mmd.cbs.dk

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:e5:50:62:8b:e7:40:c3:14:ac:76:72:7d:c6:35:35:dc:d6 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mmd.cbs.dk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e5:50:62:8b:e7:40:c3:14:ac:76:72:7d:c6:35:35:dc:d6
Serial Number (int): 339368369742507261083093730673404650314966
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: be:48:cb:16:30:af:b2:72:fd:ce:54:52:57:d1:ff:e6:58:b3:f8:9f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 36:87:4f:aa:20:5a:05:fb:65:fd:09:db:81:94:ea:fc:67:48:8c:92
Fingerprint (sha256): 2c:f8:43:40:9e:8d:43:e4:58:aa:f5:e0:48:ae:1f:33:ec:a0:b9:1f:c7:a4:00:e9:4c:1b:2c:81:45:2a:d4:66

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate mmd.cbs.dk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mmd.cbs.dk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mmd.cbs.dk

Other certificates including the domain name cbs.dk

(limited to 100 certificates)
mmd.cbs.dk
graduateland.com
hd.cbs.dk
hd.cbs.dk
demo.mystudy.fit
libguides.cbs.dk
tlf-cucm-prd-10.tlf.cbs.dk
research.cbs.dk
tlf-web-prd-25.tlf.cbs.dk
graduateland.com
demo.mystudy.fit
www.service.cbs.dk
impact.cbs.dk
graduateland.com
careergate.sh.se
radiator.cbs.dk
careerland.dk
mpg.cbs.dk
careergate.sh.se
kursuskatalog.cbs.dk
libguides.cbs.dk
hd.cbs.dk
bluesocket2.cbs.dk
graduateland.com
tlf-cuc-prd-20.tlf.cbs.dk
mpg.cbs.dk
mail.cbs.dk
cse.cbs.dk
libguides.cbs.dk
help.student.cbs.dk
mbd.cbs.dk
graduateland.com
graduateland.com
tlf-uccx-prd-10.tlf.cbs.dk
graduateland.com
graduateland.com
demo.mystudy.fit
kursuskatalog.cbs.dk
studieliv.cbs.dk
hd.cbs.dk
libguides.cbs.dk
*.cbs.dk
graduateland.com
webdesk.oefu.cbs.dk
graduateland.com
hd.cbs.dk
flow.cbs.dk
career.cphbusiness.dk
graduateland.com
hd.cbs.dk
mmd.cbs.dk
career.cphbusiness.dk
hd.cbs.dk
cast.cbs.dk
mbd.cbs.dk
mpg.cbs.dk
mmd.cbs.dk
*.esc-web.lib.cbs.dk
demo.mystudy.fit
*.cbs.dk
*.cbs.dk
studieordninger.cbs.dk
cse.cbs.dk
mpg.cbs.dk
sgs.mic.cbs.dk
graduateland.com
impact.cbs.dk
impact.cbs.dk
careerland.dk
*.cbs.dk
res.docshare.cbs.dk
*.docshare.cbs.dk
graduateland.com
tlf-cucm-prd-10.tlf.cbs.dk
rh.cbs.dk
studieliv.cbs.dk
*.docarchive.cbs.dk
ocspool01.hhk.dk
radiator.cbs.dk
studieliv.cbs.dk
careerland.dk
cse.cbs.dk
career.cphbusiness.dk
mbd.cbs.dk
mbd.cbs.dk
hd.cbs.dk
studieliv.cbs.dk
libguides.cbs.dk
mmd.cbs.dk
eksamen.cbs.dk
eksamen.cbs.dk
help.student.cbs.dk
*.cbs.dk
studieliv.cbs.dk
mmd.cbs.dk
kursuskatalog.cbs.dk
kursuskatalog.cbs.dk
mmd.cbs.dk
webaccess.cbs.dk
graduateland.com

Certificate

The complete raw certificate details for mmd.cbs.dk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 339368369742507261083093730673404650314966
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-22 01:05:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-20 01:05:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mmd.cbs.dk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 845021120049038836939289101002239844971344508079461640651806723848351692326113527039692500509515196716387961066141696574243402433191220246149161785081880662333730173216207057146297612882551246771304032390063388722885482905765910809856105307285235010735699384853297849030876189008831105291934627836583719166575218634023237694656349775113486116111625853829674155467617862093173087517827580450878014201550482863801180485129636248340595623170605440418706062339507647578167590638269371253457696390580390704507705591402322530332678089782603183872139000731596949574244010350212806837323543174651166323147692032017374983780425303031923677777058522704052522651970066033571835557156761660864323449850242942166645106359026672307798775702766625779918478060735556868325618159657300121067690220243306435251221901406562785302028366500735762386317459126305448109595207443695010800540225957896928416264836403889297476508433782888487981426848774865645170492513302580784514994231559580098088569754274406187077962991873990283815307451072867404641210134143757701062444714485115736482133910122817481337111426003022808822300503572764930831148715275134455942788828620631780821545548294651130630521805496712958758794326749042089094114433359228491935979796749
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							be48cb1630afb272fdce545257d1ffe658b3f89f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mmd.cbs.dk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016add4960e6000004030047304502206aaf17d96c078db293731ff77a6b8467912d293c827126c0be75764ba7ee895a022100d592e67d978327cb47efc39e919c2625c97941499a6cac3e2c7fbd1b4249644e007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016add4962c0000004030047304502200b266062a92331be1ef96f646e9cfb9b0b8511e12d262a39cc1ddb44b0b61ccf022100ca476fecb0d7c829ca849b4e8469657a656e28f5417c801cf19be5c0112dd53e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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