backoffice.geovina.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:f6:21:3e:8c:49:be:e7:85:7b:b1:e3:ae:52:2e:6f:87:29 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=backoffice.geovina.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f6:21:3e:8c:49:be:e7:85:7b:b1:e3:ae:52:2e:6f:87:29
Serial Number (int): 345090509349477815753842699022277087823657
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e6:62:11:83:ef:4d:64:02:97:e1:51:a3:fa:0d:5e:db:54:d0:2f:5f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 71:4a:c4:9f:82:80:07:d7:4e:be:24:2e:bf:5e:11:dd:f0:73:95:65
Fingerprint (sha256): ef:57:50:ed:e4:7b:fb:1a:c1:fa:81:4e:12:1b:89:95:c8:5b:fa:56:0d:af:d0:90:b9:fc:e8:b4:c4:eb:af:03

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate backoffice.geovina.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for backoffice.geovina.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

backoffice.geovina.com

Other certificates including the domain name geovina.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for backoffice.geovina.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 345090509349477815753842699022277087823657
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-14 22:58:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-13 22:58:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'backoffice.geovina.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 789961854604907188784283778985755037226317264674345454098381091082234940156385259585324385837474787229509664742823965745765433383946484343560647027076364972987033817555310776673084279305022567658806762073456937383576587862038705147931024057136953831836864489858632542687012586154401225332765829860601881561113026895530458856566721079355223928950185151559012267350489585122921700777420129179346131298896492608553781243217578982591979658992705844604270547344835680154908449632182778819120951062320189535893580220225471967397705824554658843836787819816234799610987318095612435750258170136926535011801243400280660801550971164801936769717452779151767559664918080830724379705012112401708868964385281436655457972310140600861753795692217052524616651808880313081815040220342814410181952873922580916953986073725886785753066458908858854980999412622975495227187302445746293151169302109066337311297664482202490436975709001126643244962793070891990549992180011150533544336014957985911833241029428862023741050004481903915927399085304108543919351983620371745889285045110879114556365480576179091919352178105369750865241446696870549958551157659234772336591598350706145091003263946267265066886373224215770311588787679290455402867507060043150369416399519
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e6621183ef4d640297e151a3fa0d5edb54d02f5f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backoffice.geovina.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016f06d92add000004030046304402202254f00c1d24b35da3cf38e0bebe656df5440b69565e5ae11f52a1b2b01324cd02200ed7bc4c85e8bed7a3d8f8ad8a0f7045f57a17d1cd0482194a3b4cf838e3892300750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016f06d92b2d000004030046304402203533fa5fdb8f345c9c9faaad33241f1198dc25d0879b1d72f41d524f140d0b3b022036e0f2a1c7fc14af837c7bb17d345ee73807ce8fac67a0d5a36c93a3a4f3c7b1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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