geofon.com

Issued by R3

About this certificate

This digital certificate with serial number 03:e9:ce:fd:e8:a0:a0:cb:88:79:af:67:cb:8a:1c:c9:4e:5b was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=geofon.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e9:ce:fd:e8:a0:a0:cb:88:79:af:67:cb:8a:1c:c9:4e:5b
Serial Number (int): 340897788624341601615515350858500676341339
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3b:db:2f:9a:f6:6b:34:5c:0d:2c:e7:c6:dd:0b:dc:b9:92:31:5c:f2
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 2c:d4:0b:66:9e:56:6f:f7:86:2f:47:44:d7:54:fe:51:85:ef:8b:49
Fingerprint (sha256): fb:49:2b:73:83:5f:5a:58:9e:f8:99:5c:62:d5:53:d3:77:52:01:40:02:9f:74:8c:69:76:1f:a7:ed:aa:ef:d6

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate geofon.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for geofon.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

geofon.com

Other certificates including the domain name geofon.com

(limited to 100 certificates)
ooospecials.com
zain26.com
columbusjointpain.com
www.jointpainburlington.com
organicnightcream.com
geofon.com
geofon.com
www.progettiformativi.com
christmaslightinghuntington.com
segmenti.com
geofon.com
www.geofon.com
cyklone.com
www.playtimemusic.com
blockconversion.com
www.geofon.com
tallahasseestemcell.com
potdating.com
leilabekhti.com
www.marcfaber.com
www.latinoamericani.com
www.noidcasino.com
www.kimmorgan.com
akyba.com
timetravelxr.com
geofon.com

Certificate

The complete raw certificate details for geofon.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAt+i58rNeiwZyGQ+7PfzF
XgqaFPkUL1+y/TKNkiiVRK235ZdymxGdqc4XSV71PVTq1t18aBEteUIIEXEwAQhW
ZrQRpL212DB9fbpJSKVVYNVggeDVPDtoshxfq1NScR3teL3QNghpf7RtS4TZg2Wi
pC7NlSkIE19o3JuSQlgtLTojNHlmcKkcswPOuP8qboRtPTn4IlalVhkoFNEl28nx
OxDg0H0FuPsHo1USuLQINOqXQEMwzXwfZcX3o4rn852m6vWD2Yy+lrkvW5FMFoKd
lErwUpgDBSP998ibE2/DgnY/KO1OWrnPjbePU4kMBWY85ykD8Rgite1WQqQKzx+O
sw08oagtnB+G8EcuRDW377x2ApYsscH63jyPC70wf/cQa7mEHOGBwJPMtd+iUk7N
VNtlz/pPeL0ZZ5vfx2AdLV/xlnYWHlXRhyBIrwRiIsb27NBKHhE0frY62eQxcsq7
2yqcirqL7v2dKPe7oQq9jUEo9M3BD9B5rMK13G77B5feJAYUkiYjUdB+xauD7QRr
p0xOfw14fWONuBppwxkj11wo/yR1Y5g7KhgOyhAWcAL/Iq1XZ25MgayQgSYpsQRQ
Y1C1za1x26IDo/PbEYm58oeg0+l7WHVSzpipPHP0ttOu/f+Wzu+JdCTui2Fc+O0Y
35m2EUu4nx2grmoh4zi0QqECAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 340897788624341601615515350858500676341339
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-20 06:18:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-18 06:18:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'geofon.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 750283617230043839814728882888743492170504465894715028099361922494930684498983575638591502785694776748935818135230977223492046594587938979624568471436168341005552042175989126697660288396452415196820676339431254654825763565658561625021818508877023726153551540560255935985101823327346022209487947791907533816184926810574637900554820585823277419185359081327840396062149275950604684333244413571500770109702331496016431205001366223113676894262465813630087995650899597949222222259405845795579673527081402259337319067063876948930691020452544326974744806017688503515738469560686653121195472215267673615967879269590942995879701362139154377222729489197297580935791823969917176810831272511644613962490924887909978837981472621144100714334870145900457876652643586701738917033767811180462976855804716252681417085297296087532862034631248846112569952081850633870730452453518367109411368829304024682164626053163138475015556295790715657381904394800811480036937643031541895286393272181843676928473051207027642912879006889959562482748467542390359206029174756994828386443277743913668839362743571031794322139127829918484267889817225170528624626058034208419112216880662146455262123339334334200135476131087028430992028996477365922946618192246027969476444833
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3bdb2f9af66b345c0d2ce7c6dd0bdcb992315cf2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geofon.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e5ab9d54a0000040300483046022100da34809f7777097c4a9f6a6cffcd15dec02886d4825b24e8bb4df69bc57955ae022100f122ed3cf60d932a438218f83da870a30466faf21172972d27a696a9b907e2be00750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018e5ab9d59c0000040300463044022052dd1ad26dc7de9cba8b6ecfd763268cc976021f98c250495dbce87c45e62272022042972cf22c42492573c4ba873972ce0577be18d386232da106405f436c956b93
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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