milliways-2.lysator.liu.se

Issued by R3

About this certificate

This digital certificate with serial number 04:3b:9f:98:4e:a5:ed:b9:6f:c6:ab:2b:cb:2a:a7:83:03:f5 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=milliways-2.lysator.liu.se

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:3b:9f:98:4e:a5:ed:b9:6f:c6:ab:2b:cb:2a:a7:83:03:f5
Serial Number (int): 368737941451002822874561607165650688738293
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 35:5f:2b:e2:73:11:14:e4:73:43:3d:b9:f5:43:de:47:1c:34:ef:39
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): fe:31:00:8b:7f:1a:ac:9a:fc:e8:b5:08:81:dd:21:7c:5b:6d:17:59
Fingerprint (sha256): 02:79:76:d7:31:7c:c3:0f:12:ad:cf:45:10:5d:dd:07:81:18:62:a8:b4:7f:4c:2e:ae:5d:d6:17:0d:6e:cf:7a

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate milliways-2.lysator.liu.se

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for milliways-2.lysator.liu.se

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

milliways-2.lysator.liu.se

Other certificates including the domain name liu.se

(limited to 100 certificates)
remindme.isv.liu.se
www.lysator.se
lyncowa1.ad.liu.se
nms.cyd.liu.se
exam.lisam.liu.se
medlem.stuff.liu.se
medlem.lintek.liu.se
myutn1.itn.liu.se
sharepoint.liu.se
bilda.liu.se
www.confero.ep.liu.se
calendar.isy.liu.se
foraldragruppen.it.liu.se
cadics.isy.liu.se
rdpklienter.edu.liu.se
hyperdoc.unit.liu.se
tp.on.liu.se
sleipner.isv.liu.se
snicdocs.nsc.liu.se
emma.ad.embassaden.liu.se
hr.liu.se
esg-dn1.nsc.liu.se
medlem.lintek.liu.se
www.nsc.liu.se
svn-und.ida.liu.se
milliways-2.lysator.liu.se
alumni.liu.se
search.liu.se
tal.test.it.liu.se
vpn.itn.liu.se
portal.ad.liu.se
it.liu.se
augmentedinformationspaces.itn.liu.se
remindme.isv.liu.se
graduateland.com
bolinc.nsc.liu.se
mirror.nsc.liu.se
dimma.it.liu.se
lisam.liu.se
sysadm.isy.liu.se
styrdokument.liu.se
account.liu.se
insidan.holgerspexet.se
nim.nsc.liu.se
mattemasken.test.it.liu.se
passwordstate.it.liu.se
medlem.stuff.liu.se
testbuss.test.it.liu.se
guide.bibl.liu.se
notificationhubproxy.test.it.liu.se
systemview.it.liu.se
httpkom.lysator.liu.se
tp.on.liu.se
medlem.stuff.liu.se
dashboard.test.it.liu.se
cms.ifm.liu.se
x-sys.itn.liu.se
journey.test.it.liu.se
c-zabbix2.itn.liu.se
medreg.lysator.liu.se
studentspex.se
atlas-cache03.bluegrass.nsc.liu.se
lisamadmin.app.test.cloud.it.liu.se
medlem.stuff.liu.se
vpn.it.liu.se
resebokning.liu.se
lists.ifm.liu.se
vastgota.nation.liu.se
ctrl-c.liu.se
search.liu.se
snicdocs.nsc.liu.se
sc2-dev-cm.test.ad.liu.se
remindme.isv.liu.se
teachings.app.test.cloud.it.liu.se
www.conference4.ep.liu.se
www.conference2.ep.liu.se
rag.lysator.liu.se
jamf1.test.ad.liu.se
pf-test.it.liu.se
racing.lysator.liu.se
nagios.ifm.liu.se
service.test.integration.it.liu.se
bokabil.it.liu.se
pulp2.it.liu.se
ysektionen.se
lkpws3.ad.liu.se
qv.it.liu.se
projects.itn.liu.se
valuationstudies.liu.se
gmproxy.test.it.liu.se
webmail.ifm.liu.se
datorhandbok.lysator.liu.se
talprod.it.liu.se
cisco-vpn.ifm.liu.se
www2.itn.liu.se
nikita.itn.liu.se
mail.liu.se
ctrl-c.liu.se
cms.ifm.liu.se
podd.itn.liu.se

Certificate

The complete raw certificate details for milliways-2.lysator.liu.se in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 368737941451002822874561607165650688738293
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-07 04:38:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-06 04:38:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'milliways-2.lysator.liu.se'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 917732399001223149727710340775486267426787973652126885285465268498066867189582872174032708188415258719838580323295514721631458795430924613440194453455008189670949775881087948942442746725406602250478456564597381958093675983890992732850317057545474037131259588460986043888864164263455879574750580142749825754721542008690452499103126971892907717857253318101416767758750506957741612480078815458828055021781825827056499246015390242077925857148607718535465108973354900159917982449620547013321598008935513104010121588582932084033212107753106524758780930336702470855038614496100623501261501260661342845576964429087870403472591808603347781118745349275750134445423946363851789984876344280438768257534118606423519189633289683920504519291196508498408668709315818711390670256735471568523022069590327278641953464953875570690223584515894156079701583322526983402933854476285431136100852828576338016819932087183374606166857839806497950567069140756556659018951780657196158944069480331989898778934678299132126931598863739055561907807943523544356890504385084573634657287260514567225668022108599815217940965780031703638933537051251855976057328319435430012431440190064066789073153141018014736706369553654059484804461092705667046181188215758441786141483073
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							355f2be2731114e473433db9f543de471c34ef39
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'milliways-2.lysator.liu.se'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb499000001875a3907010000040300473045022079de71824ca1dae92cc49d9d2eb3782ab2c5220275dd92b2533296163f990dc0022100e1403c84d83ccc4ac131a56592026681ec07f08bb8e2f2dbbd6c070d2701ead70077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001875a39070e0000040300483046022100f28b0b9ab0132d894823a9ecdbf747af50bd7717fad07135b9c023013bcffa7e022100ebc03468a104ae360f9f2e62aac82f17a66981a981bfb5bbc0bc8614379973e4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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