apinor.dk

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:30:44:58:99:89:36:c4:5a:68:25:25:d9:d4:9e:b3:c9:54 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=apinor.dk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:30:44:58:99:89:36:c4:5a:68:25:25:d9:d4:9e:b3:c9:54
Serial Number (int): 277761258947402588720387357070367866997076
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 52:24:10:e4:66:13:28:40:b9:55:6e:21:11:39:44:cf:90:1f:68:4a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): f1:68:9d:d7:d1:3c:54:75:27:cd:bb:73:17:3f:55:61:fa:50:ee:97
Fingerprint (sha256): 20:b3:fb:97:ba:03:2a:47:1d:60:e3:72:9f:f9:00:01:4e:bd:74:30:e8:a0:6a:70:9d:8c:6b:2c:f4:8e:c2:c6

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate apinor.dk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for apinor.dk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

apinor.dk
www.apinor.dk

Other certificates including the domain name apinor.dk

(limited to 100 certificates)

Certificate

The complete raw certificate details for apinor.dk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 277761258947402588720387357070367866997076
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-06 00:22:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-04 00:22:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'apinor.dk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 910300222914772556784903764539499643575213652229140215111311117982274289115883575457558874470681837189775153698874775394519247094077781079889332259847795589826829439500417033375126386662784040098580725552850053990220708446079972760770041170808261366750389754778459700967574450332472917873667609030248238141464872140956945417815823135664852928415274503392858861618199129373323871628130110085722849096616910309839487093288522415964588811151732635128711566928849659209008761028329055970448767669612974739441308113886037388371783688466187103958096971523900005603504457539029317658597563816220966541899438755112353201080120261336884834567873086422598305188787314498230974048200248511587370384008705629576184379562805016520924198314440725710956409086212586342330432527406016133174485165644742697071991828565475086281957241066703296769341732645674286275796934730168570393597770705472886497039741188892813334035559527952008057413811024352045970764003649303773421164970593399019112706951679749614714253011914425632189389921382138462259555307237933337900689501301528645360713619847107865902441585068794046142205118695283285016599206356113868593171547942164725770507211055489289284768836000409387004638232119710502796163784675913589693713498151
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							522410e466132840b9556e21113944cf901f684a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apinor.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apinor.dk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016a8abc00160000040300463044022009968f05fbe2f31a2dc9632719f6d8a6ac3a690b04aece58cea6f333c51a321c022063cc1ba66b308de9b12a427f2632a3680fb9842c0288d0795d725dc3fc0492a5007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016a8abc000b0000040300463044022034deeb6ed366e52dbe6e4d08c77176b20fc575d869d1cce504efc91e8c88194d02206250be9b3a279f3513ab1a735c185831e4292787ebd931a4a918ab4934f3faa2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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