framtiden.hh.se

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ee:bb:b9:ee:ca:12:d7:9c:16:7e:30:9a:80:2e:d7:01:c1 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=framtiden.hh.se

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ee:bb:b9:ee:ca:12:d7:9c:16:7e:30:9a:80:2e:d7:01:c1
Serial Number (int): 342573592175818108338810196223112699642305
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ee:93:05:f7:5c:f5:85:2d:26:80:38:81:bd:53:a9:eb:f1:4d:f9:66
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 69:55:d4:ed:a3:b0:5a:2f:a2:38:0d:d1:13:ab:bd:0d:8b:32:25:70
Fingerprint (sha256): 3a:fd:a9:6a:e7:c4:45:15:2f:3f:e5:db:8a:ae:9f:ef:dd:0a:e1:57:86:b0:f2:91:1c:fb:da:05:62:f3:62:17

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate framtiden.hh.se

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for framtiden.hh.se

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

framtiden.hh.se

Other certificates including the domain name hh.se

(limited to 100 certificates)
primula.hh.se
www.hh.se
r2s.hh.se
graduateland.com
motvinden.karen.hh.se
mail.student.hh.se
myfiles.hh.se
klara.hh.se
utbildning.hh.se
wwwutv.hh.se
bidaf.hh.se
*.ddi.hh.se
*.itewebb.hh.se
framtidensklassrum.hh.se
graduateland.com
bb-test.hh.se
media-it.hh.se
primula.hh.se
sp2016-utv.hh.se
graduateland.com
primula.hh.se
careerland.dk
biblasso.hh.se
primula.hh.se
account-utv.hh.se
fs.hh.se
graduateland.com
motvinden.karen.hh.se
media-it.hh.se
bibfm14.hh.se
biblasso.hh.se
dokumentarkiv.hh.se
ideweb2.hh.se
framtiden.hh.se
api.itscan.hh.se
medlem.karen.hh.se
karen.hh.se
secure.montania.se
karen.hh.se
myfiles.student.hh.se
graduateland.com
graduateland.com
graduateland.com
primula.hh.se
*.ezproxy.bib.hh.se
blogg.hh.se
graduateland.com
secure.ageramedlem.se
karen.hh.se
ratatosk.hh.se
secure.montania.se
dmponline.dcc.ac.uk
medlem.karen.hh.se
kursinfo.hh.se
v3.api.staff.hh.se
media-it.hh.se
signon.hh.se
wiki.hh.se
ostrom.hh.se
lab-sp2012.hh.se
test-tentaadmin.hh.se
graduateland.com
idecampus.hh.se
motvinden.karen.hh.se
mail.student.hh.se
admin.kalendarium.hh.se
bb-test.hh.se
motvinden.karen.hh.se
bb.hh.se
mailadmin.nollning.nu
utbildning.utv.hh.se
admin.blackboard.webbutv.hh.se
*.ezproxy.bib.hh.se
libguides.hh.se
myip.hh.se
ite14361.hh.se
career.cphbusiness.dk
graduateland.com
*.ddi.hh.se
libguides.hh.se
career.cphbusiness.dk
dspace.hh.se
mail.hh.se
karen.hh.se
idp.hh.se
career.cphbusiness.dk
wsus2021.hh.se
kaltura-test.hh.se
api.staff.hh.se
filemaker13.hh.se
secure.montania.se
bb-test.hh.se
wwwutv.hh.se
karen.hh.se
myfiles.hh.se
gate01.hh.se
test-tentaadmin.hh.se
textbearbetningskurs.hh.se
kursinfo.hh.se
*.ddi.hh.se

Certificate

The complete raw certificate details for framtiden.hh.se in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 342573592175818108338810196223112699642305
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-12 03:51:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-12 03:51:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'framtiden.hh.se'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 758217414695851290296568337877867219790377829931898279886796808953020523020997566636905662917079497822907448172354072303582829498034212332981228308580107803789811803631805615072553399196007689157123324938171241357470682153747692951377329819767424849118036548829226652635466698886178733799600915941336484155012996615477744423081051538092317026627234006414554405900671086226711376733717060916268471838037288979900750199168749628816120136804044695304672831633573941631325828023179747335203743179742478388450480606684648964785271485512670387675762684772934085471989151375743279294895023554899510532283461162555104487658397901919279349750505505708071418470701006992408849574042984780171548978090803653378293129449131201507881827929830885839792028405087799372192811052288409054035976280534076788738180416839567154044848962385747162200960790640689495360584371267853743061431642837340649521754043211708988533304716833589410450337537362373510657968002358437806178820527674537902799040099664742554619127096082307235944336773790737903281859513075027646646095395276302374650232477867765140612886034334171055425769672855814063767165220986738687910876011401208532463863220296885602636887237475388346815335885691809675211898021223456412175783634951
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ee9305f75cf5852d26803881bd53a9ebf14df966
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'framtiden.hh.se'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000168406689dc0000040300463044022023561362aff4534c91489e18aae44e7f6fe1eb47ea885c4ded0fcdc176a9354e02201fa455f815523c0374d7e388a8a0fc3b83a7d96c3b0fd2800d1dcfcbc3cd761e007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000168406689de00000403004830460221009fbb57574b536f460c55ef7844e27fa0e21f67c9effd1ffdee8dbf5c5dc60ada022100b04694a3dcc8d8eb490505ccbf907b36706380454787c41eecf33bd447e2e32b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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