gopkg.pco.dk

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:b7:f8:18:15:a1:1d:93:48:25:20:b2:1e:52:ef:45:f8:00 was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=gopkg.pco.dk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b7:f8:18:15:a1:1d:93:48:25:20:b2:1e:52:ef:45:f8:00
Serial Number (int): 323938304538587231685569692439645876779008
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3b:69:c5:fb:3a:89:72:5a:1c:04:01:d8:50:98:77:5b:a5:db:52:70
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 49:76:91:41:8e:e6:d8:56:96:94:8b:0a:29:65:b4:c3:fb:4f:64:fa
Fingerprint (sha256): 07:1d:7a:f1:df:5c:61:ad:73:08:91:4f:ac:a8:fb:0d:8d:78:b4:47:a1:7b:32:2c:39:04:39:e9:ac:fe:79:57

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate gopkg.pco.dk

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gopkg.pco.dk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.prod.ng.peytz.dk
*.stage.ng.peytz.dk
gopkg.pco.dk

Other certificates including the domain name pco.dk

(limited to 100 certificates)
social.innx.pco.dk
social.innx.pco.dk
dfi.dk.d9.vps.prod.combell.peytz.dk
gopkg.pco.dk
mylife.custom.prod.combell.pco.dk
noedhjaelp.fkn.wp.prod.combell.pco.dk
hal.aws.pco.dk
noedhjaelp.fkn.wp.prod.combell.pco.dk
dfi.dk.d9.vps.prod.combell.peytz.dk
dfi.dk.d9.vps.prod.combell.peytz.dk
shellservice.hal.aws.pco.dk
social.innx.pco.dk
dfi.dk.d9.vps.prod.combell.peytz.dk
dfi.dk.d9.vps.prod.combell.peytz.dk
noedhjaelp.fkn.wp.prod.combell.pco.dk
noedhjaelp.fkn.wp.prod.combell.pco.dk
login-bilvask.hal.aws.pco.dk
shellservice.hal.aws.pco.dk
noedhjaelp.fkn.wp.prod.combell.pco.dk
hal.aws.pco.dk
social.innx.pco.dk
noedhjaelp.fkn.wp.prod.combell.pco.dk
dfi.dk.d9.vps.prod.combell.peytz.dk
dfi.dk.d9.vps.prod.combell.peytz.dk
anet.d7.prod.hz.pco.dk
gopkg.pco.dk
dfi.dk.d9.vps.prod.combell.peytz.dk
noedhjaelp.fkn.wp.prod.combell.pco.dk
shellservice.hal.aws.pco.dk
shellservice.hal.aws.pco.dk
noedhjaelp.fkn.wp.prod.combell.pco.dk
noedhjaelp.fkn.wp.prod.combell.pco.dk
procurement.fkn.wp.prod.combell.pco.dk
dfi.dk.d9.vps.prod.combell.peytz.dk
hal.aws.pco.dk
noedhjaelp.fkn.wp.prod.combell.pco.dk
dfi.dk.d9.vps.prod.combell.peytz.dk
noedhjaelp.fkn.wp.prod.combell.pco.dk
gopkg.pco.dk
dfi.dk.d9.vps.prod.combell.peytz.dk
anet.d7.prod.hz.pco.dk
shellservice.hal.aws.pco.dk
dfi.dk.d9.vps.prod.combell.peytz.dk
dfi.dk.d9.vps.prod.combell.peytz.dk
noedhjaelp.fkn.wp.prod.combell.pco.dk
social.innx.pco.dk
noedhjaelp.fkn.wp.prod.combell.pco.dk
shellservice.hal.aws.pco.dk
noedhjaelp.fkn.wp.prod.combell.pco.dk
noedhjaelp.fkn.wp.prod.combell.pco.dk
noedhjaelp.fkn.wp.prod.combell.pco.dk
anet.d7.prod.hz.pco.dk
social.innx.pco.dk
noedhjaelp.fkn.wp.prod.combell.pco.dk
dfi.dk.d9.vps.prod.combell.peytz.dk
social.innx.pco.dk
dfi.dk.d9.vps.prod.combell.peytz.dk
noedhjaelp.fkn.wp.prod.combell.pco.dk
dfi.d9.prod.combell.pco.dk
hal.aws.pco.dk
noedhjaelp.fkn.wp.prod.combell.pco.dk
anet.d7.prod.hz.pco.dk
shellservice.hal.aws.pco.dk

Certificate

The complete raw certificate details for gopkg.pco.dk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 323938304538587231685569692439645876779008
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-16 07:46:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-14 07:46:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gopkg.pco.dk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 802675370256119104784435300259812753743240651882215073603836983146461710849742178012808360030933553941117715381901326986821846065810380408608015486781941938953037982613991160950090106521957678110448698101423104116734942390312885443372089103371785765028638095105016682760172845529156494340400591284213207818000926586369500696538677591833487853445430141659055080215779591434928975257432701821564565703380315602796155512182031375025735721661206025665168726602897632270530833053524279557285679059078690830670859567240460640270786232913373559513636184703194783817557104654868713505586893919923726269679460295843188130688791515482028907100755731881299472026985160112675084323441180496222500520778298701957781007255008868204291708151127438729067778535535341148634718419969264051000022918172199294938323204177874444345432428122654704952088929202776392771723279218164273627528093834706345275156268078379496100357795873411618167759882640672232121070461428011794223037953533731363737274222450418548279937877831840527928879555758636789653785147110652556888448735780291087181599304816055957039967981218700173166221972256761856690491350195358500797445339126932076388117008536032104815387092341798542798480649109154266102080513769319925299791205867
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3b69c5fb3a89725a1c0401d85098775ba5db5270
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (57 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod.ng.peytz.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stage.ng.peytz.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gopkg.pco.dk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016dd3bf30490000040300483046022100b11b2e05e88ee1a479bf8af5b571065442b01e4b450c0e69f2c89a4b6510d861022100978faa702f7db6632dfd9ab0bbf81d81cafd88b416e5819975d94a66d429ee410077005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016dd3bf32450000040300483046022100f4138a81b722b4e1455393ac743849a7d259d8c9b395aad1324d11e0d506ea2b0221009c0e2cefaf358059f4b8fb835cbb7c51178d100a7d50f747e59bf4c630d4d5d5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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