ekstra.flexdanmark.dk

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:6e:c4:02:ab:fc:7c:04:67:2f:d9:8c:f6:d2:c1:5f:67:9b was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ekstra.flexdanmark.dk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:6e:c4:02:ab:fc:7c:04:67:2f:d9:8c:f6:d2:c1:5f:67:9b
Serial Number (int): 299028460716647452143825110268317536315291
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 65:19:f7:b0:b1:59:8b:a6:59:be:58:fd:aa:fe:9e:31:8c:75:d5:2d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 2d:6a:a4:9f:f1:48:98:87:c5:e9:ce:6d:d5:3f:22:9c:bf:cf:8c:e0
Fingerprint (sha256): 1b:de:85:f4:14:bf:c3:98:de:21:93:69:74:c1:36:45:b9:db:79:e1:eb:89:b7:3e:e0:d3:65:2c:47:61:b9:19

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate ekstra.flexdanmark.dk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ekstra.flexdanmark.dk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ekstra.flexdanmark.dk
www.ekstra.flexdanmark.dk

Other certificates including the domain name flexdanmark.dk

(limited to 100 certificates)
bc.networkthinking.com
mobile.flexdanmark.dk
bc.networkthinking.com
driftstatus.flexdanmark.dk
bc.networkthinking.com
intra.flexdanmark.dk
sign-teststs.flexdanmark.dk
bc.networkthinking.com
intra.flexdanmark.dk
vognmand.flexdanmark.dk
driftstatus.flexdanmark.dk
bc.networkthinking.com
ekstra.flexdanmark.dk
vognmand.flexdanmark.dk
driftstatus.flexdanmark.dk
ekstra.flexdanmark.dk
bc.networkthinking.com
bc.networkthinking.com
sign-sts.flexdanmark.dk
bc.networkthinking.com
driftstatus.flexdanmark.dk
vognmand.flexdanmark.dk
flexdanmark.dk
driftstatus.flexdanmark.dk
ekstra.flexdanmark.dk
intra.flexdanmark.dk
bc.networkthinking.com
driftstatus.flexdanmark.dk
driftstatus.flexdanmark.dk
bc.networkthinking.com
driftstatus.flexdanmark.dk
intra.flexdanmark.dk
driftstatus.flexdanmark.dk
vognmand.flexdanmark.dk
driftstatus.flexdanmark.dk
bc.networkthinking.com
bc.networkthinking.com
bc.networkthinking.com
bc.networkthinking.com
flexdk-uccx-01.telefoni.flexdanmark.dk
flexdk-uccx-02.telefoni.flexdanmark.dk
driftstatus.flexdanmark.dk
ekstra.flexdanmark.dk
bc.networkthinking.com
flexdanmark.dk
intra.flexdanmark.dk
bc.networkthinking.com
flexdanmark.dk
intra.flexdanmark.dk
intra.flexdanmark.dk
ekstra.flexdanmark.dk
bc.networkthinking.com
bc.networkthinking.com
bc.networkthinking.com
driftstatus.flexdanmark.dk
flexdanmark.dk
bc.networkthinking.com
bc.networkthinking.com
*.flexdanmark.dk
bc.networkthinking.com
bc.networkthinking.com
driftstatus.flexdanmark.dk
driftstatus.flexdanmark.dk
driftstatus.flexdanmark.dk
flexdanmark.dk
bc.networkthinking.com
flexdanmark.dk
intra.flexdanmark.dk
driftstatus.flexdanmark.dk
vognmand.flexdanmark.dk
bc.networkthinking.com
intra.flexdanmark.dk
bc.networkthinking.com
*.flexdanmark.dk
bc.networkthinking.com
flexdanmark.dk
bc.networkthinking.com
bc.networkthinking.com
bc.networkthinking.com
bc.networkthinking.com
driftstatus.flexdanmark.dk
bc.networkthinking.com
driftstatus.flexdanmark.dk
bc.networkthinking.com
bc.networkthinking.com
flexdanmark.dk
bc.networkthinking.com
bc.networkthinking.com
bc.networkthinking.com
bc.networkthinking.com
driftstatus.flexdanmark.dk
bc.networkthinking.com
bc.networkthinking.com
flexdanmark.dk
bc.networkthinking.com
bc.networkthinking.com
flexdanmark.dk
bc.networkthinking.com
ekstra.flexdanmark.dk
driftstatus.flexdanmark.dk

Certificate

The complete raw certificate details for ekstra.flexdanmark.dk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0bkYM86na6x+NnQZwWag
1rPK4e7yM2h5PpUGqWxG8/9pEdUiRyCFM7aLunRH/UUY0BYPi6el+4PUfvyCxSrk
MnB9m3XVJH1RL0j3KlrrSBHyW9tRZN7UrESxYGZZkE3lKd3vCdlgOy7bOKzLi+91
XUwHTFgPnLR8PVNjRbHNQC1Xf8IIAJZANJunwUrlY1LsTjanM0FTWHoanoMl7LwX
e5H9QX10sXbsrndeN1athHOm/tm7hMv6tilex7P9HLud6PEtZvmqYdQgIaXAu+fB
Ci1LC0rpE//vMBaLOml3vM4/5otcsKPAVx76HZ3dH5BHYUaZ1Q0betSlk+J0BcUU
YwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 299028460716647452143825110268317536315291
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-04 08:02:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-02 08:02:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ekstra.flexdanmark.dk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26475079257645250046275245960270630428497321711092805324995287682608449449460169979303126566663075708973774318451411516169999744339296041798225908840683397122669166903719868716886999159162256874438672310850806863792845372528740631638229031043321940172053121581865749913924974344183504703548044013185078010855981685942594305776281836824387813634812262175187128536471742942766693616920805706510460722095462044879462608883405542681380395778755305697849296503901096207897398298237130102833850620897267969107803035555385652020255677672304812096454856983717645824913763732140118025556838970363954109992416784361025729533027
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6519f7b0b1598ba659be58fdaafe9e318c75d52d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ekstra.flexdanmark.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ekstra.flexdanmark.dk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb27300000170a4c885150000040300473045022100a6bb183dfcade6f8757b1ddf7c492c0946f9edeb8fc5f154f5c3a22a7cd285d4022005ad00c88228946d60dbf01d3180cd150778b8e5d987eefa3d31d276c2fd6441007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170a4c885100000040300473045022100dea740e1fcb533daf733233d4c4df2a0cb419ccbee72aae8fd919078c469cfe602204296798c2570f8da688f19e5fd41e947808fe373576ba7c23dc63cf5c450e53f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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