geovina.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:4c:d9:7a:b6:4d:5d:49:d4:fd:23:ca:b9:50:86:75:42:ff was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=geovina.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:4c:d9:7a:b6:4d:5d:49:d4:fd:23:ca:b9:50:86:75:42:ff
Serial Number (int): 287487397314102118897990863333974575760127
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3f:fd:79:fc:eb:91:55:da:4b:a1:89:2a:9a:1f:70:d4:b1:47:86:d1
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 90:3c:ab:d4:c4:08:08:5e:1b:bb:56:19:55:ef:95:65:9c:b4:eb:41
Fingerprint (sha256): f7:de:61:69:98:c7:25:d3:fd:f6:6a:42:3b:98:a2:f6:34:e9:d1:21:05:57:a8:23:7a:0c:07:3c:e3:87:09:b7

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate geovina.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for geovina.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

geovina.com
www.geovina.com

Other certificates including the domain name geovina.com

(limited to 100 certificates)
geovina.com
blog.geovina.com
learning.ovb.at
geovina.com
app.geovina.com
app.geovina.com
geovina.com
pro.geovina.com
pokemonbrowser.com
geovina.com
isehararenkei.info
pro.geovina.com
pro.geovina.com
pro.geovina.com
pro.geovina.com
geovina.com
dariuszczajka.com
connect.geovina.com
pro.geovina.com
geovina.com
geovina.com
blog.geovina.com
connect.geovina.com
geovina.com
pro.geovina.com
geovina.com
backoffice.geovina.com
app.geovina.com
connect.geovina.com
app.geovina.com
geovina.com
geovina.com
pro.geovina.com
backoffice.geovina.com
geovina.com
app.geovina.com
connect.geovina.com
pro.geovina.com
pro.geovina.com
backoffice.geovina.com
geovina.com
geovina.com
pro.geovina.com
connect.geovina.com
idanbirman.dev
pro.geovina.com
pro.geovina.com
geovina.com
pro.geovina.com
backoffice.geovina.com
connect.geovina.com
connect.geovina.com
connect.geovina.com
connect.geovina.com
pro.geovina.com
geovina.com
connect.geovina.com
app.geovina.com
srauto-stagging.poolkargo.com
pro.geovina.com
pro.geovina.com
app.geovina.com
geovina.com
pro.geovina.com
geovina.com
backoffice.geovina.com
geovina.com
backoffice.geovina.com
backoffice.geovina.com
pinhasov.com
geovina.com
geovina.com
backoffice.geovina.com
pro.geovina.com

Certificate

The complete raw certificate details for geovina.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 287487397314102118897990863333974575760127
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-27 09:48:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-26 09:48:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'geovina.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 805761134371247256531848051241861552163698470890026032296385052351639465733229157153903414960186967453508037857945486418884861024914531087634723029914841997775466100059755531235727310011967261224793053145593245170395949244192279318825673375867155583057678155073695822519113555871573360883623363258100335178241541316873098247741036617822173820101548915172369473941919110080799204535369615080678735320744444757246321049768067383631513733730049455005900584366863470257598426015176762113529108493386778696037601535508821203908838949794428316919219633387091894196726714820848071618171554862438306382732369637483728945911830189001080921967076043001274113554649259625445641632202794383924721518602452702680916174228218043177988616658578225568671091886818519535612803457799724322495492063352405367330403877848182444483921409331739324584609348619801020424872643378500006342317275354348023536961495209242792118476168145319358362706716493844261561509812532869427114629735233241592329261890399573895188198560643307046912659952067457393680507450510971144161230901751492336196091404770191253031742610412746087068352346769755651815236651970262499707727485161629250285551719660816156386300851291834901689866620453512457949749184154018603827554325309
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3ffd79fceb9155da4ba1892a9a1f70d4b14786d1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geovina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.geovina.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016d7256296f0000040300473045022100d706edc8522bf6d421ee90c04477f37d6541d210d8bea6584becaf2b29d6220702201d65358ec1aa00909f233a865946124453a5a8fbdf0572d6b248cd062dfd148f00770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016d7256276e0000040300483046022100c1af3f6b9c75543234af1ec3f758eaae62c37e2b652f7194a5400ff8a571232b022100dcbd23a0796df49c61eff0e8df25a0b1310c315490229e820df4818077af6af4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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