konto.swarm.extern.ochsavidare.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:a5:e2:0f:bd:c8:75:b2:aa:41:00:9b:4b:5a:50:23:43:62 was issued on by Let's Encrypt.

With 14 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=konto.swarm.extern.ochsavidare.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a5:e2:0f:bd:c8:75:b2:aa:41:00:9b:4b:5a:50:23:43:62
Serial Number (int): 317783935597993328752984147672784678634338
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 84:0f:00:ee:ac:55:34:30:2d:14:3f:32:03:63:93:ad:27:e2:ca:10
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): f2:ce:a3:58:88:36:6f:62:df:b6:de:f0:1d:cd:bc:44:3e:11:e1:e1
Fingerprint (sha256): 34:83:9d:6f:0e:bd:33:be:9f:6e:a7:95:d9:e4:8c:47:0c:39:89:e3:56:19:90:f7:6e:86:c4:ac:09:5a:69:86

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate konto.swarm.extern.ochsavidare.com

14

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for konto.swarm.extern.ochsavidare.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ada.extern.ochsavidare.com
alexandra.extern.ochsavidare.com
bettyapplication.extern.ochsavidare.com
bettyserver.extern.ochsavidare.com
graceapplication.extern.ochsavidare.com
graceauthserver.extern.ochsavidare.com
graceresourceserver.extern.ochsavidare.com
konto.etc.se
konto.extern.ochsavidare.com
konto.swarm.extern.ochsavidare.com
play.etc.se
play.extern.ochsavidare.com
play.swarm.extern.ochsavidare.com
portainer.extern.ochsavidare.com

Other certificates including the domain name ochsavidare.com

(limited to 100 certificates)
blogg3.extern.ochsavidare.com
jira.ochsavidare.com
konto.swarm.extern.ochsavidare.com
play.ochsavidare.com
jira.ochsavidare.com
jira.ochsavidare.com
feature.publisher.ochsavidare.com
jira.ochsavidare.com
konto.swarm.extern.ochsavidare.com
jira.ochsavidare.com
feature.publisher.ochsavidare.com
bygg.extern.ochsavidare.com
jira.ochsavidare.com
feature.publisher.ochsavidare.com
jira.ochsavidare.com
feature.publisher.ochsavidare.com
jira.ochsavidare.com
jira.ochsavidare.com
feature.publisher.ochsavidare.com
feature.publisher.ochsavidare.com
feature.publisher.ochsavidare.com
bygg.extern.ochsavidare.com
jira.ochsavidare.com
bygg.extern.ochsavidare.com
play.ochsavidare.com
jira.ochsavidare.com
blogg3.extern.ochsavidare.com
konto.swarm.extern.ochsavidare.com
konto.etc.se
feature.publisher.ochsavidare.com
blogg3.extern.ochsavidare.com
superdesk.ochsavidare.com
konto.etc.se
konto.swarm.extern.ochsavidare.com
jira.ochsavidare.com
feature.publisher.ochsavidare.com
feature.publisher.ochsavidare.com
blogg3.extern.ochsavidare.com
blogg3.extern.ochsavidare.com
blogg3.extern.ochsavidare.com
bygg.extern.ochsavidare.com
feature.publisher.ochsavidare.com
blogg3.extern.ochsavidare.com
blogg3.extern.ochsavidare.com

Certificate

The complete raw certificate details for konto.swarm.extern.ochsavidare.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxpepazyZxTOf4deCs7Sm
zzSl0w9URtDaYjTR+Yuc8TxBcEUnnQt5lCDSyKPu2+SDpNJnaeLp9mLGhYk3LI/m
vmw3yUga115c/Epm8/C0N5TTIT6RqMK9EKRJ8CI0/2ZxmZUPCaEihjEiNytt67vA
EiGQQIqvPijT35Mf7VIywyRR8r64PIoUN1XeDxZVNpU0h7fkX0f1lWq+sFNgqXpv
D61bAfHsTPCZ0Gdh2aFdDtE7UmIMoutUVfQxHNNb0PzQ4cbdytNBRnVP0f5wNAot
TKDzcKCCUijt6Snli4pK0jt4ckiFfeBHCDt88e14OnNJTuw07uoxvUeTGjTLpwj+
LwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 317783935597993328752984147672784678634338
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-21 06:18:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-19 06:18:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'konto.swarm.extern.ochsavidare.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25069971600545009469942477073708825122288202000271777711796130930256149878592275167089393430526514359503635312362262594333519367354837234347030517537474428566912398618862002386440787757222570650288760919877073387178445977069498105036170205657028739432445231371893512944577962012526100413998566969193565907283067151972959068157200991798624535387512262109317439033289082255135473403415944571605710614792418361335804901377862231783811736341039964086769363050851579717151715399303108298468956468830064732032943508150879149645554958729650922550739079402086954624873985879150969284197223713306987753228148688486285798080047
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							840f00eeac5534302d143f32036393ad27e2ca10
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (459 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ada.extern.ochsavidare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alexandra.extern.ochsavidare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bettyapplication.extern.ochsavidare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bettyserver.extern.ochsavidare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graceapplication.extern.ochsavidare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graceauthserver.extern.ochsavidare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graceresourceserver.extern.ochsavidare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'konto.etc.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'konto.extern.ochsavidare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'konto.swarm.extern.ochsavidare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'play.etc.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'play.extern.ochsavidare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'play.swarm.extern.ochsavidare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portainer.extern.ochsavidare.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001655b5978ea0000040300483046022100e105a67bc1ddb2171e83992e796bc2f3bd803f3549c1ccfc4f35abf757ae60e6022100edf5d2ac814ebb87cc2b8531d35f84690143fce89049bcc1de7e0620649dcbe30077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001655b59791b0000040300483046022100b278636f229d5936a077aa034d5663bfdc7d2c41232889c2be229ecfc25a555a02210090fdefa6f2b1db5fb7039f3ff841f48b1846f612aed0c045137f9e7fe533c99c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		003d16417555c4ae15067d66f834d2d33953bd72350d11d19103b16a17a8e711f3e57fdbefe4c9768e238fd22a45f5d88b72d4582df704e9ca79e96317fcd2fa3061caae018c016ceb3b0151bc25ea226cd9c4b347c03aab52e5745da1129212f8e2f0c092cf5a67ae0228c6307f0f2def3529f4b65a14b5c7ed8d285132dd6b488c104721a01daddaa41b65bade6e2bb35ec6d0fa0a3378d0d0972a63653163a7af9c91dd40eae1d3425fd187a77699047fdfff32c66727d4f6667bb13181d886c892c04f76424764184b5c1fdc2a1f4da70c90c76b05c4ee21eb6ef0e9c4e68ed60a8c5a869c7806d8eef1d9f04962921a9b3376ce506460dcc4ba5a1c600fc5