webdisk.affseuropa.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:21:a3:d9:0a:e0:d6:7c:ee:42:35:8c:39:b4:e8:ab:24:8f was issued on by Let's Encrypt.

With 20 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=webdisk.affseuropa.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:21:a3:d9:0a:e0:d6:7c:ee:42:35:8c:39:b4:e8:ab:24:8f
Serial Number (int): 359896252947800784489425554197329562248335
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 85:2f:87:2c:b8:c7:57:42:d1:73:92:c0:24:5c:08:42:64:5f:71:c4
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): e2:88:03:40:78:ae:a0:de:87:42:0b:16:e8:51:ef:67:8b:f5:6b:af
Fingerprint (sha256): 49:cf:c4:72:e4:66:1d:84:47:3d:1d:e5:4b:d1:94:cf:d4:92:6b:e7:a4:42:09:65:08:19:2d:60:22:9a:ad:ed

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate webdisk.affseuropa.org

20

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for webdisk.affseuropa.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

affseuropa.affseurope.org
affseuropa.org
cpanel.affseuropa.org
cpanel.enoksnycklar.se
cpcalendars.affseuropa.org
cpcalendars.enoksnycklar.se
cpcontacts.affseuropa.org
cpcontacts.enoksnycklar.se
dutch.affseurope.org
enoksnycklar.se
mail.affseuropa.org
mail.enoksnycklar.se
webdisk.affseuropa.org
webdisk.enoksnycklar.se
webmail.affseuropa.org
webmail.enoksnycklar.se
www.affseuropa.affseurope.org
www.affseuropa.org
www.dutch.affseurope.org
www.enoksnycklar.se

Other certificates including the domain name affseuropa.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for webdisk.affseuropa.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyhCsDOSITYyyFQLmV0R
nMnMReeSQxB+B3ycA7uAH3O2W360iSh/ym95S9T0kZWMC29yqZTiyoK7lPWzqzna
n7f7knEsaYYMRbeBxGYu1WltqCK3X5ZjeF5NiF4YM6aD965KOIgdxZf498K0Aq//
Pv0AQ28GYkZzBcxMUvraQxQuA4Uy32UxyT3o90VblE333m7FoUIVgblRBbbaWNMX
rEww+9GkQUNT4w7qgVDV6N2zPeFc0OlPQ/ixw+ViM9s/aKbD0sMYU/PSFJ7om98n
BdwkQOQCglLKgDuMHiru+qAD26OBzbjmArnAENXHFJyt1YeHxJpTQWfEvXw1PSpk
4QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 359896252947800784489425554197329562248335
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-05 05:48:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-04 05:48:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'webdisk.affseuropa.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23121463001830000280402904470348820520790497408357144741431382083983686327991038694968519388422882136090754812545687622244277651308684347481516177809434376163291959607416822999514527356517459263699184954041251509517444097878135058195419349673670805474162723438451692225917899250338061553579180847311243799283445293336647640945438151740583869682547685467369336639256013060400313800384862336131921262349208381209418849087865468793459650883895407790417599742112727829539710035954102137911554403622534433368844705184101844795346046454935442416100730674586126434816467959526167137807951953691351500973523789714373219083489
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							852f872cb8c75742d17392c0245c0842645f71c4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (484 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'affseuropa.affseurope.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'affseuropa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.affseuropa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.enoksnycklar.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcalendars.affseuropa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcalendars.enoksnycklar.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcontacts.affseuropa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcontacts.enoksnycklar.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dutch.affseurope.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enoksnycklar.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.affseuropa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.enoksnycklar.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.affseuropa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.enoksnycklar.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.affseuropa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.enoksnycklar.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.affseuropa.affseurope.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.affseuropa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dutch.affseurope.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.enoksnycklar.se'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb27300000171491964fd0000040300473045022100a178203d96e30341ed5caa7ab692c5e80121092176a33209511148c338e0d8320220730dd593530a849a8f6424d2c55da80227bcfbd3b39ee2d82b4861998da198a600750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000017149196520000004030046304402204d8ac5157666544c0eda5df10f01005f5672347b1da48bd16c30aedfb532e39902207369d3a974d559f12b0bbc3208dfcd2bf959de0c740a7743bc89fc4bd627b09c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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