digiconomy.eu

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:bf:96:d5:b3:ee:34:86:c0:68:91:a0:cb:79:26:6c:8f:a8 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=digiconomy.eu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:bf:96:d5:b3:ee:34:86:c0:68:91:a0:cb:79:26:6c:8f:a8
Serial Number (int): 413643569616962716264458372327553735888808
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 18:56:e9:3b:9b:3f:85:7f:f0:bd:6b:8c:35:62:3a:b1:9d:2c:22:ea
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ca:60:70:5f:6b:75:49:f8:fa:71:a1:e3:99:25:ec:31:a6:ba:74:b0
Fingerprint (sha256): 83:96:80:fb:a9:52:98:d2:01:0c:a4:61:b4:ed:20:16:96:c7:6f:aa:1c:7c:ce:40:07:a1:b7:d1:02:fd:6a:b4

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate digiconomy.eu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for digiconomy.eu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.digiconomy.eu
digiconomy.eu

Other certificates including the domain name digiconomy.eu

(limited to 100 certificates)
forms.conviction.org.uk
aceaquatecsupport.invma.co.uk
termin.zweihorn.org
forms.anova.co
forms.anova.co
termin.zweihorn.org
forms.anova.co
forms.reflektis.training
freietermine.ruhrpott-digital-agentur.de
forms.digiconomy.eu
digiconomy.eu
termin.zweihorn.org
forms.reflektis.training
support.easylogic.nu
terminbuchung.brunetticaffe.de
forms.digiconomy.eu
bookings.ksijdar.org
bookings.ksijdar.org
afspraak.hanspunt.com
calendar.newtonbates.com
forms.conviction.org.uk
forms.anova.co
formularze.gam-bit.com.pl
etmgroup.support.ignitehospitality.com
termin.zweihorn.org
formularze.gam-bit.com.pl
termin.zweihorn.org
forms.anova.co
srvc.jnbl.de
digiconomy.eu
bookings.amender.ch
srvc.jnbl.de
boka-mote.yodapp.se
bookings.madebybrain.com
forms.psydevelopment.ro
meet.pbmconsulting.info
forms.anova.co
digiconomy.eu
termin.zweihorn.org
digiconomy.eu
forms.psydevelopment.ro
digiconomy.eu
forms.anova.co
forms.reflektis.training
formularze.gam-bit.com.pl
termin.zweihorn.org
forms.conviction.org.uk
forms.anova.co
srvc.jnbl.de
booknow.xeotek.com
book.bugkit.io
digiconomy.eu
forms.conviction.org.uk
book.wavedesk.be
digiconomy.eu
book.spotlightstudios.co.uk
aceaquatecsupport.invma.co.uk
forms.anova.co
digiconomy.eu
forms.reflektis.training
book.wavedesk.be
forms.digiconomy.eu
digiconomy.eu
termine.eino.world
buchung.hundeschule-nasenblick.de
digiconomy.eu
asset-hd.btoresearch.com
buchung.hundeschule-nasenblick.de
forms.anova.co
digiconomy.eu
booking.sia-connect.com
termin.dibap.de
meet.pbmconsulting.info
forms.psydevelopment.ro
booking.sia-connect.com
srvc.jnbl.de
freietermine.ruhrpott-digital-agentur.de

Certificate

The complete raw certificate details for digiconomy.eu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 413643569616962716264458372327553735888808
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-18 18:27:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-16 18:27:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'digiconomy.eu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 896459890275759372941538697924585920609357916778660544116811344730016359309546445744134202788131690782001003823404975579696595671934330252204181536271634551358075744056026462467482358879968124052124763729218836863901699325732230166846652097417150365557781381000790275192768012739050234612440407104577401353804469604933529725700795925212633449182869979876349677510384292688683776069736142075630456849424211804772791091241317266024863567201898399921557514044000324968338130574066975758744031610046457881031909931901366233110538446572460840715794779574957251508407464997615941653070290830189515015521088530011098590887735676289627918172737773222380535969883497312879522883166907690288697077957584179724037350452127724608733086932698915092718429754523140140660043168566365053693261126450682185105541793451238586056853927497703848287935555289285277230531179971717056411122762285022537716949068688340464470895349351933545581844834939626999302899528303520632721335028691685709569243531420315126183934095273145601808984125959067389311502941731128431834979364332091633571663738004746004729580562763920033135996812786148545458607087650051824372278010713407127974604194305188945501802785436604072574663725110925885664439741669058152800172756961
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1856e93b9b3f857ff0bd6b8c35623ab19d2c22ea
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.digiconomy.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digiconomy.eu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb27300000170ef1da228000004030046304402201e7649245ba16ff2ae1d11274d7cfda638c502d49cb3060b89463dbd73576db80220286e161448303dd600331a49caec6223a81a0afab27162e295a420f5a995b16100760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c00000170ef1da2520000040300473045022100adc72bd7d2255cd3495c8aab29dc387c9aa01d426eed2e4fdf4ac6796103c2f302203b349ec5257dc63c2d7f09045e063930fde61076374e775139ae856a52e8bd90
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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