mpg.cbs.dk

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:0e:55:60:b4:34:48:9d:a6:55:f0:28:8a:3c:e9:43:4e:70 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mpg.cbs.dk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:0e:55:60:b4:34:48:9d:a6:55:f0:28:8a:3c:e9:43:4e:70
Serial Number (int): 266214297427290082236609458382701110447728
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a9:28:1b:92:ea:05:af:fc:9a:e0:29:14:05:6d:31:7a:97:87:43:39
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 8e:e4:01:61:96:31:88:7e:30:dc:93:cf:3c:de:ed:50:6b:51:f3:f7
Fingerprint (sha256): 3a:01:eb:41:bb:54:b3:04:b1:af:3d:e5:6b:d0:27:46:56:7d:00:f3:4b:64:6b:73:6b:b9:b8:fa:9d:a3:11:48

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate mpg.cbs.dk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mpg.cbs.dk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mpg.cbs.dk

Other certificates including the domain name cbs.dk

(limited to 100 certificates)
mmd.cbs.dk
graduateland.com
hd.cbs.dk
hd.cbs.dk
demo.mystudy.fit
libguides.cbs.dk
tlf-cucm-prd-10.tlf.cbs.dk
research.cbs.dk
tlf-web-prd-25.tlf.cbs.dk
graduateland.com
demo.mystudy.fit
www.service.cbs.dk
impact.cbs.dk
graduateland.com
careergate.sh.se
radiator.cbs.dk
careerland.dk
mpg.cbs.dk
careergate.sh.se
kursuskatalog.cbs.dk
libguides.cbs.dk
hd.cbs.dk
bluesocket2.cbs.dk
graduateland.com
tlf-cuc-prd-20.tlf.cbs.dk
mpg.cbs.dk
mail.cbs.dk
cse.cbs.dk
libguides.cbs.dk
help.student.cbs.dk
mbd.cbs.dk
graduateland.com
graduateland.com
tlf-uccx-prd-10.tlf.cbs.dk
graduateland.com
graduateland.com
demo.mystudy.fit
kursuskatalog.cbs.dk
studieliv.cbs.dk
hd.cbs.dk
libguides.cbs.dk
*.cbs.dk
graduateland.com
webdesk.oefu.cbs.dk
graduateland.com
hd.cbs.dk
flow.cbs.dk
career.cphbusiness.dk
graduateland.com
hd.cbs.dk
mmd.cbs.dk
career.cphbusiness.dk
hd.cbs.dk
cast.cbs.dk
mbd.cbs.dk
mpg.cbs.dk
mmd.cbs.dk
*.esc-web.lib.cbs.dk
demo.mystudy.fit
*.cbs.dk
*.cbs.dk
studieordninger.cbs.dk
cse.cbs.dk
mpg.cbs.dk
sgs.mic.cbs.dk
graduateland.com
impact.cbs.dk
impact.cbs.dk
careerland.dk
*.cbs.dk
res.docshare.cbs.dk
*.docshare.cbs.dk
graduateland.com
tlf-cucm-prd-10.tlf.cbs.dk
rh.cbs.dk
studieliv.cbs.dk
*.docarchive.cbs.dk
ocspool01.hhk.dk
radiator.cbs.dk
studieliv.cbs.dk
careerland.dk
cse.cbs.dk
career.cphbusiness.dk
mbd.cbs.dk
mbd.cbs.dk
hd.cbs.dk
studieliv.cbs.dk
libguides.cbs.dk
mmd.cbs.dk
eksamen.cbs.dk
eksamen.cbs.dk
help.student.cbs.dk
*.cbs.dk
studieliv.cbs.dk
mmd.cbs.dk
kursuskatalog.cbs.dk
kursuskatalog.cbs.dk
mmd.cbs.dk
webaccess.cbs.dk
graduateland.com

Certificate

The complete raw certificate details for mpg.cbs.dk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAxu473OOK9SBgBCsuOS/F
Rv1ah0WRxQm9RL8dEBTC+ppRqlHcMN3YW+jPCJpcVX1FOoBB/WlVjjPKQgrq8HHY
F1NZfMvO31B0E2sS5u8isy8G2F2tiFan835VYr6Boqer4xT4PPhtQo1zDyyakR/O
IKELhh3oCZHnl8KqaCaHqixv+lEcz3fyteY2H5VKFPXBk41wEQ3gM40+ZH4Wb8Xm
iteFyXkHPbnls8pA+bUPVDoc0ye2cm8eOIz36kKth1h0kjw4KEQ4pprzDb09PJUz
o8z5bnPYRfH4RwOOMJOIeESn9+mUjCefRkL/2OGIMT5DUkzTXl0VGpYoHDtQry/v
dXMuD69yeWp+bEDSSf0YnzQp1Y0YbdsoZkBPhHrfAK72bTBV1LO/HfHihRr//uYp
TfndGcg/pSf+2q23w3GK6Jn8OG2tjC8Bd6D2u6jHC8zWmOMz8l5Dp+gCaXHNxpD4
rEf5YqaYqhpvCDd0J5GTfWXlgzG940F4tOBYzWELQSyIwNgTRY15UyMSDZilaTHd
v+UvF0Yl8K/QE0K35ZkxocRqpu0ANQ73N9vDkMdfLt6+K5iBwF9xdg9B65PGRZ9J
lvijxjhZGfzJ2zNXZfcRzQGoHLtnuzzBri29VuSVUwpGK73bBjDteGRsbwgEJZ3y
DDxUTNwxAvN7+BmL8Ex1bzsCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 266214297427290082236609458382701110447728
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-19 16:51:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-17 16:51:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mpg.cbs.dk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 811566046050338373220364432263234245528189384208011508787163266839860073889115420708245406196907948722233922217268915291342724750001679309383862283777787080956356129173140197524871372870620534389707924254340218660485568454541803533907385011364733531059374671087700856917628504195055798386005250513561595918398750673440919011669283571106557880978047786819074534340193156942634924929416947735659244632290807414410901914101302033154843015147226170380299937834947356057698477783164413779777889288978166916476408432839021576445126899841627178096457831770365491314772056685225967727235817853519382313246070517863486862371689169106472425195703651658204152444801659394527949531169042385691662199530665628912920979967481579415504821301394952345314780915661253229222274386083973450752426831530521572633603984876762575729506852296953574279501325070696359939246251903943880711675635151149915744780287097579906588966652593364314998162201417687417479149027923902708068656372283426197140593514275340193018184463211683393945972317214465032102280968002867459790959707384366850344284199812508364418357241739657697431603144557145114738132828250533280520112294763718729523062446914897522935639561974665121571464974554038582200622783711433097812924264251
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a9281b92ea05affc9ae02914056d317a97874339
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mpg.cbs.dk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016c0b5c5af40000040300483046022100e6baedfa39dcbb92d8ebafcd297b0cf3e4a5be36579c71726acdc882c49f1cef022100d57fbad5409cac3e8a121e4929939296955ded8274590c1aa21d67053832009200770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016c0b5c5b110000040300483046022100a8f723466dc8cb87594199c63204de1947014c5f15582a61434b35912c22f090022100d87f5962632b9278bce0584855bff120e98b8acd37a564a08d5469e7dd2e7ebb
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		009297e99b41a14d8bf0f6b0ab4a9a2e096bb05c79de98fb0afe5532feff8231b84c89cb8809b0d5df01f76c2826c836756dada3d85aa12a1f20f76a1970233f12db749be5f07644f4de166ba5505289a4ce6055d4e88c776fb1d4a5cf3c43fe877af21554b39ec5d5db283fc40a3662e0d9c63103828345b4e2be45c383b708eb82f5075027edc12e8ffc5063f9d5b69df2695e3661f9c76684eb0764a91e9491af563f8b3d1dbd4d01df43ea4338b9d485e03a52ba5255c22f98e9cc48fc64e47f961e3821ef0fec78b9443e57552088018b437b1cef8225350fde12141c12816df70a01d6483ee15e673e68c84c555a0c0ba5d5b83599c72b7bdec69e3a5ef3