intranet.lofbergs.se

Issued by Sectigo RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number 15:34:c0:29:2d:74:56:e5:74:fa:97:82:12:df:d2:9b was issued on by Sectigo Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=intranet.lofbergs.se

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 15:34:c0:29:2d:74:56:e5:74:fa:97:82:12:df:d2:9b
Serial Number (int): 28187684833193079766509734265907827355
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: 13:a4:f3:52:a0:ad:1e:db:59:a3:69:f2:37:97:a9:98:16:c2:fc:28
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1

Fingerprint (sha1): 76:3e:71:7d:86:f1:8a:d8:d4:ee:69:e6:00:a3:0b:1e:88:27:da:9c
Fingerprint (sha256): 22:27:77:52:6a:be:89:48:ac:2b:d0:47:9b:aa:13:db:44:56:c2:ad:a5:d0:d6:65:d0:9f:0a:ed:b5:21:47:d6

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate intranet.lofbergs.se

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for intranet.lofbergs.se

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

intranet.lofbergs.se
www.intranet.lofbergs.se

Other certificates including the domain name lofbergs.se

(limited to 100 certificates)
canteen.bankserv.africa
seehait.me
sts.lofbergs.se
e-academy.lofbergs.se
lofbergs.se
lofbergs.se
en.lofbergs.se
www.skulptink.com
intranet.lofbergs.se
en.lofbergs.se
m.toktik.co
spanish.luukjonko.nl
lofbergs.se
en.lofbergs.se
en.lofbergs.se
en.lofbergs.se
www.catalyst.lt
sts.lofbergs.se
intranet.lofbergs.se
queue-coworker-prod.digitalse.ikea.com
storybook.interactive.training
en.lofbergs.se
en.lofbergs.se
en.lofbergs.se
dev.auth.haystackpro.com
e-academy.lofbergs.se
lofbergs.se
recipe.ifbcloud.in
lab.lofbergs.se
en.lofbergs.se
en.lofbergs.se
en.lofbergs.se
en.lofbergs.se
lofbergs.se
en.lofbergs.se
e-academy.lofbergs.se
en.lofbergs.se
e-academy.lofbergs.se
www.lofbergs.se
lofbergs.se
intranet.lofbergs.se
sts.lofbergs.se
e-academy.lofbergs.se
shop.lofbergs.se
links.openbet-demo.com
intranet.lofbergs.se
lofbergs.se
lofbergs.se
lofbergs.se
en.lofbergs.se
www.lofbergs.se
premierrrg.com
e-academy.lofbergs.se
www.drmanga.com
en.lofbergs.se
vendeur.placeshaker.fr
www.lofbergs.se
lofbergs.se
brewer.lofbergs.se
brewer.lofbergs.se
intranet.lofbergs.se
e-academy.lofbergs.se
en.lofbergs.se
lofbergs.se
e-academy.lofbergs.se
lofbergs.se
e-academy.lofbergs.se
lofbergs.se
administracion.cydocs.cl
intranet.lofbergs.se
www.lofbergs.se
www.lofbergs.se
copyvideopha.lofbergs.se
www.rsaucedo.com
www.lofbergs.se
web.energyview.app
en.lofbergs.se
fikahemma.lofbergs.se
lofbergs.se
e-academy.lofbergs.se
www.lofbergs.se
fikahemma.lofbergs.se
lofbergs.se
lofbergs.se
lofbergs.se

Certificate

The complete raw certificate details for intranet.lofbergs.se in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA50HDz4CQvZEknJJ2PUhm
I6s4VZltDm1TxoiCY4eTlOHf17N86XC+tWw3j/dJ9I/PKqCoNrtGBDThdxZrcERZ
uD8IOdl6rvfe7HIp4IrRUjdG+DANWmIwc1qYr27zQjI579khWNDYq9jQXzSkm5oU
N3MzoA/zU1IIiXcYKo0WnFu7wcX2h3x3TGxFuqE7X/0JXit0T1apqkr/NfQCneua
VwrHXrrkrItOOdAHh9aTjKM9tSOCGgWZZ1XE4mNh4NfVJTjns7C6b+WVqWyhK2kS
VKHliMpeAKBZyKfF2QlZQTuMcJjR0EfIwoKC9eZqfwb0DORdalWco3LyzZ0KMdci
1QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 28187684833193079766509734265907827355
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-10 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'intranet.lofbergs.se'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29193478320622314514455676179625510565068161432261657819175627546670264734550066072751696895438001069857823125424172354075216258438464063936210571553504694103593974698299410070259291281881097511574251014302567526192982079657938377695524158599077425073570578919547992362528531523150121499124630046728807962601375060196569413193990227878544055093803772149598204335332740236775908549690765367567969203931187039162902408635762453932375224533069000922486555872147022232103648472615812308185059856142943925550186994778836663404498415292844732642006561330493850241555307617865506135559402653016186751400721519869722183017173
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							13a4f352a0ad1edb59a369f23797a99816c2fc28
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.lofbergs.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.intranet.lofbergs.se'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							01680076007d3ef2f88fff88556824c2c0ca9e5289792bc50e78097f2e6a9768997e22f0d7000001702f6179e0000004030047304502204a5700e7eb01a435365e04054fe516af433aa04f0d7f6d2597c98281eb971e5c022100afe1dfdda788275c4f6e0c44440331d1b32e95bdee6e6bdb9424b7fa60eafd590077009420bc1e8ed58d6c88731f828b222c0dd1da4d5e6c4f943d61db4e2f584da2c2000001702f617a5c00000403004830460221009fd1090be8397aac316543a5a3e8833116090ff1a513adfbf1e810244a0c9cdc022100e7695dc14d91c594f6b961b69f53ffcf90eb0261ea67ad1cddfd7584d1cb82060075004494652eb0eeceafc44007d8a8fe28c0dae682bed8cb31b53fd33396b5b681a8000001702f6179d00000040300463044022011b9614b46d4461e3232e9a4bdbc70d7f58b2a53caab0b4bd5abef29010f3af802205905b10786bb9bb87a32b0be3d40929c509655baab71214d3e9659da190a666d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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