jira.esss.lu.se

Issued by R3

About this certificate

This digital certificate with serial number 03:d4:ba:37:5e:76:3e:b0:e2:83:2c:ff:b0:3e:b4:15:d1:c3 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=jira.esss.lu.se

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d4:ba:37:5e:76:3e:b0:e2:83:2c:ff:b0:3e:b4:15:d1:c3
Serial Number (int): 333724243481977735793154770935954445554115
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 84:86:db:eb:4c:90:1d:3e:11:65:33:26:94:44:39:21:f7:9b:a6:75
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 3a:78:a0:9f:e6:28:44:33:9b:77:14:82:4b:55:8a:2c:e0:ad:82:70
Fingerprint (sha256): 08:a4:d6:66:22:f8:d2:da:86:94:ab:e4:da:aa:fb:3f:46:3a:08:7c:c2:d4:de:b1:f1:00:df:d7:83:49:05:b2

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate jira.esss.lu.se

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for jira.esss.lu.se

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

jira.esss.lu.se

Other certificates including the domain name lu.se

(limited to 100 certificates)
stf03.nuclear.lu.se
www.lu.se
connect.lu.se
www.lu.se
adm.rwi.lu.se
canmove-app.ekol.lu.se
moodle.nateko.lu.se
grytan.lunarc.lu.se
idpv4.lu.se
af.lu.se
lweb1122.sol.lu.se
www.lu.se
helpdesk.mhm.lu.se
rehab.adm.lu.se
lulock.luopen.lu.se
www.researchmagazine.lu.se
www.gerdahallen.lu.se
edit.info.lu.se
*.lu.se
cloud.nano.lu.se
intern.shop.lu.se
graduateland.com
jamf.esss.lu.se
crcservice.med.lu.se
www.lu.se
webmailtest.lu.se
desktop.lu.se
grub.lucas.lu.se
moodlealfa.omv.lu.se
hta-lundic.ht.lu.se
casa4.bmc.lu.se
ladoklpwlw-lnu.srv.lu.se
forvaltplan.ht.lu.se
*.gis.lu.se
workfolders.nateko.lu.se
imi-rhapsody.crc.med.lu.se
stf02.nuclear.lu.se
uportalhb-test.ldc.lu.se
www.venturelab.lu.se
www.lu.se
llasso393.srv.lu.se
monastica.ht.lu.se
ler486.srv.lu.se
lovisa.lub.lu.se
alarik.lunarc.lu.se
gernet.gerdahallen.lu.se
www.af.lu.se
grandbox.nateko.lu.se
intranet.rwi.lu.se
ipa1.lunarc.lu.se
libanswers.lub.lu.se
duo.maxlab.lu.se
jira.esss.lu.se
extern.shop.lu.se
passport.lu.se
*.gis.lu.se
intranet.rwi.lu.se
workfolders.lu.se
www.lu.se
lu.se
www.oikos.ekol.lu.se
canvas.education.lu.se
brown.crc.med.lu.se
git.ldc.lu.se
print.ehl.lu.se
ladokping-bth.srv.lu.se
jira.esss.lu.se
www.fokusforskning.lu.se
hta-lundic.ht.lu.se
extern.shop.lu.se
w-v-hdf5view-0.maxiv.lu.se
wfm423n2.srv.lu.se
kosmos.lth.se
idpv3.lu.se
gernet.gerdahallen.lu.se
kosmos.lth.se
www.gerdahallen.lu.se
whd.mhm.lu.se
dagfjarilar.lu.se
www.fokusforskning.lu.se
labguru-app.bmc.lu.se
www.jur.lu.se
venturelab.lu.se
connect.lu.se
Intranet.nateko.lu.se
citrix.med.lu.se
graduateland.com
cas.lu.se
ojstest.lub.lu.se
www.gerdahallen.lu.se
casa4.bmc.lu.se
www.gerdahallen.lu.se
exchange.lusem.lu.se
webmail.lu.se
lubas-uplan.lu.se
lms.liveatlund.lu.se
srv-ad-3.maxiv.lu.se
primweb.adm.lu.se
linteg558.srv.lu.se
connect.lu.se

Certificate

The complete raw certificate details for jira.esss.lu.se in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 333724243481977735793154770935954445554115
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-30 16:55:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-28 16:55:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'jira.esss.lu.se'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 904761144697853248014959657142488915960504772787599479368829827679547326710800028784973614262718624942935005450433165788679211781234451757963947351076886463226582763210772833277090053957505457332321220398172025979765916345707501377257750520275024966699954044072980045553452381412961099967988716793347524217501930042515408294792076913088564471580370529464089230058517506344872873451706294668395087475386416843229722544587457337991648709252934648922774933458426472683408583614887515359110887109705253037048486219185791166047805454846010265038789986371077684663250528081701294690042252501866575813900909324508244951962270710618512353591192431336214266116174062575929101696686832968751476869057604473671659596404447448541260570812075215045610125437425580246636599495774895926815033131228776930752722377377063531280785684749144130718406376247111039906941917110793176109249421628343217767548165850763114513889154200868317243522166095393220044534325696062672863112442079889292935275455430093263190131091437706618829787611868159605322658810478894717624605895975040653197242537193606582425719673784535880337314877711044162145537878875164111844386677249794762295105694430082749098663525550599298279511821248891701265423611984796526612336688337
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8486dbeb4c901d3e1165332694443921f79ba675
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jira.esss.lu.se'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018a4795b76b000004030046304402202b02d5ede196201d7824ef7c0d39ebb6c362340b19d3f1013dde8e4778a48df10220467a81e84a73dbfcc839490edfe0edb24f92f6e942db69d7f5142b76327f41cb007500e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018a4795b7760000040300463044022077237db80f92c948c7a8ed08ff9554f76a03c5281bec044fc48dd83d34b6882e02201e40a67bab19dd48f068bc1f0f2d07b4231e6a7e4d0202d9f1c563c0a51d5801
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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