DV SSL/TLS Certificate for k42.se

Certificate is witin its validity period

Issued by Let's Encrypt (R11)

About the k42.se DV SSL/TLS Certificate

This certificate with serial number 06:70:c5:71:3f:16:fd:32:b1:f0:eb:2d:0d:b5:e7:ca:be:f3 for k42.se was issued on by Let's Encrypt.

With 12 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for k42.se provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Let's Encrypt

Organization: Let's Encrypt
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 06:70:c5:71:3f:16:fd:32:b1:f0:eb:2d:0d:b5:e7:ca:be:f3
Serial Number (int): 561047786610034416249573292415760634396403
Serial Number Length: 139 bits, 18 octets

Subject Key Identifier: 94:f5:08:d0:58:06:2f:b5:77:f8:c0:f7:1a:88:be:b0:23:00:e9:c8
Authority Key Identifier: c5:cf:46:a4:ea:f4:c3:c0:7a:6c:95:c4:2d:b0:5e:92:2f:26:e3:b9

Fingerprint (SHA-1): 6f:80:49:0b:cf:e3:ef:4c:60:a9:c4:a1:5f:c6:f4:f3:5c:ba:e9:26
Fingerprint (SHA-256): e7:2f:f9:1c:16:51:9c:9a:a5:b4:12:52:f8:eb:43:8d:42:0b:ca:76:34:e9:0d:7b:7a:f7:78:95:e7:b6:92:b6

Issuing Certificate URL: http://r11.i.lencr.org/

Revocation Information

CRL Distribution Point: http://r11.c.lencr.org/116.crl

Check the revocation status for certificate k42.se
12
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for k42.se

Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

bullitt.se
cloud.k42.se
files.k42.se
git.k42.se
imap.k42.se
k42.se
mail.k42.se
smtp.k42.se
svn.k42.se
vps.k42.se
www.bullitt.se
www.k42.se

X.509 Certificate

The complete raw X.509 certificate details for k42.se in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 561047786610034416249573292415760634396403
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R11'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-12 03:28:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-09-10 03:28:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'k42.se'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 764269296574419311337740500670644626230162086009223729229085543259656684648002172750661147630621563443740077868353167351048318090685309181629914379151320213956718649065569953802425903597730635262064766869600820495613203482565901611265934366189937366420739063976202894255318521444730130050833483425128816775994087771457038067957855499361321222281446877729810250648016929275980567296036192398057197954439588454884264084575613564300818439471539497734662941843459042963048281725088614166346367428326093623253389996222851751188503514375417427689910220449112848584901457494098499728967887778342706365637338508431235249630618958589578683171472908667351258392306285464245542492069282852930587949708279224073265313738096683853952184681980009196114132423408382842038270937122148193090013158416415434893001674634640359254614233550960542911321419370284229231259390322741075725943844789068819153200360286106163173195939639017679038892587229824731275985643323421297708834773445095818753262122905211505733098345452252620031417152993854444684827535844911912960703435259716470722006134014241806516565682512199438891701513468525086640780108920353762312965074574669879560841611628051782451249876294777780133405214128263962082009212447318044400689174637
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							94f508d058062fb577f8c0f71a88beb02300e9c8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c5cf46a4eaf4c3c07a6c95c42db05e922f26e3b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (154 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bullitt.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloud.k42.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'files.k42.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'git.k42.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imap.k42.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'k42.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.k42.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smtp.k42.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'svn.k42.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vps.k42.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bullitt.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.k42.se'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.c.lencr.org/116.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600dddcca3495d7e11605e79532fac79ff83d1c50dfdb003a1412760a2cacbbc82a000001976264239a0000040300473045022035746a14e1fb83d5b9c65706687983f3cb2a101893d015cd71bdcd78f12123f6022100be2a30c45894a636073d688908485bf12ea826df7c64f162276314274ad96c51007700ed3c4bd6e806c2a4a20057dbcb24e23801df512fedc486c5700f20ddb73e3fe00000019762642b710000040300483046022100e643495895ebf623cbdf5e96196b302bebe4ea3c9c9519da796fb65be0030a26022100b38d753d202ddba59d79740ae192404dbb15bd313b958312d8eda0abf5941fe5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00730274af6db492e07f341e85e1ec61038466982ed6a12a9ce96922353d3ccf3f5626b5401d58026b9c35e1a8dc31bcece8eb6e75390a7c52ab8e27887e6178a67348927ddd3b29474875c1c9cc3781c6cff3c9cadb7821f5790256dac94f728d2ff3ced4dc4f81ce57f49dea2915c72cdb49c77be4c87ddf05b7cbbda6837c21ac6d81105307c64208e080d94673f38181b40b9afef83cd39355cc26879aa491f433f919b912edd55667ed9cf2a8e8844a7759fb28144df0e254cc529e7939cc97bb8c87bd5dca0b1f98e4e9755566936fa99b4c0f892ba70958976a3eb96c18588602d5369a11978e972ef8ffe5b06eb8c81b76a67dddf299a8724b61f9352a