eenjonkoping.se

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:14:b3:b6:b0:15:5a:1b:a9:17:33:b6:e6:e3:1f:50:8f:1d was issued on by Let's Encrypt.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=eenjonkoping.se

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:14:b3:b6:b0:15:5a:1b:a9:17:33:b6:e6:e3:1f:50:8f:1d
Serial Number (int): 268381385514369031234899898163979260825373
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:7e:cd:36:0f:4d:47:31:2c:6e:f0:e4:c5:6a:54:cc:df:9c:42:6e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 3d:73:6c:6e:61:08:ff:5c:b1:1b:6a:d2:de:f4:ca:60:af:a8:ec:88
Fingerprint (sha256): 37:13:4c:fc:ae:5a:44:18:d0:19:76:18:b1:13:5e:f6:00:3c:ba:07:3d:65:c0:2e:0a:9f:48:67:5c:ce:e4:58

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate eenjonkoping.se

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for eenjonkoping.se

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

b502871.web05.cust.bluerange.se
eengotland.se
eenjonkoping.se
www.eengotland.se
www.eenjonkoping.se

Other certificates including the domain name eenjonkoping.se

(limited to 100 certificates)

Certificate

The complete raw certificate details for eenjonkoping.se in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 268381385514369031234899898163979260825373
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-18 11:22:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-17 11:22:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'eenjonkoping.se'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 911542714833917481963001761551934708855117650523294664346968103987989451732561170559084886058586365815209406422921121122574708917669592383606373859734345657012376294714374650165468822408916102497506427526654455672868318902433916926348397388238298573347673397326511220046822096314776448563616879005857782558880806995726122266677596362277579046200919462341112290871575651152497498179214567544963427763356107050650651959772973220516220774020979171373420179107420808587868444819108602305922942267016178160686047236465657635279143847506250427026758926940118412456246652555613987913017357480264282361631995954706445100347064019033723660599075802520741984733546487734232748249258113578000281453458920042782988649233619693803124746109902892165810604040861611667120501451453190350915688588876672486635136129959876455438118569071398932222842105511798466132865737268044750101695825532955332601600363545799454552626952349236608327654904685464261778188711396012046755719134725903906553368502862072214880289444948809879379931286542210913950502300094841464400502981248864528940752410713183257644462331144814778779005763769753407029897328014537308174898870691086240828251068025819632897560756504897726623943651695971331376083098711731174082881697631
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f7ecd360f4d47312c6ef0e4c56a54ccdf9c426e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (107 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b502871.web05.cust.bluerange.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eengotland.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eenjonkoping.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eengotland.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eenjonkoping.se'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016f18f5ce0900000403004630440220302516a1eee2ff89c0c8d7edfbe5195c1696a84797f4d445d58a15de9fcb944002205d3d3daa68b899e5cdd20ca31637b0fc955de99c7516f4140a1561ee4e1f190200760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016f18f5ce0b000004030047304502204b795eb13337caced0ac698f1160feea1299335381a11be6a75c2925d06bacfb022100af54ed5059163898302c736e2d840a7279e11abc2c93145fffc6ad6646d7c45d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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