connect.geovina.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ee:a2:21:97:d4:55:88:ea:a4:09:f7:21:cc:44:cd:14:64 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=connect.geovina.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ee:a2:21:97:d4:55:88:ea:a4:09:f7:21:cc:44:cd:14:64
Serial Number (int): 342539570483044274617109309932190875587684
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 0a:44:17:86:39:f1:7e:54:8c:13:f2:c3:00:01:98:2e:17:fa:3a:02
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 0e:64:42:76:84:df:ae:f4:47:21:ac:04:5b:78:53:12:d2:1b:e0:c0
Fingerprint (sha256): d1:2a:bf:f8:ea:d2:f6:7b:f2:78:eb:5e:fb:cb:5b:ce:51:84:98:58:0f:32:d7:78:e3:f2:97:49:d7:e4:05:85

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate connect.geovina.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for connect.geovina.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

connect.geovina.com

Other certificates including the domain name geovina.com

(limited to 100 certificates)
geovina.com
blog.geovina.com
learning.ovb.at
geovina.com
app.geovina.com
app.geovina.com
geovina.com
pro.geovina.com
pokemonbrowser.com
geovina.com
isehararenkei.info
pro.geovina.com
pro.geovina.com
pro.geovina.com
pro.geovina.com
geovina.com
dariuszczajka.com
connect.geovina.com
pro.geovina.com
geovina.com
geovina.com
blog.geovina.com
connect.geovina.com
geovina.com
pro.geovina.com
geovina.com
backoffice.geovina.com
app.geovina.com
connect.geovina.com
app.geovina.com
geovina.com
geovina.com
pro.geovina.com
backoffice.geovina.com
geovina.com
app.geovina.com
connect.geovina.com
pro.geovina.com
pro.geovina.com
backoffice.geovina.com
geovina.com
geovina.com
pro.geovina.com
connect.geovina.com
idanbirman.dev
pro.geovina.com
pro.geovina.com
geovina.com
pro.geovina.com
backoffice.geovina.com
connect.geovina.com
connect.geovina.com
connect.geovina.com
connect.geovina.com
pro.geovina.com
geovina.com
connect.geovina.com
app.geovina.com
srauto-stagging.poolkargo.com
pro.geovina.com
pro.geovina.com
app.geovina.com
geovina.com
pro.geovina.com
geovina.com
backoffice.geovina.com
geovina.com
backoffice.geovina.com
backoffice.geovina.com
pinhasov.com
geovina.com
geovina.com
backoffice.geovina.com
pro.geovina.com

Certificate

The complete raw certificate details for connect.geovina.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 342539570483044274617109309932190875587684
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-23 21:12:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-21 21:12:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'connect.geovina.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 852953676232775565805458830156997667617491499822559318581546821833195550118184275076012004544530098316202574754343201856990408472130268348099799592678414095071925134003255199194271820510096357502147789507959729739156210347325581287394055326610797067752110392864255506412687751521174321474058457084404369853061184133113375394572286550966117785098404419223374528147643974890418894853181346397368721506426291109779174931645948511939935660330035701608812183903104240264830327907296771652091146709306251930846902124592121699996226376283559425877912232601757239034578662006142107106200651704777197309326420588403536536043764322509362652759929973994685269850239748919069519006652548808592048266820418610939161666508669065416694830021458034316597090326039896316641117119357005072612073840436087510689091001594482733716263603761888646855065072381913627800700085291212844223808967675270782584670799843633487816858441842989636299057145253444978092149603942104541541881631781707722297495516456746544411499931891294481782163024952116012786399683425750099872758298508243800207826473983101754015483753808941056313234676313483897122960656171295000315455156588869454082394550526743687345459802837679836384734847521356878210506106333802396833521227923
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0a44178639f17e548c13f2c30001982e17fa3a02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.geovina.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000166a2fcbbc6000004030046304402201859b8cd931d5ab5c84a0cf5a5182e9e5d9f0ffd61329e021e9ecca4116bb31a02201be7e80cb4329550db1911dfb4440312ca291a8b056efd88ca655cce2825196c0077005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c00000166a2fcbd8d00000403004830460221009008e864f2b0446f9e56f80efe3883f891a1506c5356f0e007238d2346ba60f8022100f8f19203dceddf22a245592cb46ab37ee4d6c1daf1ce01abf1bb365bcfb736b4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		003b73defff5d2f140009e30239ebde85fdb5958b11a50fd0301cd19ae908013f26443037c46ad4e2d5a2963565a590ec7b39e7aa07092b8f5976cf8523a69071b374dce49f1d0b7e35480c021729cfca4d8d8b255a53c8113eabd5ccd58e496dd84c47629bbec82b4a11ec93cd8cc515ac9bafbad128ea59de79625cfd4c793803142e9e326997671ddd8505f5a3ced5f11ac22d1fcc5ab289550f4392188e92ee709b48cd293a95b0e10701784b09f3030ae9599228e3b14dc362cd7e8ae43ff27203e9ce2a9592c22851ada225306fe16b26df3940c85cd83ee0d0ef563cdd6164211f625c864121d0f87b979eab8762cf2b4dcbf5204b489b32afefb4d7ae0