harry-potter.gyldendal.dk
Issued by R3
About this certificate
This digital certificate with serial number 04:63:7e:ff:7c:70:e2:8b:f4:4d:63:ae:12:8d:ea:1a:9f:f5 was issued on by Let's Encrypt.
With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=harry-potter.gyldendal.dk
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 04:63:7e:ff:7c:70:e2:8b:f4:4d:63:ae:12:8d:ea:1a:9f:f5Serial Number (int): 382305907339344178111399131723683640025077
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: bf:99:13:fd:7f:bb:88:31:0e:fa:e4:02:ff:30:6c:ba:5b:e4:35:77
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): ac:f6:e3:ae:f2:f4:47:77:a8:2c:99:fd:b0:95:7a:6d:06:37:ea:29
Fingerprint (sha256): 0f:4b:3e:9b:8a:20:35:df:1f:7f:c6:17:75:4d:26:dd:0f:0b:9b:fc:f6:e5:d0:27:c9:9e:ec:b9:b0:15:73:b4
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate harry-potter.gyldendal.dk
4
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for harry-potter.gyldendal.dk
Public Key Algorithm
RSA
Key Size
3072
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
harry-potter.gyldendal.dk
harrypotter.gyldendal.dk
www.harry-potter.gyldendal.dk
www.harrypotter.gyldendal.dk
harrypotter.gyldendal.dk
www.harry-potter.gyldendal.dk
www.harrypotter.gyldendal.dk
Other certificates including the domain name gyldendal.dk
(limited to 100 certificates)
dns-vetting1d.map.fastly.net
ia.gyldendal.dk
xn--skrivogls-n3a.gyldendal.dk
twentythree.net
ssl3.ipaper.io
lumiereapp.com
dns-vetting1d.map.fastly.net
ssl3.ipaper.io
dns-vetting1d.map.fastly.net
twentythree4.map.fastly.net
mobil-skoleordbog.gyldendal.dk
ssl3.ipaper.io
dns-vetting1d.map.fastly.net
app.kvikmat.gyldendal.dk
ssl3.ipaper.io
twentythree.net
ssl3.ipaper.io
twentythree.net
systime.dk
twentythree5.global.fastly.net
dns-vetting1d.map.fastly.net
faktaogfiktion.gyldendal.dk
oevig.gyldendal.dk
twentythree5.global.fastly.net
twentythree.net
twentythree.net
xn--skrivogls-n3a.gyldendal.dk
dns-vetting1d.map.fastly.net
*.23demo.com
paineldecontrole.jaentendiagro.com.br
leapfrog-ssl-27.gcs-web.com
twentythree.net
dns-vetting1d.map.fastly.net
osamhru.space
twentythree5.global.fastly.net
dns-vetting1d.map.fastly.net
twentythree.net
twentythree.net
sipdir01.lync.oncirque.net
dns-vetting1d.map.fastly.net
dns-vetting1d.map.fastly.net
ssl3.ipaper.io
ssl6.ipaper.io
twentythree5.global.fastly.net
erikvanegmond.nl
twentythree5.global.fastly.net
twentythree.net
calendar-staging.itv-america.com
dns-vetting1d.map.fastly.net
xn--skrivogls-n3a.gyldendal.dk
twentythree.net
twentythree.net
ssl3.ipaper.io
twentythree.net
twentythree.net
dns-vetting1d.map.fastly.net
twentythree.net
twentythree.net
dns-vetting1d.map.fastly.net
www.bort.cl
twentythree.net
twentythree.net
twentythree5.global.fastly.net
twentythree.net
www.xn--teknologiforstelse-iub.gyldendal.dk
systime.dk
twentythree.net
twentythree5.global.fastly.net
webmail.gyldendal.dk
dns-vetting1d.map.fastly.net
skoleordbog.gyldendal.dk
ssl3.ipaper.io
*.gyldendal.dk
xn--skrivogls-n3a.gyldendal.dk
dns-vetting1d.map.fastly.net
twentythree.net
harry-potter.gyldendal.dk
twentythree.net
sipdir01.lync.oncirque.net
ibog30.gyldendal.dk
twentythree5.global.fastly.net
ssl5.ipaper.io
hojttilloftet.gyldendal.dk
twentythree.net
twentythree4.map.fastly.net
app.kvikmat.gyldendal.dk
ssl3.ipaper.io
twentythree.net
twentythree5.global.fastly.net
dns-vetting1d.map.fastly.net
ssl3.ipaper.io
twentythree.net
sipdir01.lync.oncirque.net
twentythree4.map.fastly.net
ssl3.ipaper.io
twentythree5.global.fastly.net
dns-vetting1d.map.fastly.net
twentythree.net
twentythree5.global.fastly.net
sipdir01.lync.oncirque.net
ia.gyldendal.dk
xn--skrivogls-n3a.gyldendal.dk
twentythree.net
ssl3.ipaper.io
lumiereapp.com
dns-vetting1d.map.fastly.net
ssl3.ipaper.io
dns-vetting1d.map.fastly.net
twentythree4.map.fastly.net
mobil-skoleordbog.gyldendal.dk
ssl3.ipaper.io
dns-vetting1d.map.fastly.net
app.kvikmat.gyldendal.dk
ssl3.ipaper.io
twentythree.net
ssl3.ipaper.io
twentythree.net
systime.dk
twentythree5.global.fastly.net
dns-vetting1d.map.fastly.net
faktaogfiktion.gyldendal.dk
oevig.gyldendal.dk
twentythree5.global.fastly.net
twentythree.net
twentythree.net
xn--skrivogls-n3a.gyldendal.dk
dns-vetting1d.map.fastly.net
*.23demo.com
paineldecontrole.jaentendiagro.com.br
leapfrog-ssl-27.gcs-web.com
twentythree.net
dns-vetting1d.map.fastly.net
osamhru.space
twentythree5.global.fastly.net
dns-vetting1d.map.fastly.net
twentythree.net
twentythree.net
sipdir01.lync.oncirque.net
dns-vetting1d.map.fastly.net
dns-vetting1d.map.fastly.net
ssl3.ipaper.io
ssl6.ipaper.io
twentythree5.global.fastly.net
erikvanegmond.nl
twentythree5.global.fastly.net
twentythree.net
calendar-staging.itv-america.com
dns-vetting1d.map.fastly.net
xn--skrivogls-n3a.gyldendal.dk
twentythree.net
twentythree.net
ssl3.ipaper.io
twentythree.net
twentythree.net
dns-vetting1d.map.fastly.net
twentythree.net
twentythree.net
dns-vetting1d.map.fastly.net
www.bort.cl
twentythree.net
twentythree.net
twentythree5.global.fastly.net
twentythree.net
www.xn--teknologiforstelse-iub.gyldendal.dk
systime.dk
twentythree.net
twentythree5.global.fastly.net
webmail.gyldendal.dk
dns-vetting1d.map.fastly.net
skoleordbog.gyldendal.dk
ssl3.ipaper.io
*.gyldendal.dk
xn--skrivogls-n3a.gyldendal.dk
dns-vetting1d.map.fastly.net
twentythree.net
harry-potter.gyldendal.dk
twentythree.net
sipdir01.lync.oncirque.net
ibog30.gyldendal.dk
twentythree5.global.fastly.net
ssl5.ipaper.io
hojttilloftet.gyldendal.dk
twentythree.net
twentythree4.map.fastly.net
app.kvikmat.gyldendal.dk
ssl3.ipaper.io
twentythree.net
twentythree5.global.fastly.net
dns-vetting1d.map.fastly.net
ssl3.ipaper.io
twentythree.net
sipdir01.lync.oncirque.net
twentythree4.map.fastly.net
ssl3.ipaper.io
twentythree5.global.fastly.net
dns-vetting1d.map.fastly.net
twentythree.net
twentythree5.global.fastly.net
sipdir01.lync.oncirque.net
Certificate
The complete raw certificate details for harry-potter.gyldendal.dk in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgISBGN+/3xw4ov0TWOuEo3qGp/1MA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDA0MDQwNzE4MjVaFw0yNDA3MDMwNzE4MjRaMCQxIjAgBgNVBAMT GWhhcnJ5LXBvdHRlci5neWxkZW5kYWwuZGswggGiMA0GCSqGSIb3DQEBAQUAA4IB jwAwggGKAoIBgQC0vRWEaR12ndC5vYHtyJ8/z7m7WA/34WFed6dyAMLxrvQwJ9h6 U2FNz5n/0ZgodpurKpMspJ9/LciKbF3E2QOp1P1e6oBkHxfQLIxBssw7oy31Llrz GsBvCKlkQJ6kB1oybYQ1o9eTNYMgKqnreLusdS0p/Sk7HwFagCZSHM6lzle1cmPb mQuDoNvaJDXRqUz8f9OyZQz43X7wCmdG2p6jV+kMXRZGx07QbHnFVWFMwIF57iWP nEYWqJ5HlYH2B9te7p+imdFb3s5bMthEj73Tg11VI9Go8gIYDGiAWhw5tCAWPFSJ 4DsWu4KIY4KeUHncMArfsnfpaIesMhPht31DQYuGfvz9sQiDeGFhFDEiw3acqz62 Dut9JedVjz5Ujc7FdtywepGiY9PwgnRaPgiqlEndtiM5mGf1uZCsDa5IQiykrLJS +jOmzuqXAptG5IKye/y9mozFpWn79oRVf+7lKNaxiWxeHp0IeIVhUqRzr7V13btD 1bt3Ykz038h5MRECAwEAAaOCAnMwggJvMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUE FjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU v5kT/X+7iDEO+uQC/zBsulvkNXcwHwYDVR0jBBgwFoAUFC6zF7dYVsuuUAlA5h+v nYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8vcjMuby5s ZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9yZy8wewYD VR0RBHQwcoIZaGFycnktcG90dGVyLmd5bGRlbmRhbC5ka4IYaGFycnlwb3R0ZXIu Z3lsZGVuZGFsLmRrgh13d3cuaGFycnktcG90dGVyLmd5bGRlbmRhbC5ka4Icd3d3 LmhhcnJ5cG90dGVyLmd5bGRlbmRhbC5kazATBgNVHSAEDDAKMAgGBmeBDAECATCC AQUGCisGAQQB1nkCBAIEgfYEgfMA8QB3AEiw42vapkc0D+VqAvqdMOscUgHLVt0s gdm7v6s52IRzAAABjqgwD8QAAAQDAEgwRgIhANS+5LqFWvUs46ELoItxA2uwsv7d 8leU03wcPyQLDqc3AiEAsjQnZSLCnVzPqu20IWumQotF6KaZPdbzer5Fuf6+IkgA dgDf4VbrqgWvtZwPhnGNqMAyTq5W2W6n9aVqAdHBO75SXAAAAY6oMBB6AAAEAwBH MEUCIQC9rJFpHzPuUse2Zh2lhg+OvQkdlrsL9o10Qik7k1QiCAIgF+ktkeliU3FL 9Nq1k8biO86qo3sDHXJvS6IbtWfyPtAwDQYJKoZIhvcNAQELBQADggEBAFDPC3Cq thu0FwJ7D5J8lF0BgAxPpMtXi5U0rEio30VvoB9mp10Xig4917XjbfZrP6lVv5r6 DpKGe90q4Ns2KbJhPHIHmNyA+qdS7Dm/P46ElNeYX6cV9wmcWbftqVrJeot2fZpt jTTmp3WYAG183qLXQiQoU/RKig0PJuRuy550mfJHyXStVk07soozqHcwODc7m7li JPOCeVXc9kaw5no/qypjVlOGJaXlZCGLMWZEDnVlE/yp7SBUiOMZ8AlfTqxBpigU sqiZRFa8t+mQC5WmDHlteScxOR3nVpBRxmp8lFSpg3zG6jhukaOx+pbGn16OQOpd D4AMwceJhbxkkoc= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBojANBgkqhkiG9w0BAQEFAAOCAY8AMIIBigKCAYEAtL0VhGkddp3Qub2B7cif P8+5u1gP9+FhXnencgDC8a70MCfYelNhTc+Z/9GYKHabqyqTLKSffy3IimxdxNkD qdT9XuqAZB8X0CyMQbLMO6Mt9S5a8xrAbwipZECepAdaMm2ENaPXkzWDICqp63i7 rHUtKf0pOx8BWoAmUhzOpc5XtXJj25kLg6Db2iQ10alM/H/TsmUM+N1+8ApnRtqe o1fpDF0WRsdO0Gx5xVVhTMCBee4lj5xGFqieR5WB9gfbXu6fopnRW97OWzLYRI+9 04NdVSPRqPICGAxogFocObQgFjxUieA7FruCiGOCnlB53DAK37J36WiHrDIT4bd9 Q0GLhn78/bEIg3hhYRQxIsN2nKs+tg7rfSXnVY8+VI3OxXbcsHqRomPT8IJ0Wj4I qpRJ3bYjOZhn9bmQrA2uSEIspKyyUvozps7qlwKbRuSCsnv8vZqMxaVp+/aEVX/u 5SjWsYlsXh6dCHiFYVKkc6+1dd27Q9W7d2JM9N/IeTERAgMBAAE= -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 382305907339344178111399131723683640025077 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-04 07:18:25 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-03 07:18:24 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'harry-potter.gyldendal.dk' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3184 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 4101641053877113618177508951833833465308713486443866341392034656033547955941007850027832404870914810666445372397265275626960013545174798284155814841109216225733248079059684059761727063024205599397068095745812625754833052364556512214275250314335198890269271667592388668454180859672828684971257121099412634847508536010687602338223659930122627709175867991660379111418491072693996373870307906086568035820233241376480059994364722171109268763509567451721612244083169751969931882320527872405353067499554401193700591418184336857788698755713934073422042162330530772415928149668479896683284752792203176515557114299561120932854256004941510604606938910555182926439135565060260339233149249239149183896694368496494423415684475830956868583878715947789186247344059801477030526767767889476527701208091609424012961323647692098262039851831594324184993039047062910724065365331182544754544436848082414056427954925959409312614576312604764711498001 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) bf9913fd7fbb88310efae402ff306cba5be43577 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (116 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harry-potter.gyldendal.dk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harrypotter.gyldendal.dk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.harry-potter.gyldendal.dk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.harrypotter.gyldendal.dk' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f100770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018ea8300fc40000040300483046022100d4bee4ba855af52ce3a10ba08b71036bb0b2feddf25794d37c1c3f240b0ea737022100b234276522c29d5ccfaaedb4216ba6428b45e8a6993dd6f37abe45b9febe2248007600dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018ea830107a0000040300473045022100bdac91691f33ee52c7b6661da5860f8ebd091d96bb0bf68d7442293b93542208022017e92d91e96253714bf4dab593c6e23bceaaa37b031d726f4ba21bb567f23ed0 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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