stamp.acs.coop.dk

- Coop Danmark A/S -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 1c:a0:25:33:ad:42:80:ef:c4:db:f2:06:bf:52:99:d2 was issued on by Entrust, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Coop Danmark A/S

Organization: Coop Danmark A/S
Locality: Albertslund
Country: DK

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 1c:a0:25:33:ad:42:80:ef:c4:db:f2:06:bf:52:99:d2
Serial Number (int): 38049905922756144890212481327778929106
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: 3d:8a:9d:30:14:f7:9f:b3:0b:94:e2:02:27:66:23:86:7f:50:b1:5d
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): d5:6c:8f:27:12:48:34:df:9d:a7:c6:f9:df:65:26:c8:b6:52:96:e9
Fingerprint (sha256): 0b:2d:7d:8c:e5:be:ce:3a:06:25:73:98:c9:ea:47:2f:5d:d1:31:54:df:e9:6a:9a:e2:51:cc:5d:a8:18:61:f4

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate stamp.acs.coop.dk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for stamp.acs.coop.dk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

stamp.acs.coop.dk

Other certificates including the domain name coop.dk

(limited to 100 certificates)
anglemark.dk
www.bufras.club
4rex.app
superbrugsen.coop.dk
fs3.net.coop.dk
cloudinary2.map.fastly.net
akamai-san17.exacttarget.com
savannah.coop.dk
icebear.app
guestnet.coop.dk
cloudinary2.map.fastly.net
mad.pre.coop.dk
cloudinary2.map.fastly.net
savannah.coop.dk
cloudinary2.map.fastly.net
redirect.coop.dk
www.elev.coop.dk
akamai-san17.exacttarget.com
developer.cl.coop.dk
cloudinary2.map.fastly.net
cloudinary2.map.fastly.net
redirect.coop.dk
cloudinary2.map.fastly.net
voucher.acs.coop.dk
cloudinary2.map.fastly.net
paymentcard-stage.cps.coop.dk
stamp.acs.coop.dk
testportal.coop.dk
*.net.coop.dk
testdummy.coop.dk
tilmeld.coop.dk
cloudinary2.map.fastly.net
opskrifter.coop.dk
*.cl.coop.dk
opskrifter.coop.dk
letsvoo.com
redirect.net.coop.dk
cloudinary2.map.fastly.net
devtilmeld.coop.dk
s4-san.cloudinary.com
akamai-san17.exacttarget.com
cloudinary2.map.fastly.net
cusk.coop.dk
receipt.pre.acs.coop.dk
cloudinary2.map.fastly.net
indkobsliste.coop.dk
apidemo.cl.coop.dk
*.tst.coop.dk
cloudinary2.map.fastly.net
lyncdiscover.mad.coop.dk
devtilmeld.coop.dk
cloudinary2.map.fastly.net
cloudinary2.map.fastly.net
adm.mad.coop.dk
cdkwebmail.coop.dk
sts01.tst.coop.dk
ansvarlighed.coop.dk
voucher.tst.cl.coop.dk
coop365.coop.dk
savannah.coop.dk
cloudinary2.map.fastly.net
opskrifteradmin.coop.dk
s4-cloudinary-pin.map.fastly.net
cloudinary2.map.fastly.net
s4-san.cloudinary.com
prdmedlem.coop.dk
forening.coop.dk
bonus-calculation.tst.acs.coop.dk
fakta.coop.dk
adm.mad.pre.coop.dk
cardpaymentproxy.acs.coop.dk
partner-tst.cps.coop.dk
voucher.pre.acs.coop.dk
guestnet.coop.dk
click.marketing.mad.coop.dk
elev.coop.dk
kampagner.coop.dk
brand.coop.dk
*.coop.dk
dash.coop.dk
email.shopping.coop.dk
view.marketing.mad.coop.dk
cloudinary2.map.fastly.net
cloud.marketing.mad.coop.dk
opskrifter.coop.dk
cloudinary2.map.fastly.net
tilmeld.coop.dk
receiptsearch.acs.coop.dk
partner.cps.coop.dk
www.elev.coop.dk
rest.mad.coop.dk
akamai-san17.exacttarget.com
autonum.app
cloudinary2.map.fastly.net
devtilmeld.coop.dk
adfs-token.net.coop.dk
cloudinary2.map.fastly.net
api.cl.coop.dk
md-grive.com
*.pre.cl.coop.dk

Certificate

The complete raw certificate details for stamp.acs.coop.dk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxbecZeramwmD/FeHMJj
6jsdVwvu9YlUmSEsD3/VFlpBOod8iUS8Hla9sXds38e4RkMhZjtZhQS65XA83IB+
8gbmXQrB2uZNT7rITLBNyiJhvm0Dgj5AO1e2eyIYmObtvMOzr03H4Iv6I+DrmXQ4
UtZ3hYcuso3v6Ks22uGUZOeVXLveVtNbc8Cy66jL94srlhCsHkazQTJd5Hhl2rmg
325A35M8jroq7BO+BhckJp8QX8idrgGw/ZxpozywS3F5JSi45F8MjuK9sJgLt1xE
LEv7V9mtx/7pwMRSsQKY71TgknitDC/m4bkre/+IfYjEF9/w0FTfOfir6YZj5Vdp
5wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 38049905922756144890212481327778929106
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-17 10:56:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-17 10:56:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DK'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Albertslund'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Coop Danmark A/S'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'stamp.acs.coop.dk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26142606213115136715197300459915840725008967093602814589763718403828741421197768668853704424762662634210654804243183504529627260516126097160229357446304694856477280140788633177962497244713756397865928296340717139050717524248168511883395643804362222995995244402972602263760736199373220632692016388373311146247955641427568706694808947185916506789207585935075115855002357850225467636921287317381940939425957424769650764977549269397782491136866963761487923674020181012843570740636719733869521595347732081597391375347669771686021284617329759548320452678555856880169967951663645508120626078939230138263507872012886743673319
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3d8a9d3014f79fb30b94e202276623867f50b15d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stamp.acs.coop.dk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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