search.liu.se

Issued by R3

About this certificate

This digital certificate with serial number 03:bb:c8:1d:e0:4b:dc:9c:91:8b:a3:80:cd:44:4e:e8:8c:c4 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=search.liu.se

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:bb:c8:1d:e0:4b:dc:9c:91:8b:a3:80:cd:44:4e:e8:8c:c4
Serial Number (int): 325235661134532252680556314059421698788548
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 81:08:21:c0:03:af:0a:c6:8a:58:7a:d5:d4:f4:03:a6:08:67:d4:e9
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 1f:1e:2e:11:91:98:fb:ca:4c:f2:94:9f:c3:16:be:a3:ef:8a:b6:4e
Fingerprint (sha256): 08:09:3f:5e:e1:54:d5:47:36:b6:b3:1e:99:85:0d:6b:d3:f7:29:0d:73:78:e2:0d:d9:85:ac:46:fc:26:c2:b1

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate search.liu.se

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for search.liu.se

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

internal.search.liu.se
search.liu.se

Other certificates including the domain name liu.se

(limited to 100 certificates)
remindme.isv.liu.se
www.lysator.se
lyncowa1.ad.liu.se
nms.cyd.liu.se
exam.lisam.liu.se
medlem.stuff.liu.se
medlem.lintek.liu.se
myutn1.itn.liu.se
sharepoint.liu.se
bilda.liu.se
www.confero.ep.liu.se
calendar.isy.liu.se
foraldragruppen.it.liu.se
cadics.isy.liu.se
rdpklienter.edu.liu.se
hyperdoc.unit.liu.se
tp.on.liu.se
sleipner.isv.liu.se
snicdocs.nsc.liu.se
emma.ad.embassaden.liu.se
hr.liu.se
esg-dn1.nsc.liu.se
medlem.lintek.liu.se
www.nsc.liu.se
svn-und.ida.liu.se
milliways-2.lysator.liu.se
alumni.liu.se
search.liu.se
tal.test.it.liu.se
vpn.itn.liu.se
portal.ad.liu.se
it.liu.se
augmentedinformationspaces.itn.liu.se
remindme.isv.liu.se
graduateland.com
bolinc.nsc.liu.se
mirror.nsc.liu.se
dimma.it.liu.se
lisam.liu.se
sysadm.isy.liu.se
styrdokument.liu.se
account.liu.se
insidan.holgerspexet.se
nim.nsc.liu.se
mattemasken.test.it.liu.se
passwordstate.it.liu.se
medlem.stuff.liu.se
testbuss.test.it.liu.se
guide.bibl.liu.se
notificationhubproxy.test.it.liu.se
systemview.it.liu.se
httpkom.lysator.liu.se
tp.on.liu.se
medlem.stuff.liu.se
dashboard.test.it.liu.se
cms.ifm.liu.se
x-sys.itn.liu.se
journey.test.it.liu.se
c-zabbix2.itn.liu.se
medreg.lysator.liu.se
studentspex.se
atlas-cache03.bluegrass.nsc.liu.se
lisamadmin.app.test.cloud.it.liu.se
medlem.stuff.liu.se
vpn.it.liu.se
resebokning.liu.se
lists.ifm.liu.se
vastgota.nation.liu.se
ctrl-c.liu.se
search.liu.se
snicdocs.nsc.liu.se
sc2-dev-cm.test.ad.liu.se
remindme.isv.liu.se
teachings.app.test.cloud.it.liu.se
www.conference4.ep.liu.se
www.conference2.ep.liu.se
rag.lysator.liu.se
jamf1.test.ad.liu.se
pf-test.it.liu.se
racing.lysator.liu.se
nagios.ifm.liu.se
service.test.integration.it.liu.se
bokabil.it.liu.se
pulp2.it.liu.se
ysektionen.se
lkpws3.ad.liu.se
qv.it.liu.se
projects.itn.liu.se
valuationstudies.liu.se
gmproxy.test.it.liu.se
webmail.ifm.liu.se
datorhandbok.lysator.liu.se
talprod.it.liu.se
cisco-vpn.ifm.liu.se
www2.itn.liu.se
nikita.itn.liu.se
mail.liu.se
ctrl-c.liu.se
cms.ifm.liu.se
podd.itn.liu.se

Certificate

The complete raw certificate details for search.liu.se in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 325235661134532252680556314059421698788548
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-17 06:00:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-15 06:00:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'search.liu.se'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 734055054944978301193448565298867253393447053628324069003104427103419020464852996790158328969857049596381990773844818290873609386533369290897777530959543796866102967657690877445783162657054792529126689027037706471407463119894732449723012672052678280455950904885822873982721179007875628985922041942456579006326107060469666454867695323277025882174590750934637503956019148165237868649814980818459792123899728413846585026523131035833507309072063040995252385948855182045676706706528133446941054745462161719788477099118219359076168250434856847999922701702600316725565598709431338990400873623882873562014771707953062213439490484013208402577597566341555729092774170807639342989613316602681158001098956297053940655576220582832976041325657605669062309004612301375922023771913441443311936238535025590998437895942885593023720793138664969501804945966352239590794756024937623320325458175634823723164490905592756045599954003600392082201805731192579760504109656880408271178392709841023923275984695733639993335423610084369446560875120168399681321632063412494404988295782976189415758757044171278131091696981706214877028830634256074962248331679540025644694607086679128900376115610038266635624528240342928177123585503250857380184745577852894236357945601
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							810821c003af0ac68a587ad5d4f403a60867d4e9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (41 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internal.search.liu.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'search.liu.se'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018bdc148aff0000040300463044022061cbb73f4b7c56905c88f2e30153507429c06bf7b2e60402f9629192a9f7a9b6022011f09604879c292b22efc60e024b4a11185f1be01c26123bb0d9a91df80022c7007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018bdc148b010000040300463044022070e482c25f68cb6bc012bfe378ffd0a961ec2e862e955e396f66d4fafb823b640220236ea89302f746e538f0d762c85a7b162104dfec1e66107d1c5101062dedd5ec
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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