stenhusivast.se
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:31:a1:34:31:ee:e9:10:ec:40:9c:c5:4d:2c:2f:8c:84:7a was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=stenhusivast.se
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:31:a1:34:31:ee:e9:10:ec:40:9c:c5:4d:2c:2f:8c:84:7aSerial Number (int): 278224970493931243639249879248073508291706
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 90:d4:64:94:9d:8c:17:5d:0a:5d:08:05:c0:11:c2:86:fe:85:45:0d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 23:d8:09:0c:c6:a5:da:a3:a8:c4:93:15:4d:3d:d7:02:01:4c:ba:f8
Fingerprint (sha256): 2b:cc:e2:84:e5:0a:e2:cb:96:08:09:86:f4:8d:11:82:e5:83:2d:fa:65:4c:6b:c2:7f:d1:e9:ee:45:dc:3b:0a
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate stenhusivast.se
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for stenhusivast.se
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
stenhusivast.se
www.stenhusivast.se
www.stenhusivast.se
Other certificates including the domain name stenhusivast.se
(limited to 100 certificates)
stenhusivast.se
stenhusivast.se
stenhusivast.se
stenhusivast.se
stenhusivast.se
stenhusivast.se
stenhusivast.se
stenhusivast.se
stenhusivast.se
stenhusivast.se
stenhusivast.se
stenhusivast.se
stenhusivast.se
stenhusivast.se
stenhusivast.se
stenhusivast.se
stenhusivast.se
stenhusivast.se
stenhusivast.se
stenhusivast.se
stenhusivast.se
stenhusivast.se
stenhusivast.se
stenhusivast.se
stenhusivast.se
stenhusivast.se
stenhusivast.se
stenhusivast.se
stenhusivast.se
stenhusivast.se
stenhusivast.se
stenhusivast.se
stenhusivast.se
stenhusivast.se
stenhusivast.se
stenhusivast.se
stenhusivast.se
stenhusivast.se
stenhusivast.se
stenhusivast.se
stenhusivast.se
stenhusivast.se
stenhusivast.se
stenhusivast.se
stenhusivast.se
stenhusivast.se
stenhusivast.se
Certificate
The complete raw certificate details for stenhusivast.se in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGFjCCBP6gAwIBAgISAzGhNDHu6RDsQJzFTSwvjIR6MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xNzA5MTcwNTI4MDBaFw0x NzEyMTYwNTI4MDBaMBoxGDAWBgNVBAMTD3N0ZW5odXNpdmFzdC5zZTCCAiIwDQYJ KoZIhvcNAQEBBQADggIPADCCAgoCggIBALzVtK1NU5ccBn7+y0XCh1hvAuMY43nQ buBGP1jXaeAHeqneYs6HpUkmUl/mpkYuDHc8hXoe6JOGjj1EfMktNWI039v9ec+m i18kDplwTWEyjbYJrR+S/+ex3ZrQEdZfHNp5JqO0Hx3qjw9IsdfIfs+tt1cl19x4 1SuZ+fHFr8HpxEd+r1taLZraokviCdgCXmRugM4mgUw9x7S+EAv2aw9vuHjP3HDS jibxYxMPRTTEYmN8eCtcDUA8tOJFqBli+2Il7LblrRMwam/4HK39RpTPH+4MYn+m smNb7zQGRiUuU4RgKyqLxaTs2X/aDQqHimykiaArCSbn0j7XAhDowcvNutkQlYan ymplIa//n5f57X3EIZGCAu0bErcCBEYaZFKaI6UHDgjQeB2CPQ6J6CmBio26kdVX gQHkgcvjxb2tpC60n9MDlwpGn+6MRo0c8sOHBTvluBR5fIc7pfFBW1LPtJKwCpdw ndt7YeIJvMZ1nVHMo2BP/zyd5OkRw5PPwQCNI9x5V/XCIp4uAt6GYbsRzCyw20DC fIjQ300uJNOA+aVgjmOqEVDyr8RS6xFyDGv73vuODKO5xG9mWHtvg0dYL+xJhbJO ykbqPjbn6FwHpB4EWldFjWT12a/Ayqb19MV6hJm3i07xCdDrME3p+W/dEzuqy0xu nB0XCQBZp/+tAgMBAAGjggIkMIICIDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYw FAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFJDU ZJSdjBddCl0IBcARwob+hUUNMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/z qOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50 LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50 LXgzLmxldHNlbmNyeXB0Lm9yZy8wLwYDVR0RBCgwJoIPc3Rlbmh1c2l2YXN0LnNl ghN3d3cuc3Rlbmh1c2l2YXN0LnNlMIH+BgNVHSAEgfYwgfMwCAYGZ4EMAQIBMIHm BgsrBgEEAYLfEwEBATCB1jAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5j cnlwdC5vcmcwgasGCCsGAQUFBwICMIGeDIGbVGhpcyBDZXJ0aWZpY2F0ZSBtYXkg b25seSBiZSByZWxpZWQgdXBvbiBieSBSZWx5aW5nIFBhcnRpZXMgYW5kIG9ubHkg aW4gYWNjb3JkYW5jZSB3aXRoIHRoZSBDZXJ0aWZpY2F0ZSBQb2xpY3kgZm91bmQg YXQgaHR0cHM6Ly9sZXRzZW5jcnlwdC5vcmcvcmVwb3NpdG9yeS8wDQYJKoZIhvcN AQELBQADggEBAGLP7N1YVucdNoz8ywKldwqJSxNk0ev06RQf6VKKwy6dIHx5s01r 98h06BjDwQfWKtKXEuOVSbmEvBiU4Y6kZZlPowlkuxFN4/7PwNmJqh3zsVODq3ZV F6oCN4j6wCQ11pevmS9o9DXx9exSRB1ab9qTWAUkQdzcLa0m4URlb78DOwX/BKdV TdJBoy6mxZGuFVp2aayKeoWLum+3uLdJvGOXhz290/5mSh87PAQzr1Q/G7AH9NOc NAHBOwxZkdRKAr0fEgMAEul7pHGW4uht0Q9ko6+GUH1zGm6R6wGJUPCRMyhIHs4S ZuFcAGSLsmjZeLtCTctLlxFwKCMph+BFX50= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAvNW0rU1TlxwGfv7LRcKH WG8C4xjjedBu4EY/WNdp4Ad6qd5izoelSSZSX+amRi4MdzyFeh7ok4aOPUR8yS01 YjTf2/15z6aLXyQOmXBNYTKNtgmtH5L/57HdmtAR1l8c2nkmo7QfHeqPD0ix18h+ z623VyXX3HjVK5n58cWvwenER36vW1otmtqiS+IJ2AJeZG6AziaBTD3HtL4QC/Zr D2+4eM/ccNKOJvFjEw9FNMRiY3x4K1wNQDy04kWoGWL7YiXstuWtEzBqb/gcrf1G lM8f7gxif6ayY1vvNAZGJS5ThGArKovFpOzZf9oNCoeKbKSJoCsJJufSPtcCEOjB y8262RCVhqfKamUhr/+fl/ntfcQhkYIC7RsStwIERhpkUpojpQcOCNB4HYI9Dono KYGKjbqR1VeBAeSBy+PFva2kLrSf0wOXCkaf7oxGjRzyw4cFO+W4FHl8hzul8UFb Us+0krAKl3Cd23th4gm8xnWdUcyjYE//PJ3k6RHDk8/BAI0j3HlX9cIini4C3oZh uxHMLLDbQMJ8iNDfTS4k04D5pWCOY6oRUPKvxFLrEXIMa/ve+44Mo7nEb2ZYe2+D R1gv7EmFsk7KRuo+NufoXAekHgRaV0WNZPXZr8DKpvX0xXqEmbeLTvEJ0OswTen5 b90TO6rLTG6cHRcJAFmn/60CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 278224970493931243639249879248073508291706 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-09-17 05:28:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-12-16 05:28:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'stenhusivast.se' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 770378723359466950351819799476501431067928523071644006970826774042502356347091355503045789242509284463012871772903949268950409419040372977067993007327578570565736307082630183892881302608706452526341813679136593216610484698183640671022649205142329006530707798030311924500854012962338243411607304428061679102936675657665671602594517736380081585243619348396415539644198592622327047031168666484067292329723260705725048116401210164798600929171358145608672905734193646212868756537286828784842932447533277591900132387383652400915710212190098029045524896783184475966531882618571866496885600342416266031630431087620266918992891808178323533274206165983502019863581689867216891666966465178056116621033759066025136180680432977258361697035948277128753848623819177097818856277817010072537786998539887069626611667831972485552472973817933743985732565219253573793283853273837371604772229909634563213185956144182877765666125899420916447124283507504766095121539092793534477671620862151799104063798358380791837884458131427348019843669932274800779007332186335568987467371286862732615775037765345025926493725607322430708957572501497726322955470813862512659035189972478658432071382833040991517673257169872204200072263306465464909276236512156062983836401581 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 90d464949d8c175d0a5d0805c011c286fe85450d . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stenhusivast.se' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stenhusivast.se' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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