harry-potter.gyldendal.dk

Issued by R3

About this certificate

This digital certificate with serial number 04:63:7e:ff:7c:70:e2:8b:f4:4d:63:ae:12:8d:ea:1a:9f:f5 was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=harry-potter.gyldendal.dk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:63:7e:ff:7c:70:e2:8b:f4:4d:63:ae:12:8d:ea:1a:9f:f5
Serial Number (int): 382305907339344178111399131723683640025077
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: bf:99:13:fd:7f:bb:88:31:0e:fa:e4:02:ff:30:6c:ba:5b:e4:35:77
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ac:f6:e3:ae:f2:f4:47:77:a8:2c:99:fd:b0:95:7a:6d:06:37:ea:29
Fingerprint (sha256): 0f:4b:3e:9b:8a:20:35:df:1f:7f:c6:17:75:4d:26:dd:0f:0b:9b:fc:f6:e5:d0:27:c9:9e:ec:b9:b0:15:73:b4

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate harry-potter.gyldendal.dk

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for harry-potter.gyldendal.dk

Public Key Algorithm

RSA

Key Size

3072

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

harry-potter.gyldendal.dk
harrypotter.gyldendal.dk
www.harry-potter.gyldendal.dk
www.harrypotter.gyldendal.dk

Other certificates including the domain name gyldendal.dk

(limited to 100 certificates)
dns-vetting1d.map.fastly.net
ia.gyldendal.dk
xn--skrivogls-n3a.gyldendal.dk
twentythree.net
ssl3.ipaper.io
lumiereapp.com
dns-vetting1d.map.fastly.net
ssl3.ipaper.io
dns-vetting1d.map.fastly.net
twentythree4.map.fastly.net
mobil-skoleordbog.gyldendal.dk
ssl3.ipaper.io
dns-vetting1d.map.fastly.net
app.kvikmat.gyldendal.dk
ssl3.ipaper.io
twentythree.net
ssl3.ipaper.io
twentythree.net
systime.dk
twentythree5.global.fastly.net
dns-vetting1d.map.fastly.net
faktaogfiktion.gyldendal.dk
oevig.gyldendal.dk
twentythree5.global.fastly.net
twentythree.net
twentythree.net
xn--skrivogls-n3a.gyldendal.dk
dns-vetting1d.map.fastly.net
*.23demo.com
paineldecontrole.jaentendiagro.com.br
leapfrog-ssl-27.gcs-web.com
twentythree.net
dns-vetting1d.map.fastly.net
osamhru.space
twentythree5.global.fastly.net
dns-vetting1d.map.fastly.net
twentythree.net
twentythree.net
sipdir01.lync.oncirque.net
dns-vetting1d.map.fastly.net
dns-vetting1d.map.fastly.net
ssl3.ipaper.io
ssl6.ipaper.io
twentythree5.global.fastly.net
erikvanegmond.nl
twentythree5.global.fastly.net
twentythree.net
calendar-staging.itv-america.com
dns-vetting1d.map.fastly.net
xn--skrivogls-n3a.gyldendal.dk
twentythree.net
twentythree.net
ssl3.ipaper.io
twentythree.net
twentythree.net
dns-vetting1d.map.fastly.net
twentythree.net
twentythree.net
dns-vetting1d.map.fastly.net
www.bort.cl
twentythree.net
twentythree.net
twentythree5.global.fastly.net
twentythree.net
www.xn--teknologiforstelse-iub.gyldendal.dk
systime.dk
twentythree.net
twentythree5.global.fastly.net
webmail.gyldendal.dk
dns-vetting1d.map.fastly.net
skoleordbog.gyldendal.dk
ssl3.ipaper.io
*.gyldendal.dk
xn--skrivogls-n3a.gyldendal.dk
dns-vetting1d.map.fastly.net
twentythree.net
harry-potter.gyldendal.dk
twentythree.net
sipdir01.lync.oncirque.net
ibog30.gyldendal.dk
twentythree5.global.fastly.net
ssl5.ipaper.io
hojttilloftet.gyldendal.dk
twentythree.net
twentythree4.map.fastly.net
app.kvikmat.gyldendal.dk
ssl3.ipaper.io
twentythree.net
twentythree5.global.fastly.net
dns-vetting1d.map.fastly.net
ssl3.ipaper.io
twentythree.net
sipdir01.lync.oncirque.net
twentythree4.map.fastly.net
ssl3.ipaper.io
twentythree5.global.fastly.net
dns-vetting1d.map.fastly.net
twentythree.net
twentythree5.global.fastly.net
sipdir01.lync.oncirque.net

Certificate

The complete raw certificate details for harry-potter.gyldendal.dk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 382305907339344178111399131723683640025077
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-04 07:18:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-03 07:18:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'harry-potter.gyldendal.dk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3184 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 4101641053877113618177508951833833465308713486443866341392034656033547955941007850027832404870914810666445372397265275626960013545174798284155814841109216225733248079059684059761727063024205599397068095745812625754833052364556512214275250314335198890269271667592388668454180859672828684971257121099412634847508536010687602338223659930122627709175867991660379111418491072693996373870307906086568035820233241376480059994364722171109268763509567451721612244083169751969931882320527872405353067499554401193700591418184336857788698755713934073422042162330530772415928149668479896683284752792203176515557114299561120932854256004941510604606938910555182926439135565060260339233149249239149183896694368496494423415684475830956868583878715947789186247344059801477030526767767889476527701208091609424012961323647692098262039851831594324184993039047062910724065365331182544754544436848082414056427954925959409312614576312604764711498001
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bf9913fd7fbb88310efae402ff306cba5be43577
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (116 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harry-potter.gyldendal.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harrypotter.gyldendal.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.harry-potter.gyldendal.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.harrypotter.gyldendal.dk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018ea8300fc40000040300483046022100d4bee4ba855af52ce3a10ba08b71036bb0b2feddf25794d37c1c3f240b0ea737022100b234276522c29d5ccfaaedb4216ba6428b45e8a6993dd6f37abe45b9febe2248007600dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018ea830107a0000040300473045022100bdac91691f33ee52c7b6661da5860f8ebd091d96bb0bf68d7442293b93542208022017e92d91e96253714bf4dab593c6e23bceaaa37b031d726f4ba21bb567f23ed0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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