backoffice.geovina.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:4f:8b:c9:d4:86:71:0a:51:81:e5:c3:e2:7d:05:79:17:ed was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=backoffice.geovina.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:4f:8b:c9:d4:86:71:0a:51:81:e5:c3:e2:7d:05:79:17:ed
Serial Number (int): 288404975435639941391506686982890154694637
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ff:64:fb:85:e6:15:49:07:0e:86:21:5d:56:8a:5f:70:1c:47:fb:88
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 60:d3:51:28:c0:fc:0c:f2:eb:0d:41:92:6f:8d:ce:81:71:ff:ec:e1
Fingerprint (sha256): ec:25:42:3a:97:c2:6e:cb:fc:5f:e6:de:9e:f6:b9:f9:df:f5:73:f3:dc:2e:4e:80:7c:87:2f:42:45:1a:a4:64

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate backoffice.geovina.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for backoffice.geovina.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

backoffice.geovina.com

Other certificates including the domain name geovina.com

(limited to 100 certificates)
geovina.com
blog.geovina.com
learning.ovb.at
geovina.com
app.geovina.com
app.geovina.com
geovina.com
pro.geovina.com
pokemonbrowser.com
geovina.com
isehararenkei.info
pro.geovina.com
pro.geovina.com
pro.geovina.com
pro.geovina.com
geovina.com
dariuszczajka.com
connect.geovina.com
pro.geovina.com
geovina.com
geovina.com
blog.geovina.com
connect.geovina.com
geovina.com
pro.geovina.com
geovina.com
backoffice.geovina.com
app.geovina.com
connect.geovina.com
app.geovina.com
geovina.com
geovina.com
pro.geovina.com
backoffice.geovina.com
geovina.com
app.geovina.com
connect.geovina.com
pro.geovina.com
pro.geovina.com
backoffice.geovina.com
geovina.com
geovina.com
pro.geovina.com
connect.geovina.com
idanbirman.dev
pro.geovina.com
pro.geovina.com
geovina.com
pro.geovina.com
backoffice.geovina.com
connect.geovina.com
connect.geovina.com
connect.geovina.com
connect.geovina.com
pro.geovina.com
geovina.com
connect.geovina.com
app.geovina.com
srauto-stagging.poolkargo.com
pro.geovina.com
pro.geovina.com
app.geovina.com
geovina.com
pro.geovina.com
geovina.com
backoffice.geovina.com
geovina.com
backoffice.geovina.com
backoffice.geovina.com
pinhasov.com
geovina.com
geovina.com
backoffice.geovina.com
pro.geovina.com

Certificate

The complete raw certificate details for backoffice.geovina.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 288404975435639941391506686982890154694637
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-15 21:38:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-13 21:38:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'backoffice.geovina.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 663507534614763358086845080951120184254789747470327980907656086242272423371174591369831434721777381637539350795745364158912495515253026027189819491599757863673689979519639073475590167782329247035340921196554160628385611039290411924358782589985806146117328583815840424515681445207531604170185471437555634326123239840942265878340999155481506368086473448170524595978551731217254853405781660651463448294996122122758753939042928910378907406683948972469396188701575716817986236854929346312199153650100554151500617594707587164737324528452313077841386831178382421517338798954577887570906105123472052384913785323030675967221610200886827070994709010188339156002411738389216106599620316925470646715772364392563962688101077473218895672129231148109391077706856835778603830188493445529211054778678591258433256212202202624938590711251909575969654499817903309921292066400096483462600338079015717410025958468236027386935957624069821577279995829332655016308242922225066003697073497697316048463067562245300896525293048123911362322369484480255233469641133312819594833546625760471490624469621169198641489184141940984836226286456065215654245157010132003300719989022858877978459906647967354842561027108924468310493616112264096391707779307680923243426914293
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ff64fb85e61549070e86215d568a5f701c47fb88
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backoffice.geovina.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016dd1930c070000040300473045022100f5f6aa24527f9da425260974081dc882983afd86bf785da172b2bc5b819c1e3302202a64c7a5f882d7285e683e7079a93efd7b52e0d69546d83736b0ac1114d005ad0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016dd1930ccd0000040300473045022100d5469dfb95c05397434693db5ce57669d7b15d35bec0c71ae2ce6986255a050102203a52bc3bf1ed97f5571acc3d66c750da3d2b62fd28fcd1328b096cd5d5efdfa2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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