archive.control.lth.se

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:da:de:f9:aa:47:49:75:9b:c5:32:bf:65:2d:9f:f2:84:71 was issued on by Let's Encrypt.

With 15 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=archive.control.lth.se

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:da:de:f9:aa:47:49:75:9b:c5:32:bf:65:2d:9f:f2:84:71
Serial Number (int): 422927084666445164862314475013013888992369
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 3e:6b:7c:0d:54:32:80:b8:34:a1:fd:b7:d7:37:e6:b2:f3:21:d7:c5
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 82:9d:ea:ca:f4:b9:d6:98:2c:6e:be:ff:4e:2f:b5:32:73:e6:2f:20
Fingerprint (sha256): 21:0a:3f:07:e0:18:f9:25:8b:d0:af:c7:30:6a:cb:c1:fd:58:6a:4f:04:c2:d6:b6:a0:a9:03:54:39:e1:e3:86

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate archive.control.lth.se

15

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for archive.control.lth.se

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

archive.control.lth.se
handsonml.control.lth.se
lccc.control.lth.se
lccc.lth.se
ombyggnad.control.lth.se
piclu.control.lth.se
picse.control.lth.se
test.lccc.control.lth.se
test.ombyggnad.control.lth.se
test.piclu.control.lth.se
test.picse.control.lth.se
webserver2.control.lth.se
wiki.control.lth.se
www.archive.control.lth.se
www.pic.lu.se

Other certificates including the domain name lth.se

(limited to 100 certificates)
www.processindustrycentre.se
webserver.control.lth.se
quiz.maths.lth.se
engross.lth.se
csstore.cs.lth.se
onnebring.se
cloud.solid.lth.se
lccc.lth.se
dflund.se
mail.dflund.se
imap.student.lth.se
vm66.cs.lth.se
quiz.maths.lth.se
vm25.cs.lth.se
sam.cs.lth.se
control.lth.se
gittan.eit.lth.se
lu.se
gitlab.control.lth.se
webserver.control.lth.se
scanoats.tbiokem.lth.se
gitlab.control.lth.se
kosmos.lth.se
webmail.student.lth.se
www.chemeng.lth.se
sharelatex.control.lth.se
quiz.maths.lth.se
kosmos.lth.se
mail1.cs.lth.se
reg.maths.lth.se
www.eit.lth.se
doc.ddg.lth.se
snejk.dsek.lth.se
ds-erato.design.lth.se
dflund.se
hermes.eit.lth.se
exchange.lusem.lu.se
test.picse.control.lth.se
archive.control.lth.se
snejk.dsek.lth.se
www1.maths.lth.se
print.net.lth.se
mimura.dflund.se
mail.dflund.se
control.lth.se
archive.control.lth.se
nextcloud.control.lth.se
dflund.se
www.ceq.lth.se
pic.lu.se
lucas.cs.lth.se
nagios.df.lth.se
forum.maths.lth.se
vm66.cs.lth.se
moodle.eit.lth.se
dflund.se
mimura.dflund.se
mimura.dflund.se
sam.control.lth.se
vm67.cs.lth.se
fysweb.nano.lu.se
control.lth.se
gittan.eit.lth.se
kosmos.lth.se
quiz.maths.lth.se
webserver.control.lth.se
sam.control.lth.se
cloud.solid.lth.se
www.processindustrycentre.se
vmadmin.cs.lth.se
cloud.solid.lth.se
test.www3.control.lth.se
archive.control.lth.se
archive.control.lth.se
moodle-test.cs.lth.se
nielsen.maths.lth.se
mail.dflund.se
insightrepo.eit.lth.se
booking.control.lth.se
mystery.cs.lth.se
*.itacih.cs.lth.se
budgetsys3.eit.lth.se
sec4fac.eit.lth.se
dokuwiki.cs.lth.se
pic.lu.se
lu.se
gitlab.control.lth.se
sharelatex.control.lth.se
gitlab.control.lth.se
archive.control.lth.se
svn19.cs.lth.se
www.iea.lth.se
ds-owncloud.design.lth.se
booking.control.lth.se
mail.dflund.se
archive.control.lth.se
mail.dflund.se
umoln.mtov.lth.se
forum.maths.lth.se
moodle.cs.lth.se

Certificate

The complete raw certificate details for archive.control.lth.se in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA86lD4DIYCsm1trK6BEXP
9mRGP2vvHmm++q14YSNF1QG2Vt0ay8fGeFsqUkVKslL/jmXFFc+UIPi3NDYykpjI
4B71R+B5FkpN5/YYPH7jmeWJS9AjCOGq41nj69btNJp1Aw8S4JbifAlNDdJNRt0k
GTIjedEg0B8mqD5RxXNhkIto9eCDwzcfFn+QFQxJJmnAruzccQkQxNGnwP2FMXVv
IKkNjoBFvzBBxbat09/iWZgQZq7lkg8l8EtWAEBbsymyrqOMVT7zW9D0pAuZ0KI3
Cd7CW0Cn6QlTX/+YboWLONyT0+JAQReQiMg8qJBndAVh8t+z/p4x8q0sjZykcL1P
JQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 422927084666445164862314475013013888992369
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-26 06:36:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-24 06:36:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'archive.control.lth.se'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30759375858026265860047618365875161389749963295501392094571490408197378299370402389281187033113662067701351145090200402464131691552939783716799210334902934111961164170861164475727199098809065672080801748912234426070414904145235277358081421910899885827857711689206788699991716802719940246891078473740787265114926192436435163564288846946534967268626034310710371176014554283070431183855416335282601062942034439349556581501766337732320468267031034083397881215386489691715973229250341083224209658165924645593662290208730835155049151431665211447240656968077110596013725229622869007743186682769012544160640711449545359052581
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3e6b7c0d543280b834a1fdb7d737e6b2f321d7c5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'archive.control.lth.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'handsonml.control.lth.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lccc.control.lth.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lccc.lth.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ombyggnad.control.lth.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'piclu.control.lth.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'picse.control.lth.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.lccc.control.lth.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.ombyggnad.control.lth.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.piclu.control.lth.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.picse.control.lth.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webserver2.control.lth.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiki.control.lth.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.archive.control.lth.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pic.lu.se'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000017115c5501100000403004730450221008f0f2bcc3bdfad8ad77925999437a4418c074873eed1083f4a7b60f4c62ba69302201e287939661595c7eea5a3a4092650a97bf83ec7a718e921b0248818a0af39ee007700e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e0000017115c5501100000403004830460221008b706b040d8a3004a08bcfe737e38ef777f61e2c9ec8e6140b4222c3be7dda93022100dfbb0cd364d727d52fd3b7523cfe91d68de53b4f8554101437a64e5cb79aee69
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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