goveo.app

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:0d:5f:3d:13:dd:59:3c:a9:5f:93:2e:6c:08:cc:3a:b7:08 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=goveo.app

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:0d:5f:3d:13:dd:59:3c:a9:5f:93:2e:6c:08:cc:3a:b7:08
Serial Number (int): 265887122357863701483607185512181658203912
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 37:06:96:73:c1:f7:6f:41:e2:4a:da:09:60:09:80:ae:98:0c:50:b4
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 6a:59:e5:52:d0:26:70:2f:8f:e4:d4:ea:98:8d:b2:ee:10:67:51:10
Fingerprint (sha256): 96:e4:bd:10:d3:e1:ae:2f:66:cc:be:60:f8:65:fa:34:62:5a:e0:76:21:4e:45:89:ea:df:28:3b:78:9f:36:a8

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate goveo.app

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for goveo.app

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

goveo.app

Other certificates including the domain name goveo.app

(limited to 100 certificates)
climbo.io
www.goveo.app
shop.goveo.app
id.goveo.app
rancher.goveo.app
www.cesbarstore.com.bo
cms.thucdon.app
www.goveo.app
goveo.app
shop.goveo.app
auth.icepeak.ai
goveo.app
shxt.xyz
id.goveo.app
auth.icepeak.ai
www.cernst.dev
goveo.app
johnsontechgroup.net
mailer.goveo.app
kamberapp.com
cms.thucdon.app
www.alvarado.dev
order-n-pay.com
unwatchme.juanguarin.com
takion0.jp
www.stylemycloset.in
www.moment-bern.ch
goveo.app
jifunzebitcoin.online
goveo.app
mailer.goveo.app
www.cghxstudio.com
akbarali.tech
www.intelystate.ca
www.pokebattle.click
links.goveo.app
www.goveo.app
mailer.goveo.app
admin.metootribe.com
docs.latd.ai
www.oneworldservices.com
qrms-v2.qburst.in
goveo.app
www.cernst.dev
www.app.zkmakers.com
goveo.app
q4b.org
ipv6-insider.de
vebizhuri.com
elfwill.com
fastify.pandicorn.app
ipv6-insider.de
sarov.name
app.luner.com
goveo.app
www.dotawho.net
fastify.pandicorn.app
goveo.app
www.northmiamibeachpermits.com
goveo.app
geooh.app
www.goveo.app
mailer.goveo.app
www.kolorsearch.net
onlinewaitbot.flashaim.com
onlinewaitbot.flashaim.com
kamberapp.com
www.footprintsads.com
memory.muravidek.re
mickeyuysal.com
www.mioju.app
www.oneworldservices.com
www.goveo.app
afifnass.com

Certificate

The complete raw certificate details for goveo.app in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 265887122357863701483607185512181658203912
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-16 17:24:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-15 17:24:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'goveo.app'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 671307830200673664332300382570942243035453966863794303984300022905930401859116830877094491803847861452884723666092643436945655203996859925705178650473838239970962576187561826819235456817916116209466515730032585855851728546827368675627888695460456821886861574090272687201145467485600073035876140251748906185622326625102362361492098237328601305378542014253030980476097013515490880640079852670057845108685229005564407316501547577747605688857001305354178602928154729100694473257907203899576229640507014006056102778899814569602595883616692231461299612396201058588488861459905438956077687884619356188412595400268154566211272797868912029384804709540002767683915356504149410136605090593914678958911297660301965107767297401350087914656939061976180831288298691122172544633271733685217335493567819871937006951129000002389440233695017286514182215097181213368279983253302448782054391035983321958747683619229623427946286548715615402345015764367801925863790430238211476347219085029183124245641318847527083496238103618419977352931081846247844737266336988505214517990522058329692722686731925347354390647627750241095056395188545057052551655883336351615857225681224809995849776342431629640536978942258918343382607400435880379820004937354487162831359507
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							37069673c1f76f41e24ada09600980ae980c50b4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goveo.app'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016f0ff4403d0000040300473045022100e0435358f6c095dbf9ad9c87ee683a224466769a98722423cc51295c095beaed02205a78aa13bfa6ecd8f29a981579de78a3667e8110797abec951d62e86e2e818e6007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f0ff440320000040300473045022100b4c4b60bea1f95682c5822797211ad5986781514f0333682268a82e9a7bd50010220079cee9341202b1aea96faadc3dd9b2f6d38971f7968c53f68000dbd1a89f787
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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