sponsor.origitum.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:0e:95:f8:4e:08:ec:7b:2b:12:4c:5c:ba:f0:d9:c2:2c:3e was issued on by Let's Encrypt.

With 26 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sponsor.origitum.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:0e:95:f8:4e:08:ec:7b:2b:12:4c:5c:ba:f0:d9:c2:2c:3e
Serial Number (int): 266300155175901709279210846266065512705086
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 8d:27:73:39:dd:17:f6:99:d7:22:4a:2c:5d:12:f5:6d:e8:24:25:3e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 51:ba:ae:1a:af:6b:a7:f4:bb:45:38:b8:4e:18:02:f8:45:a4:bd:54
Fingerprint (sha256): e7:9c:3a:dd:0c:f4:25:22:9c:6c:50:8e:51:30:d2:14:f5:ed:4c:57:1f:10:a3:3d:8c:39:f9:e6:b7:df:e4:30

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate sponsor.origitum.com

26

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sponsor.origitum.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

demandes.parois-de-douche.ch
demandes.smart-lux.ch
form.levifotografie.com
form.thereallyamazing.com
form.trustcomfinancial.com
forms.applecoredesigns.co.uk
forms.bulletproof-it.co.uk
forms.creativeweb.nl
forms.digitalavenue.co.uk
forms.flug-reklamation.ch
forms.fortislaw.co.uk
forms.inventdesign.nl
forms.medstyle.hu
forms.mooji.org
forms.myclaimsexpo.com
forms.ncdigital.co.uk
forms.propero.hu
forms.securenvoy.com
forms.smiledesignboutique.com
forms.trustmytravel.com
forms.trutex.com
forms.viascreens.com
formulaires.syndicat-scc.org
inscriptions.laboiteafilms.fr
inscriptions.lacravatesursoif.ch
sponsor.origitum.com

Other certificates including the domain name origitum.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for sponsor.origitum.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1CwVoIoBjLx5uh7chLH
/sqLDhy7IgZwdJs7ScqNgYvMCwJzfupwtsk5M0+PycLsGa3g30GOoFoN5c/CJiQ5
0QiflvOUvvF/UmGQOcaVmtpdQhFZqSWpjh5H4XqJcAwwpHp1pTGLO2BarpFd8gjt
2C40bmKZqa1bfb3fg7JaQ9gni2kNdFeqRGofybj1Oy//SVQ5WDpYcJmkv3YcNfeq
hsGnDAQx1gRfKMfixBlI+MgCsKGVaQFBlg+w62S3vVoUFdxyzv9Pzx6PHM5s1CA4
hJ6pwIiD+vJBDw68MNJsckSFbpQCy+xSXlkFjL3igwcjGvzGlSPwzkypIRKMSr9Z
DwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 266300155175901709279210846266065512705086
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-04 12:00:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-04 12:00:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sponsor.origitum.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24656258608491787725594856660687839783714804025288260226008396211546790209980279887731140764099548716491157937127354002225445555283116191815696445526711612317548146392904352221151087694453092080456975854114299829343314849368861136096185408411363516075278815704136622876862606541070331678413177073663322270218172958738631434232991326523661004832126706821600374478800654124119553422997309298190085030004060708594017164431608905830552013860705722297441988055053920415174644616795339044656538137601921886348572414290045176644882651091574386526955697641245344541802321087195892453184166613515514811287401746051242118830351
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8d277339dd17f699d7224a2c5d12f56de824253e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (653 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demandes.parois-de-douche.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demandes.smart-lux.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'form.levifotografie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'form.thereallyamazing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'form.trustcomfinancial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.applecoredesigns.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.bulletproof-it.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.creativeweb.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.digitalavenue.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.flug-reklamation.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.fortislaw.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.inventdesign.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.medstyle.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.mooji.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.myclaimsexpo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.ncdigital.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.propero.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.securenvoy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.smiledesignboutique.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.trustmytravel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.trutex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.viascreens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'formulaires.syndicat-scc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inscriptions.laboiteafilms.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inscriptions.lacravatesursoif.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sponsor.origitum.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076005ea773f9df56c0e7b536487dd049e0327a919a0c84a112128418759681714558000001701049f0830000040300473045022050bcfa271daf4f826dd549a4caa78bf83b53cf163546394d114d53e6b7fa4354022100fe039df21dfb984c095085a139d4aee51937763184e5218222c3be74c2d0aa3e007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001701049f0920000040300483046022100c134af09eaf1cbcde653733bfea83dd03bb4cd7ab642d722e85bccf46802219702210096622856a5de6f7d12d9ee94307869da50b56fedbb490c4682104fd8b81a8e2c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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