mbg.vta.org

Issued by R3

About this certificate

This digital certificate with serial number 03:13:d8:8b:7e:07:20:3e:ff:7b:02:7d:e9:0f:01:c7:02:96 was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=mbg.vta.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:13:d8:8b:7e:07:20:3e:ff:7b:02:7d:e9:0f:01:c7:02:96
Serial Number (int): 268090060299279635793161409251165025534614
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ad:56:f1:d6:2d:c0:0b:9a:41:58:13:5b:7f:76:06:0c:dd:32:88:a5
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 9f:d2:a5:0b:b7:9e:17:ae:24:15:2a:94:38:fd:07:ab:ea:ed:f2:2e
Fingerprint (sha256): af:2b:08:26:d5:68:2d:b6:92:a0:e3:cf:1c:f4:b6:c5:30:b3:c7:3e:71:ef:34:4f:a9:5b:21:f4:a2:82:9b:41

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate mbg.vta.org

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mbg.vta.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mbg.vta.org
micc.vta.org
micollab.vta.org
vmivbops.vta.org

Other certificates including the domain name vta.org

(limited to 100 certificates)
nextnetwork.vta.org
nextnetwork.vta.org
newtransitplan.vta.org
nextnetwork.vta.org
pdp.h3tgroup.com
conjurist.app
data.vta.org
kronym.io
data.vta.org
bilo.online
grh-admin.vta.org
energy.awera.io
mail.vta.org
*.vta.org
rtvip.vta.org
inscripciones.app
nextnetwork.vta.org
nextnetwork.vta.org
fn.izipay.pe
*.vta.org
data.vta.org
data.vta.org
*.vta.org
quietwaterscp.com
nextnetwork.vta.org
bascomsurvey.vta.org
vpn.vta.org
nextnetwork.vta.org
nextnetwork.vta.org
nextnetwork.vta.org
*.vta.org
nextnetwork.vta.org
mail.vta.org
nextnetwork.vta.org
newtransitplan.vta.org
nextnetwork.vta.org
nextnetwork.vta.org
newtransitplan.vta.org
imbank.docuflow.app
*.vta.org
aviahire.com
nextnetwork.vta.org
newtransitplan.vta.org
produvar.co.uk
mail.vta.org
nextnetwork.vta.org
nextnetwork.vta.org
nextnetwork.vta.org
webmail.vta.org
immersivemedia.design
newtransitplan.vta.org
backlinksasia.com.hk
bascomsurvey.vta.org
nextnetwork.vta.org
nextnetwork.vta.org
nextnetwork.vta.org
nextnetwork.vta.org
*.vta.org
demo-support.uprisecg.com
vpn.vta.org
*.vta.org
rideamigos.vta.org
tour.vta.org
newtransitplan.vta.org
bascomsurvey.vta.org
newtransitplan.vta.org
nextnetwork.vta.org
rtvip.vta.org
nextnetwork.vta.org
mbg.vta.org
produvar.co.uk
www.nextjourney.app
boss.icamping.app
data.vta.org
rideamigos.vta.org
data.vta.org
www.texasvotertracker.com
nextnetwork.vta.org
rtibounce.vta.org
tour.vta.org
sms.anaminese.com.br
data.vta.org
nextnetwork.vta.org
*.vta.org
mta-sts.vta.org
data.vta.org
nextnetwork.vta.org
newtransitplan.vta.org
*.vta.org
nextnetwork.vta.org
exvcp.vta.org
bascomsurvey.vta.org
nextnetwork.vta.org
fn.izipay.pe
remote.vta.org
nextnetwork.vta.org
rtibounce.vta.org
nextnetwork.vta.org
nextnetwork.vta.org
nextnetwork.vta.org

Certificate

The complete raw certificate details for mbg.vta.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGFTCCBP2gAwIBAgISAxPYi34HID7/ewJ96Q8BxwKWMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzExMTkxMTIyMzBaFw0yNDAyMTcxMTIyMjlaMBYxFDASBgNVBAMT
C21iZy52dGEub3JnMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA60fW
/DUoEcHr5HigoXIdi1f7HsbR7UlZq6FLFegntBd4SHZnKJcpN6Wt+Jc5w3ebXrID
BtmHRbzgPcGYYareejQ7ZgVhaUsx2ezF+GnJPcomWenJwbkoAXZ3KJQak+O2gXro
XSB9q4/i3JFFdJwncFdaVGWWHHSoITSf6j5Yw8V0C+zmfSUqDJldRrFIOSSsA+Ev
DIg7FhTtdCusgP40CB5y2hPf+DiWDwqDYtQxJJhV9yfOdvG0CmFndf6+8lQegpoL
ldQnwvKMosz72RhcP9NM2WRrOrJR6uqoEeFTxI5xKhoHjEtUGFXCeqB0BV+/D+Kc
jVwPWqyItZUmMLTU57a5EjkgOUKwZS9NneiDLd8EG8rarm/nNHoM7CTKr8ww4ugz
OulzuGFzMKo0b96SaqjCnYuFVRkuQO97qBgQVzMFmNN9y06MWRZhn0gvyP7YEYUC
TGfDyVj6tKFJzmZ69dnET0qs6Fy63zLZpuBbg4MCmtlD3FX8QCe/IcB93in/77Bd
48LzfBilklWyLG6vfDIFTdpaaQ9+GHEJ3oPtbRya0lByytf6AqxiV84sfgG9j3KA
qP7FyqYQwp5SLld+X5FDxbGZMKi7SKYsjCdyBuzQlqTtWO1ZBnwHXZ8AZGFlDM/d
NcwE+yGv4MuW11Ln27OUhJ+bVVaOgT74WxtvEvkCAwEAAaOCAj8wggI7MA4GA1Ud
DwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0T
AQH/BAIwADAdBgNVHQ4EFgQUrVbx1i3AC5pBWBNbf3YGDN0yiKUwHwYDVR0jBBgw
FoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUF
BzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9y
My5pLmxlbmNyLm9yZy8wSAYDVR0RBEEwP4ILbWJnLnZ0YS5vcmeCDG1pY2MudnRh
Lm9yZ4IQbWljb2xsYWIudnRhLm9yZ4IQdm1pdmJvcHMudnRhLm9yZzATBgNVHSAE
DDAKMAgGBmeBDAECATCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB3ADtTd3U+LbmA
ToswWwb+QDtn2E/D9Me9AA0tcm/h+tQXAAABi+eISkIAAAQDAEgwRgIhAOz9VzCJ
zrOJ9u+zpIjEfrcHdAlRs4rzNCacVHi/vFl/AiEAhxL/7MktKrRJp/hstsUqtTfB
p6UpZhWO8DSFT8CvGdgAdQB2/4g/Crb7lVHCYcz1h7o0tKTNuyncaEIKn+ZnTFo6
dAAAAYvniEqlAAAEAwBGMEQCIBPHE6xNrH8mbHWjhB+jJ21cWQ+/dc+MzF311ETT
Vy4hAiA8L6wJDKn8ZTCkjbmgAPsLWJs8GlaroVr9ZoRP8+7UzDANBgkqhkiG9w0B
AQsFAAOCAQEAJPFNF+klDcPTDteFB5J6/r1CnhSqObUqG4WDkwmvMQCWUyxHSKpN
jOqzsBjEIZgu/2gszozq8+fKJueA19oyhzRntxGVg2btQxU/JqtbXuxHPnKz0o6X
mGjWyiuLEr8IOT+7XtBulQq9vkxUtdosvkrPpodNZlZREgqPoSOQEV6MOWAVKFff
y5hlpJmaTecnOV7eMZvqY/W0D1VcyrH3p4bLBataV9Qh6yz2vT9oaWV6pdn2wz6S
9xYgR8vqnhToBZA5ksPS+q+vJPoS/lbxUN86NBanK9w7P+EZyZqgOLcKxZGBUy0T
beq62tgtFmma8mAu7nB7NnQjexb+hOti0w==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 268090060299279635793161409251165025534614
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-19 11:22:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-17 11:22:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mbg.vta.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 959861202689129495098296264097695205574343927995706106429760253387200406318512407945936512302180166943171809941246838944196987833072164791319807371898535972463927845970708548688322038365302913461415353745261908653426249255166895325926993388483780001750512445316325544029815935734218246537962913350306634998064850600610896458830136250380774712586211031739162004268364064654521053558151449954333448607822750017562151918813637533285660778835811543608002724016268725833777368535140065940317478058357593648413810943348608946176068360938793993805466644420016355204981711476376857067475462739417023016710002421789954811169006926547615275983805106986504893953497381321350956405661302333006910463772952241050518930660560332200818874393484112560712772593215818944817577128571763463312715654855269760036229353194201631584784426844565760494300554809140213257070928157599252502180315704289306033247154101426142592953397604977230000188178451947972955523384839075140803692625625411860962565343890621214432968912411220877819301360223620008432740409875995491769986883847656909079227093735920652573108673463054120869391607543451138158819750917821342854988589958504244248284710489008093280338226411093307103362140333306702704515867377743449081817010937
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ad56f1d62dc00b9a4158135b7f76060cdd3288a5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mbg.vta.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'micc.vta.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'micollab.vta.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vmivbops.vta.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018be7884a420000040300483046022100ecfd573089ceb389f6efb3a488c47eb707740951b38af334269c5478bfbc597f0221008712ffecc92d2ab449a7f86cb6c52ab537c1a7a52966158ef034854fc0af19d800750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018be7884aa50000040300463044022013c713ac4dac7f266c75a3841fa3276d5c590fbf75cf8ccc5df5d444d3572e2102203c2fac090ca9fc6530a48db9a000fb0b589b3c1a56aba15afd66844ff3eed4cc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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