dingaeld.dk

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 0b:41:86:72:b2:25:09:ab:49:cd:d1:08:14:fe:4d:4c was issued on by DigiCert, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=dingaeld.dk

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:41:86:72:b2:25:09:ab:49:cd:d1:08:14:fe:4d:4c
Serial Number (int): 14961734179469362012302537031417744716
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 87:7a:21:f6:ca:15:3d:a6:8f:ea:dd:ab:02:38:2f:e1:9c:7f:66:28
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): ad:33:4d:eb:f3:f7:c7:d2:ee:ee:42:5a:22:84:f2:2c:84:1a:9d:58
Fingerprint (sha256): 0d:3b:e0:06:4c:d1:52:43:c6:25:48:ef:d8:64:6c:26:29:43:05:b3:04:c1:68:a9:a9:4d:f7:5d:02:53:5c:2f

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate dingaeld.dk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dingaeld.dk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dingaeld.dk

Other certificates including the domain name dingaeld.dk

(limited to 100 certificates)

Certificate

The complete raw certificate details for dingaeld.dk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHgjCCBWqgAwIBAgIQC0GGcrIlCatJzdEIFP5NTDANBgkqhkiG9w0BAQsFADBc
MQswCQYDVQQGEwJVUzEXMBUGA1UEChMORGlnaUNlcnQsIEluYy4xNDAyBgNVBAMT
K0dlb1RydXN0IEdsb2JhbCBUTFMgUlNBNDA5NiBTSEEyNTYgMjAyMiBDQTEwHhcN
MjMwNjEyMDAwMDAwWhcNMjMxMjEyMjM1OTU5WjAWMRQwEgYDVQQDEwtkaW5nYWVs
ZC5kazCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOkryD8M/rBz4kUF
TFie6V4pl4WkjWSTE0sJScO8RcAKN+ONiIEnqIfCWPtH6pMFH+TSn16kkhPg+GEF
1lkEjJE1FSMsZs/5fxeGkefYOxVJv9R3uBBkGiEjs+g59nxbepiOVEq76pHY4lQQ
KaS8GaWp5EMJMN4OyVg0yI6bjjJulV5Kd9gjKJLNoqE+NFOl0mv6Y5TWASug/4FK
1UzNvLbVan7C+9o4Wv+yzbwFAn588tCF0au2MFq6Y6hlYqIRxJt07sL+rQF1B0sP
QHI8rDW5CHO7yDYikmcWXPI/0CIO7O//hQB4ytL2Mr1hqDdWhpR9HoAGhYd8ROaI
UYnJc4kCAwEAAaOCA4QwggOAMB8GA1UdIwQYMBaAFKW01us2xOdrpt/EZAsBKiAE
uGYjMB0GA1UdDgQWBBSHeiH2yhU9po/q3asCOC/hnH9mKDAWBgNVHREEDzANggtk
aW5nYWVsZC5kazAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEG
CCsGAQUFBwMCMIGfBgNVHR8EgZcwgZQwSKBGoESGQmh0dHA6Ly9jcmwzLmRpZ2lj
ZXJ0LmNvbS9HZW9UcnVzdEdsb2JhbFRMU1JTQTQwOTZTSEEyNTYyMDIyQ0ExLmNy
bDBIoEagRIZCaHR0cDovL2NybDQuZGlnaWNlcnQuY29tL0dlb1RydXN0R2xvYmFs
VExTUlNBNDA5NlNIQTI1NjIwMjJDQTEuY3JsMD4GA1UdIAQ3MDUwMwYGZ4EMAQIB
MCkwJwYIKwYBBQUHAgEWG2h0dHA6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzCBhwYI
KwYBBQUHAQEEezB5MCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5j
b20wUQYIKwYBBQUHMAKGRWh0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9HZW9U
cnVzdEdsb2JhbFRMU1JTQTQwOTZTSEEyNTYyMDIyQ0ExLmNydDAJBgNVHRMEAjAA
MIIBfgYKKwYBBAHWeQIEAgSCAW4EggFqAWgAdwDoPtDaPvUGNTLnVyi8iWvJA9PL
0RFr7Otp4Xd9bQa9bgAAAYiu8FjKAAAEAwBIMEYCIQDlvfkxe9zeS7hVKZCmh5Wp
hG4uB2HfNLIoVctRojdSLgIhAN0BoHuq+S/YnbxhjKin4a/iHElUyDjKMWx+7IJy
xnfiAHUAs3N3B+GEUPhjhtYFqdwRCUp5LbFnDAuH3PADDnk2pZoAAAGIrvBYuQAA
BAMARjBEAiBiLLINtv0ffwGMOCfDESEEwTNop+CKTMMTqkCs5A6S9QIgWEF7MPIn
BwuktXhWKwhg5xlOOJsmo9I588nR3ZPx6MwAdgB6MoxU2LcttiDqOOBSHumEFnAy
E4VNO9IrwTpXo1LrUgAAAYiu8FgnAAAEAwBHMEUCICAesBoLdAiNxZD/3YjPnDGP
DgeFMsFQhEH6oBgdhm67AiEAltyM0OChQDJ35eChZR5RptnUtfIItKje6o3WxpAX
g+4wDQYJKoZIhvcNAQELBQADggIBANJB2hUxbU9ovfOWd9eNduGMTeUQgh77u4sf
5nxsX6KY+yvTpnlrVH1wCz+iDUDHIFMzJAWaYELvoGamCBc4FP5FDw/F+Zeqi9/L
waUz+PWMMY/U7ifBTGGpDcPEe7tPLwM5vHDQj2cfhHw0SuVvJXVec9GrurFuj2tV
jotUns5jNjT/ipG57mEOFkRbY1/bn6FfmqZsyiqFFWBB0bWZSrj/6esGkWGSga0U
DC6eGkaAmk8/AbBWfCEr+udletn1/Gxs0Y5TYLEFC473n/O1t3Dlhuv08VkZHkfU
US4eIehHhyDkvfpocwtHDTkRgWykvsnVbNml5r9sIGnRewHSFE2ZRhjZxhGyh2Cw
APfZ7HCsHLOrW4DgyOXTb9wNGzmRY10fWiTN8Zbl9jtesH5Rr8GosLAu17R4L1GY
r4LNIK2oEtZa1brwsqw7VZaRlxtnmUboS34hy01eotBXgMS/2uvI9JSbu9G7kFsl
6cFWRFr0hi8K6ivT44tfvr3bPRKSzWag3Nlqiyfj62116QU+EHqCiRjc9oAAqy5I
WyxO/7equCpnUDR5x3rvo1mNivQZAgAbadDZwINqRsh3Nou28Ah9jFv+SYWXxfSf
2Lo7Klgyt4DMy/SI7V+Xnf5hg/fPnYjGnRXpy6/G0Jyc2J7yAHmYHunP8PST/XKA
2vjp0Up7
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6SvIPwz+sHPiRQVMWJ7p
XimXhaSNZJMTSwlJw7xFwAo3442IgSeoh8JY+0fqkwUf5NKfXqSSE+D4YQXWWQSM
kTUVIyxmz/l/F4aR59g7FUm/1He4EGQaISOz6Dn2fFt6mI5USrvqkdjiVBAppLwZ
pankQwkw3g7JWDTIjpuOMm6VXkp32CMoks2ioT40U6XSa/pjlNYBK6D/gUrVTM28
ttVqfsL72jha/7LNvAUCfnzy0IXRq7YwWrpjqGViohHEm3Tuwv6tAXUHSw9Acjys
NbkIc7vINiKSZxZc8j/QIg7s7/+FAHjK0vYyvWGoN1aGlH0egAaFh3xE5ohRiclz
iQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14961734179469362012302537031417744716
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-12 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dingaeld.dk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29435114870530818427559029676899946146064235968297086172733134248348759676279345361365802984854322319591367430502842457158348096032945234794569919083216915045075048035981352115005197737019509511797541858616298849809293995967351548747211299249647955483897008107373729349050842165785595917582326126963027828716131634870295831013493744629481867028881884987262158852369626961669542175597792145533066897055144350346934685381559239761101438725652202340099207721216234664272356399236893399831827615237452337408984069045917390506919447659958542075979768548024884188478649471706268524769486706388426007090838127711938589324169
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							877a21f6ca153da68feaddab02382fe19c7f6628
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dingaeld.dk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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