digiconomy.eu

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:3e:27:9a:7c:e4:34:97:1b:8a:c6:ca:fc:98:fd:a1:57:65 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=digiconomy.eu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:3e:27:9a:7c:e4:34:97:1b:8a:c6:ca:fc:98:fd:a1:57:65
Serial Number (int): 282487006583029838561531709892470662846309
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 9e:d5:48:a3:75:46:e6:47:dc:95:37:83:20:90:84:7a:2a:42:3c:58
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 0c:6e:54:ac:d0:72:24:01:71:00:95:95:e8:ca:76:f2:d3:ad:d9:66
Fingerprint (sha256): e6:4b:02:12:a8:9c:45:25:d8:b5:08:ee:0c:a4:97:ed:74:f5:87:6a:e9:30:48:b4:d7:87:df:20:b0:39:34:4a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate digiconomy.eu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for digiconomy.eu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.digiconomy.eu
digiconomy.eu

Other certificates including the domain name digiconomy.eu

(limited to 100 certificates)
forms.conviction.org.uk
aceaquatecsupport.invma.co.uk
termin.zweihorn.org
forms.anova.co
forms.anova.co
termin.zweihorn.org
forms.anova.co
forms.reflektis.training
freietermine.ruhrpott-digital-agentur.de
forms.digiconomy.eu
digiconomy.eu
termin.zweihorn.org
forms.reflektis.training
support.easylogic.nu
terminbuchung.brunetticaffe.de
forms.digiconomy.eu
bookings.ksijdar.org
bookings.ksijdar.org
afspraak.hanspunt.com
calendar.newtonbates.com
forms.conviction.org.uk
forms.anova.co
formularze.gam-bit.com.pl
etmgroup.support.ignitehospitality.com
termin.zweihorn.org
formularze.gam-bit.com.pl
termin.zweihorn.org
forms.anova.co
srvc.jnbl.de
digiconomy.eu
bookings.amender.ch
srvc.jnbl.de
boka-mote.yodapp.se
bookings.madebybrain.com
forms.psydevelopment.ro
meet.pbmconsulting.info
forms.anova.co
digiconomy.eu
termin.zweihorn.org
digiconomy.eu
forms.psydevelopment.ro
digiconomy.eu
forms.anova.co
forms.reflektis.training
formularze.gam-bit.com.pl
termin.zweihorn.org
forms.conviction.org.uk
forms.anova.co
srvc.jnbl.de
booknow.xeotek.com
book.bugkit.io
digiconomy.eu
forms.conviction.org.uk
book.wavedesk.be
digiconomy.eu
book.spotlightstudios.co.uk
aceaquatecsupport.invma.co.uk
forms.anova.co
digiconomy.eu
forms.reflektis.training
book.wavedesk.be
forms.digiconomy.eu
digiconomy.eu
termine.eino.world
buchung.hundeschule-nasenblick.de
digiconomy.eu
asset-hd.btoresearch.com
buchung.hundeschule-nasenblick.de
forms.anova.co
digiconomy.eu
booking.sia-connect.com
termin.dibap.de
meet.pbmconsulting.info
forms.psydevelopment.ro
booking.sia-connect.com
srvc.jnbl.de
freietermine.ruhrpott-digital-agentur.de

Certificate

The complete raw certificate details for digiconomy.eu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAzdtc0nxkATQLqh0HndLN
yZriDQ+NNf5hqrkerHt1Rr9rYKyljHwT6DVPxsYe24vZTFdCFKQ0nx7PHjpoX2yu
J5xiVnkXyKmgOxfkPuDWXIEmExLjLdkFqkWYffghjuRbg80nhZgLp5tALvdLnYSN
yuh0QrZxYJAPVhQvFXxEgAtQ2APJPRCxPfef5bqNM9L1Y2XNL/aSqFCxZo/H0Hbz
agwi9POT7S9vnYFibVQdHgwPcaiAIav+32HdwISDZop/gwPw4bH2B1ByQ0+HihgE
Ghr3YJ/FZdZzz2WHeSEf9eVtuD99GNHXcqLyRTYv+yCHeL9dEGzqdKdxOIKhdcey
PBLY0hNgmIi0OLhTn4fwVAtIVPigB3Ukhd4KGM9Z539Q8sm4M5diYWYfg5Dz4T9G
QRK7WEwLGVbbmID8bdf1NBGYAiD7tAiAwBgjR+uvmO9g/55j9giyHefhe+ROcokO
U2lPuAvwe1Zpa90YvNyyijnUDoFmIgrvkQUilnW89QjOHPFFXHumByeLRG+uzurf
5U1lNBYRd6zmlG/GpN8vKRj7zJpov+wzdLZ+S/UdoYLQt++QEpDRI0GkEk/i6Dgv
MionCPM+D9T6RI8G2s3ElcgZTXooO50CbHjR5Z5uGlE0idRow4qkQ4kH/IJVDD0v
bn4/3VysjVmBaY+tbfbQbkkCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 282487006583029838561531709892470662846309
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-22 05:04:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-20 05:04:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'digiconomy.eu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 839822820177801165364566259577241088246927264851714381024786183647901471239830480449486367164829169922292451156505830116731794967703247814081293082402521863262728418495543896788592304865692984399717555112499885845708167648404528441290670033031905509402333575649347952395195167778218071139976003844067301525746461505886761435222452363473566937571142113838423345297098206854317205761419763778945510007261268309676147699085939401143630967906077776357133969025238077198213733744484302203384747282150411343863254548960603099701846488413366601327969861935555908343468709090251593542351560840678146175749598151804767535287216381440505906245127272100436981694563800371678796205025513507622932982395753498309204752342224180797943487257094521637938377947098824731958727282180102155305661173358817689570803792529668462123287903979502923300246241681108888303685687213019277363897088683903123904802615567159186374078511798681747074959137472585830924104410473712494937864940946731369233044909734333571289444705680332317638609534081948548412150912277934640468598564113757228285959702075076996472841116095325761244331595268491832831210678729586896839003474027253293273023487687986143259995682242017284669293053154161204762292233041603844249719172681
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9ed548a37546e647dc9537832090847a2a423c58
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.digiconomy.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digiconomy.eu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016e91b62f3300000403004730450220321565381cf42a449f1a971366eac118df26b047788df7e03b84bd21e619d278022100d1b53bfcb54fb62ede3483b1888227a7d81e8f2cf97250881f85d57687eaf51f007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016e91b62f24000004030046304402202935880161d7446094ee4e710ce27b1c1bcef5c6a7dd10f478a265b810c70ab202206c6a1a3591b9730ea2c4e89e3b33d629dea213b13cdc7057f27160429ce2e6ad
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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