pro.geovina.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:30:0d:2b:a4:b2:d4:5c:3f:cb:51:5d:93:ba:01:86:d5:36 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=pro.geovina.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:30:0d:2b:a4:b2:d4:5c:3f:cb:51:5d:93:ba:01:86:d5:36
Serial Number (int): 277687917980679417360979627759370114618678
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 62:ad:6a:62:b4:df:51:c8:f0:a5:9c:3e:02:57:d9:bb:c8:df:76:b4
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): cb:87:e6:6f:39:a2:76:41:20:1a:0b:4d:2f:df:f2:b4:5b:5f:6b:f5
Fingerprint (sha256): 8a:cd:3c:ed:d9:87:68:d7:eb:cc:79:14:9d:7b:bf:47:53:a3:8f:22:43:1e:a0:c4:73:3f:8c:99:be:9f:5b:85

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate pro.geovina.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pro.geovina.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

pro.geovina.com

Other certificates including the domain name geovina.com

(limited to 100 certificates)
geovina.com
blog.geovina.com
learning.ovb.at
geovina.com
app.geovina.com
app.geovina.com
geovina.com
pro.geovina.com
pokemonbrowser.com
geovina.com
isehararenkei.info
pro.geovina.com
pro.geovina.com
pro.geovina.com
pro.geovina.com
geovina.com
dariuszczajka.com
connect.geovina.com
pro.geovina.com
geovina.com
geovina.com
blog.geovina.com
connect.geovina.com
geovina.com
pro.geovina.com
geovina.com
backoffice.geovina.com
app.geovina.com
connect.geovina.com
app.geovina.com
geovina.com
geovina.com
pro.geovina.com
backoffice.geovina.com
geovina.com
app.geovina.com
connect.geovina.com
pro.geovina.com
pro.geovina.com
backoffice.geovina.com
geovina.com
geovina.com
pro.geovina.com
connect.geovina.com
idanbirman.dev
pro.geovina.com
pro.geovina.com
geovina.com
pro.geovina.com
backoffice.geovina.com
connect.geovina.com
connect.geovina.com
connect.geovina.com
connect.geovina.com
pro.geovina.com
geovina.com
connect.geovina.com
app.geovina.com
srauto-stagging.poolkargo.com
pro.geovina.com
pro.geovina.com
app.geovina.com
geovina.com
pro.geovina.com
geovina.com
backoffice.geovina.com
geovina.com
backoffice.geovina.com
backoffice.geovina.com
pinhasov.com
geovina.com
geovina.com
backoffice.geovina.com
pro.geovina.com

Certificate

The complete raw certificate details for pro.geovina.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 277687917980679417360979627759370114618678
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-04 00:00:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-02 00:00:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pro.geovina.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 703201533805831180862805304866574776289996763313259429662539172540510869653006002322109918341091097331492763098086942866030993979937707045067303047389310359404570949343162091547055861371046575360027221684181644307878640404051820236473504783828294731642935834694374651897332824094863501496504170356059577973746333987614049558669262596998728132999069089714937244681289055474581835192409859991554770108606815676083145000958113656740685113710272706374083595096375433451919011695084521520826649264055702587065249063440987209015864707475802637337092490537418205554340749843935766616464106907055546398829967018242976010066694751299063235673390097319215301077051017003153431104595232908959366661709482811030262475221420469386188716785123786703829386502171650783287165166095738617452032843951263334090671703298467284839341031393928438129395818939163855707072323009064079912732077866906511419762643256157772210422763684911772172380577574630299696091106853156080359870706382957517528267290418106145320359517534291191586840559974256357435208360097553104214436376451256445564599697400883654419542166492827119396033539554192927810597960719832175948330508123899422767553282429258980318689727154718357966570770033486373344858951629083368471042715219
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							62ad6a62b4df51c8f0a59c3e0257d9bbc8df76b4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pro.geovina.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf6400000163c84fa7990000040300463044022008b48f8059d91336169dd51c979335adadd7e1e3f4d9ebda02722acb90720fad022029c71d7186d743526ed303a2bb1396335fde44cc74c9fbc643848157d2f11cdb007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000163c84fa7a8000004030048304602210093f2d7e077bc2d2189a9ac4b9cb0e93ccd284b577119a9f36536d1105b88c813022100ff955326a90ca9db1b824bd3de36a8c96b6539a917b3150a817917ae61675b35
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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