746862655602440621917085911103210061808830772856442246447800713619091292319316877606088639099299599275113176295555530483651243223726320759383837355650996536436972295059578952815356400749283054202411574646146198209932167930036212375058585795493048579344704605896615787355977613505132136274425792398179953173646206140057388703163174459108563707173700298945299372827754588741234872720529406455277198237099614588962081688187228708168945991178835689078496898915329435356083650565563628123548806951131355402022949843606114315870031427244569959581859674207743660636198097599968730120865381581795101768425347300130736402101019
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							de9a8791f33bee994d7a360faaab6e145e093c6d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backoffice.geovina.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000168fdc03d900000040300473045022100ee4ec2e66309e9f554db63688bd74514430ca56243caed24d2bcca7e7ebc6a91022056afa9d3a02f9d608cda8ead3f6f67e05b1124c536463bac1c5d089f28f38ba7007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000168fdc03dda00000403004730450220521ad0d63cb367f4f67d30b3dfb7e86230cfb09db98e184449c651ef9ce95f640221008ff38794fd43c15b94712cd1234375442641782eb8d27b787e12689fbed1302c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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