sign-sts.flexdanmark.dk

Issued by RapidSSL SHA256 CA - G2

About this certificate

This digital certificate with serial number 71:54:77:c4:8f:c9:49:6e:af:b0:ec:89:89:06:96:41 was issued on by GeoTrust Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Certificate Subject

CN=sign-sts.flexdanmark.dk

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 71:54:77:c4:8f:c9:49:6e:af:b0:ec:89:89:06:96:41
Serial Number (int): 150641345639774803772267239072753686081
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 4c:f4:bf:e8:3b:be:c2:24:f3:1b:47:3b:b5:6e:48:8e:16:ab:af:12

Fingerprint (sha1): bc:8c:16:6c:f8:cc:bf:1d:53:46:98:65:86:b7:1e:0a:6b:75:c1:8c
Fingerprint (sha256): 15:fd:cd:de:67:99:60:e1:63:5e:be:7b:ba:ab:ae:92:e0:5d:b0:66:9b:5e:cf:cd:62:2a:99:34:7a:65:c7:58

Issuing Certificate URL: http://gs.symcb.com/gs.crt

Revocation information

OCSP Server: http://gs.symcd.com
CRL Distribution Point: http://gs.symcb.com/gs.crl

Check the revocation status for certificate sign-sts.flexdanmark.dk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sign-sts.flexdanmark.dk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sign-sts.flexdanmark.dk

Other certificates including the domain name flexdanmark.dk

(limited to 100 certificates)
bc.networkthinking.com
mobile.flexdanmark.dk
bc.networkthinking.com
driftstatus.flexdanmark.dk
bc.networkthinking.com
intra.flexdanmark.dk
sign-teststs.flexdanmark.dk
bc.networkthinking.com
intra.flexdanmark.dk
vognmand.flexdanmark.dk
driftstatus.flexdanmark.dk
bc.networkthinking.com
ekstra.flexdanmark.dk
vognmand.flexdanmark.dk
driftstatus.flexdanmark.dk
ekstra.flexdanmark.dk
bc.networkthinking.com
bc.networkthinking.com
sign-sts.flexdanmark.dk
bc.networkthinking.com
driftstatus.flexdanmark.dk
vognmand.flexdanmark.dk
flexdanmark.dk
driftstatus.flexdanmark.dk
ekstra.flexdanmark.dk
intra.flexdanmark.dk
bc.networkthinking.com
driftstatus.flexdanmark.dk
driftstatus.flexdanmark.dk
bc.networkthinking.com
driftstatus.flexdanmark.dk
intra.flexdanmark.dk
driftstatus.flexdanmark.dk
vognmand.flexdanmark.dk
driftstatus.flexdanmark.dk
bc.networkthinking.com
bc.networkthinking.com
bc.networkthinking.com
bc.networkthinking.com
flexdk-uccx-01.telefoni.flexdanmark.dk
flexdk-uccx-02.telefoni.flexdanmark.dk
driftstatus.flexdanmark.dk
ekstra.flexdanmark.dk
bc.networkthinking.com
flexdanmark.dk
intra.flexdanmark.dk
bc.networkthinking.com
flexdanmark.dk
intra.flexdanmark.dk
intra.flexdanmark.dk
ekstra.flexdanmark.dk
bc.networkthinking.com
bc.networkthinking.com
bc.networkthinking.com
driftstatus.flexdanmark.dk
flexdanmark.dk
bc.networkthinking.com
bc.networkthinking.com
*.flexdanmark.dk
bc.networkthinking.com
bc.networkthinking.com
driftstatus.flexdanmark.dk
driftstatus.flexdanmark.dk
driftstatus.flexdanmark.dk
flexdanmark.dk
bc.networkthinking.com
flexdanmark.dk
intra.flexdanmark.dk
driftstatus.flexdanmark.dk
vognmand.flexdanmark.dk
bc.networkthinking.com
intra.flexdanmark.dk
bc.networkthinking.com
*.flexdanmark.dk
bc.networkthinking.com
flexdanmark.dk
bc.networkthinking.com
bc.networkthinking.com
bc.networkthinking.com
bc.networkthinking.com
driftstatus.flexdanmark.dk
bc.networkthinking.com
driftstatus.flexdanmark.dk
bc.networkthinking.com
bc.networkthinking.com
flexdanmark.dk
bc.networkthinking.com
bc.networkthinking.com
bc.networkthinking.com
bc.networkthinking.com
driftstatus.flexdanmark.dk
bc.networkthinking.com
bc.networkthinking.com
flexdanmark.dk
bc.networkthinking.com
bc.networkthinking.com
flexdanmark.dk
bc.networkthinking.com
ekstra.flexdanmark.dk
driftstatus.flexdanmark.dk

Certificate

The complete raw certificate details for sign-sts.flexdanmark.dk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 150641345639774803772267239072753686081
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL SHA256 CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-03-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-29 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'sign-sts.flexdanmark.dk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 947313015566615496663159491423691486951899886038278153723592071336359527640499122823801865599020134646150210621441383566438519070778973776843041230711164125164362014882921279721379039468242864132981627763363289947282132286416156433240722976377849486685068667587213033303664108365244979811998892596468162942860813828383794506272120627303483331110960730356601361663071357140200709410565183477282861051170048920966409321085354767835507811155710093704192638832678266927353804289037802384954598373019457615959598099127225447860132898863060704107051093895814519873625316631593562685739594847054260438225461567029038569732470155450224188892718552827097760888089855350196976792347418323127893899441178270996850103871248711222888499975476263315810988988318581322688487160347879289802438593203587731125314550727198680667928663376257788728705710320728035360908647277646892789746260741052090115890336032382123932730876503388755689017525354293292222720547869716232779316556030707099760258778297824897301133020501107045513146190117032346903715030408120088273400044345783937678332014282057160007669441915650587474440303010380642343552685126102128109878248358925742200199420655259010383579397966189768976678042616266320866457262874058645156669451397
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sign-sts.flexdanmark.dk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gs.symcb.com/gs.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.rapidssl.com/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.rapidssl.com/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4cf4bfe83bbec224f31b473bb56e488e16abaf12
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gs.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gs.symcb.com/gs.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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