optimerdinskat.dk

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:24:af:17:34:89:c0:06:08:e7:97:46:be:e0:ca:fd:6c:f8 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:

  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

optimerdinskat.dk

Let's Encrypt

Organization: Let's Encrypt
Country: US

Time since certificate expired

This certificate has expire since

Certificate Details

Serial Number (hex): 03:24:af:17:34:89:c0:06:08:e7:97:46:be:e0:ca:fd:6c:f8
Serial Number (int): 273819758392123617275179529402453921197304
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f6:83:7c:3f:ea:24:cb:6f:5e:9e:8c:34:0e:a5:84:3b:51:fc:ed:b4
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 55:f3:33:f9:eb:67:d6:4f:4c:f4:a9:3d:25:55:4e:82:b6:5b:b9:68
Fingerprint (sha256): 00:3b:34:28:ca:5f:82:48:cd:24:e5:2d:36:7b:2c:d2:ec:26:12:32:b3:4b:0b:58:8c:6a:54:c2:fd:17:16:ae

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate optimerdinskat.dk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for optimerdinskat.dk


Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

optimerdinskat.dk
www.optimerdinskat.dk

Certificate

The complete raw certificate details for optimerdinskat.dk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 273819758392123617275179529402453921197304
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-17 14:11:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-16 14:11:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'optimerdinskat.dk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 850011971432835158852638553371156621868099017950546916431152710363372167663888183417379961109056677788487669027527894087708560186728045753527270295553636817267820234173863655209397308259670174108985177715369083219788533811563148919407238427167735082005660968689342513357556054029247501022066417227219361582254552103234907631450610327563130433216902393229547311914379362780870311752607707226425162337345172766514330098847294751444584762899473086586477058511530632087825021315527442455497375455924265584170137150075857557449964014783690150223553861314423859716689246681054121400891125883517718293810794979393080581857959848108006997193909777495552493792044133505483721873587754181842860371634182990763090271516263120037137680386992918171712602513119691161093352225401352032487343695308137916113015567864742487602571360877255106080957967637254097676195753363429248676547839328812435612677680630035971063512136898477939417649013131304084501332227883358723115330435940572228561659230732190848081303627420559993697613166526532392515358852372066935536154316820321164380472129254765767921005420349116550048514667459012199989407979992315084594870875097857224803393908436254123172048057052330092987045027259415410002298004667897759269767314719
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f6837c3fea24cb6f5e9e8c340ea5843b51fcedb4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'optimerdinskat.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.optimerdinskat.dk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf6400000162d42944a500000403004630440220526b9c2baed20cbd5b0c0720c20ab9378412bb6171cfedfb8763e6974a7cade002205663703547c1b81d60fef83dad6854a78815a6fd9851715339a342df671cb5e4007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000162d42944ba000004030047304502200871293065d726650a852b4196c8eea7f630cc71b28991b4fa329e2186088215022100c75660b6720f59993325382220dd9ad4948923cc3c1eca2e67a267fbe8aa0393
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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