secure.jfmedier.dk

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:ec:b4:33:cc:65:31:6f:95:08:5d:26:6d:21:23:07:36:da was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=secure.jfmedier.dk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:ec:b4:33:cc:65:31:6f:95:08:5d:26:6d:21:23:07:36:da
Serial Number (int): 428995312312392437316099325477034851251930
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: d4:98:64:ab:d5:01:21:38:e3:97:58:62:15:a0:ea:22:dd:dc:13:29
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 84:bd:45:1a:aa:c9:f7:aa:83:e8:5d:73:bb:db:e9:f3:72:41:34:e9
Fingerprint (sha256): 29:7e:3c:1f:e2:4f:4e:be:d6:3d:51:43:c4:39:1b:5f:0b:99:ed:1a:d5:20:08:f8:42:48:4c:8a:cf:c1:c3:ab

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate secure.jfmedier.dk

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for secure.jfmedier.dk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

jourbox.dk
secure.jfmedier.dk
www.jv.dk

Other certificates including the domain name jfmedier.dk

(limited to 100 certificates)
jfmedier.dk
secure.jfmedier.dk
secure.jfmedier.dk
dns-vetting1d.map.fastly.net
redirect2.jfmedier.dk
secure.jfmedier.dk
dns-vetting1d.map.fastly.net
bestyrelsesvalg.jfmedier.dk
dns-vetting1d.map.fastly.net
secure.jfmedier.dk
secure.jfmedier.dk
twentythree.net
dns-vetting1d.map.fastly.net
avis.jfmedier.dk
secure.jfmedier.dk
production.jfmedier.dk
redaktion.jfmedier.dk
secure.jfmedier.dk
twentythree.net
twentythree.net
dns-vetting1d.map.fastly.net
dns-vetting1d.map.fastly.net
dns-vetting1d.map.fastly.net
twentythree.net
dns-vetting1d.map.fastly.net
dns-vetting1d.map.fastly.net
production.jfmedier.dk
twentythree.net
dns-vetting1d.map.fastly.net
secure.jfmedier.dk
dns-vetting1d.map.fastly.net
twentythree.net
dns-vetting1d.map.fastly.net
secure.jfmedier.dk
secure.jfmedier.dk
twentythree.net
redaktion.jfmedier.dk
twentythree.net
redaktion.jfmedier.dk
dns-vetting1d.map.fastly.net
redaktion.jfmedier.dk
dns-vetting1d.map.fastly.net
twentythree.net
jfmedier.dk
*.jfmedier.dk
secure.jfmedier.dk
*.ping.jfmedier.dk
dns-vetting1d.map.fastly.net
twentythree.net
redaktion.jfmedier.dk
dns-vetting1d.map.fastly.net
twentythree.net
secure.jfmedier.dk
dns-vetting1d.map.fastly.net
twentythree.net
redirect.jfmedier.dk
twentythree.net
dns-vetting1d.map.fastly.net
twentythree.net
dns-vetting1d.map.fastly.net
jfmedier.dk
redaktion.jfmedier.dk
dns-vetting1d.map.fastly.net
twentythree.net
secure.jfmedier.dk
twentythree.net
dns-vetting1d.map.fastly.net
redaktion.jfmedier.dk
twentythree.net
redirect2.jfmedier.dk
jfmedier.dk
intern.jfmedier.dk
sip.jfmedier.dk
secure.jfmedier.dk
jfmcrosscai.jfmedier.dk
redaktion.jfmedier.dk
twentythree.net
twentythree.net
secure.jfmedier.dk
secure.jfmedier.dk
dns-vetting1d.map.fastly.net
twentythree.net
secure.jfmedier.dk
secure.jfmedier.dk
dns-vetting1d.map.fastly.net
twentythree.net
dns-vetting1d.map.fastly.net
redirect.jfmedier.dk
redaktion.jfmedier.dk
secure.jfmedier.dk
dns-vetting1d.map.fastly.net
secure.jfmedier.dk
redaktion.jfmedier.dk
dns-vetting1d.map.fastly.net
twentythree.net
secure.jfmedier.dk
twentythree.net
redaktion.jfmedier.dk
twentythree.net
dns-vetting1d.map.fastly.net

Certificate

The complete raw certificate details for secure.jfmedier.dk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 428995312312392437316099325477034851251930
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-08-02 11:42:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-31 11:42:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'secure.jfmedier.dk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 960164993083180610826812331524293641144566423920596337789925467310765663835935366310085349904470363250573856708457063658033570544552827928906433049847835491422335745931268627023763839974713451110824306541507446383228646476225359291329952972616463981110404795794558823253864075955966742133023418594765671988270559610619443944564307855787339554152144631676121275824251067313479211505950719856051099292986165470067461548682260660984848543109831085674036920348485914155924698267284163877942812852495482535255782844998283177734879307163893302667913100895627538008246732878649978554524295251880796364525634481112544069960824102631749158056225903605321487158707690595606832903722991115838484064699023418659389321525481054920128438969099228235966976045947177200885617806111759004205862126251403158335624345473544463582202208256844970029605680517483597203717608900425815876981151013357201672283829514075159972961414104318842288892392618058259001966457464027562471861798992619849550880078569607542431942851731950869060691335295223492961484494317973336925945739249210519766612501776926104203465530101010322436701173166296019180802735872765186264845759643478007364997069158585157156865230703081159905486249549029090318048430020174857163363201621
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d49864abd5012138e397586215a0ea22dddc1329
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (45 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jourbox.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.jfmedier.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jv.dk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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