lms.geostruct.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:39:95:3e:d3:e4:8b:49:59:e9:47:ea:f7:30:2c:82:a0:dd was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=lms.geostruct.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:39:95:3e:d3:e4:8b:49:59:e9:47:ea:f7:30:2c:82:a0:dd
Serial Number (int): 280931333901246968497958305101323767554269
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 9d:3c:ee:6b:7c:ca:82:8b:73:8b:8e:ce:ae:3e:72:26:55:11:7e:90
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 58:9e:bd:5e:fe:75:f7:42:b7:3b:aa:7f:c7:9c:44:50:13:78:5c:54
Fingerprint (sha256): 98:52:05:4d:5b:d5:21:5f:54:f2:2c:4d:11:bf:1b:3e:f9:d4:0a:a7:9e:46:2c:45:ae:49:69:e5:77:31:d0:ce

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate lms.geostruct.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lms.geostruct.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lms.geostruct.com

Other certificates including the domain name geostruct.com

(limited to 100 certificates)
supporto.teameis.it
latest.test.geostruct.com
returns.globalamerican.us
support.robethood.net
support.itmagix.nl
support.glastechnology.com
supporto.teameis.it
geostruct.com
support.robethood.net
geostruct.com
petbase.mobile-xl.eu
geostruct.com
support.sirrahsoft.co.uk
support.sirrahsoft.co.uk
*.services.geostruct.com
customerservice.herful.com
support.robethood.net
help.markus.support
upload.geostruct.com
*.geostruct.com
help.adozi.com
supporto.teameis.it
support.itmagix.nl
geostruct.com
portal.visionsoft.com.cy
portal.geostruct.com
geostruct.com
support.glastechnology.com
support.astrad-austrokommunal.at
geostruct.com
customerservice.herful.com
support.hayaperegrinaciones.com
geostruct.com
apitestnew.beast.geostruct.com
services.espats.ch
gitlab.geostruct.com
*.geostruct.com
geostruct.com
soporte.error304.com
geostruct.com
kennisbank.nobelinstallaties.nl
support.glastechnology.com
support.robethood.net
services.espats.ch
help.adozi.com
geostruct.com
support.itmagix.nl
kennisbank.nobelinstallaties.nl
assistenza.amotive.it
petbase.mobile-xl.eu
support.inexdu.com
assistenza.lrsa.it
geostruct.com
dgsales.geostruct.com
help.markus.support
geostruct.com
help.adozi.com
help.wau73.com
support.inexdu.com
support.glastechnology.com
customerservice.herful.com
support.barion.nl
geostruct.com
support.itmagix.nl
help.markus.support
geostruct.com
help.wau73.com
services.espats.ch
helpdesk.evalink.io
tickets.geostruct.com
soporte.error304.com
lms.geostruct.com
tickets.geostruct.com
support.hayaperegrinaciones.com
demo.geostruct.com
soporte.error304.com
petbase.mobile-xl.eu
support.sirrahsoft.co.uk
*.services.geostruct.com
frtdemo.beast.geostruct.com
petbase.mobile-xl.eu
upload.geostruct.com
kennisbank.nobelinstallaties.nl
supporto.teameis.it
tickets.geostruct.com
portal.geostruct.com
support.itmagix.nl
geostruct.com
support.astrad-austrokommunal.at
kennisbank.nobelinstallaties.nl
inframapp.test.geostruct.com
support.barion.nl
support.sirrahsoft.co.uk
gitlab.geostruct.com
support.barion.nl
geostruct.com
geostruct.com
help.wau73.com
help.markus.support
services.espats.ch

Certificate

The complete raw certificate details for lms.geostruct.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA8tWqXDiksUfywPXPjMx0
PPGEVKUwpQl48xasHZlH1nDS+TabVXhqjAMyl10Xu70yaMLyWh3UvXY42thdEe6I
OIjRPEucd2elwvaL0OswM+h3QlzdaEzkQZpSk1576c45vuM9fQfrB98rQQvQhptg
awYHjU/rJ21vGJP3LELlQ3PW9e6NFZs+y3R5bX8Y8CTs0nDoC47NyLfsmJ693Ehm
WzUusL27UXwBD5ZHLfhL38wpe7cLDdO8qdxQMtO61a6zKKyGJj6NuTaH2Sr0i1kg
nVvuIm7KMl4SLoJBtR+S6P3H3/58yqEeptzdFOo3eGTIPkz2zHwpy85hBHPZw7HN
3+rbE0hVgxRnH21N5fEIogJQkJgEWh7hH7X9WuJczELxVW9mI11qIOzfKCPUreaz
TdVIptnf/MIW+9T6pefO9WpSDqYuB+12tExJ4KBheHRGB708T2RemSMb3Ei12Nay
GNcnB3VSI/YAnRKL9BmX5ZwQ5bTfUvzGJ2KIRsGSJcei0xnFitXyb68E47feTGPi
Z6niOuPASKC/b5WJyejJFRDrAWqg3Z1FOaA/HWZ6XxqVHqHfZTUbTURn8HozmBIo
UtzRHmn2FqEvf+fi5QgyUdcIJZReWvi2ltv0jPEdIL7rFJ1qENeYjxnbu1S/g66v
+vsApvz8Gpw75iTdyehTYJ0CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 280931333901246968497958305101323767554269
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-03 14:38:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-01 14:38:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lms.geostruct.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 990678860812200126687666871796661353073906838244701879173670857356649633321339931966389918464122087768708982078763539566024528485608537123725839655074861957284727842909382286221480121109237656464885595752026496740855360927913161298750070940908042124167483509113416644690628598280271508471711629600550740352362405729420791585993545103828608265878502377648506311177464127951067021907975661544734321879655377815378334960523793949141360076097509419870217614088353350783591527401674717646294123821425462853555694607185315510881043158536242940578374203751816915834506393721509031826285173211198779589690538387421542646616225890509929180385839283486866472383846795691341140193534050754371167295342481535581906195661610164172286099232203335686491166284237560647885607508527876992957896982244514804027131898238394249623834035006874648513141708753063630658775839826292882871940416278691014888701239306887056391439991142053086691893337232411609032249880104709388992543666692896532719393562523997554727728661979918420818034397806493473233782346508114489217230268974452967608574517317617674208655182115024532570047231632962540450021339652307912441772154953046478186373215847056650840245877782613962597940243915319884084211622509373086218339967133
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9d3cee6b7cca828b738b8eceae3e722655117e90
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lms.geostruct.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170a10c2ce30000040300473045022023af5dad844b32425a080f7c6149cefed73e445dbf69af9e4ac1f575a2217be2022100b4d1ee48ba261a6c197a21608fc69f0a4da1f28683595acadf280b5e00ee63e40077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000170a10c2d190000040300483046022100a88bb66aca54f4fc0acdf6b6dc836cf0e0f59fec5acee0a38c2f45cc66bbafbb022100d8bc01193078c25244f342a9082ecfa4ebaffce617c8e74ff56484de972f3e18
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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