ginzburg.se

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:2b:49:1a:d1:ff:49:28:38:6b:db:f7:da:00:5a:57:41:ce was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ginzburg.se

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:2b:49:1a:d1:ff:49:28:38:6b:db:f7:da:00:5a:57:41:ce
Serial Number (int): 276066172475541144266565568835677826007502
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 52:c5:32:16:eb:1c:d0:0b:dd:09:90:b0:0a:10:a1:f1:fd:d5:e6:2f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ec:6c:93:ca:bf:2b:7e:bb:7c:51:3c:fc:3c:ad:59:18:07:13:ed:76
Fingerprint (sha256): 1d:c9:44:15:33:5d:eb:15:0a:84:36:ac:42:17:18:39:e8:cc:28:5a:9c:b9:74:b7:cc:c1:dd:fe:3e:d7:70:a7

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate ginzburg.se

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ginzburg.se

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ginzburg.se
www.ginzburg.se

Other certificates including the domain name ginzburg.se

(limited to 100 certificates)

Certificate

The complete raw certificate details for ginzburg.se in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 276066172475541144266565568835677826007502
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-01 12:20:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-30 12:20:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ginzburg.se'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 722704329046826971611567122577841617594014139184478177498057354393379928393207676489923607548013205433185758235269708362413916984309562898480815525052922477782735598871399754785684214250468638172335583271396570528311277678514533931336025139039876594812357125373050874733035846750194055362007545997472839521343638633859918836380356815912533177297731450103430743245126177830677912948197386089688553628072896962111273656396893010486038598913203803512009091577854404619367857910915390123103412645285228966488398791209096086565379153987882383553110660509006526270030777536436775592916015618773513652238133277244446601513954342138689879885468453684508929963314459754593663750009613979212408922945517764187267758859162879502774212875286501989085338940998596977937236176541892175481511086394343130064596799471917224833489237367747625883559656354588717046956469398421356631574609457057195170853932860205580051061259265479428970078503845164074427220653435741670399212282316428091412058941753169160678485614455749100610438647305847010746035726300265160257149753437386716477254841663526049746660351968270058097807875372275628716898321740645370047792453238837429185696690908432155393827917866656549850100728517315457600650306067799657694548930649
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							52c53216eb1cd00bdd0990b00a10a1f1fdd5e62f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ginzburg.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ginzburg.se'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016d877aa3710000040300463044022008bb88d0536ac09409d974b8dbc3e3c33df017ac103c5bb9a0cae20cb2dea9cf0220725a717474f1f34df5e381af8bb7c9ffd5f5249ca730e3e7f224d09499c6dd7500760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016d877aa16f0000040300473045022100e827728a84de6392601db48163778c490fa59069b936dd36f0b731ffbeee854102204d65df24f91d839e1cdeabd376dc8f7babc4173199098464403417ddca51d34a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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