www.laxhjalponline.se

Issued by R3

About this certificate

This digital certificate with serial number 04:c2:e3:5c:23:ac:d2:97:e1:49:1e:4e:29:1e:f1:d9:d7:23 was issued on by Let's Encrypt.

With 11 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.laxhjalponline.se

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:c2:e3:5c:23:ac:d2:97:e1:49:1e:4e:29:1e:f1:d9:d7:23
Serial Number (int): 414766136079633965149685690729053722105635
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 85:4b:72:71:56:57:5a:65:fc:3e:11:98:84:f8:e1:c3:23:2b:c4:d1
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 1e:a9:c4:f5:ea:02:9b:d0:fc:af:5b:67:f2:3d:7c:94:08:eb:ac:02
Fingerprint (sha256): 52:f6:2b:4e:85:13:b5:a7:06:cc:84:f4:4e:95:ee:ba:5c:aa:60:30:16:89:c5:20:a3:3e:78:7e:cb:b3:51:f4

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.laxhjalponline.se

11

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.laxhjalponline.se

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

iris-frontend.iris.app.iterate.no
iris-frontend.iris.g2.iterate.no
jourhavande-kompis-chat.rkuf.se
laxhjalponline.se
ny.laxhjalponline.se
prod.iris-frontend.iris.iterate.iterapp.no
tenant1.iris.app.iterate.no
tenant2.iris.app.iterate.no
www.laxhjalponline.se
www.xn--lxhjlponline-gcbd.se
xn--lxhjlponline-gcbd.se

Other certificates including the domain name laxhjalponline.se

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.laxhjalponline.se in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4lunVSvDlQaH/R6+65u7
lW9VWluN4Q2uzXJWh0tOTVKBFf6OXBC5cKNtxKs1Buq6ggkmbRuyl+em0p5ReAoq
KSECSWH0qInFC0TPttLZYZxeWWz7ATyEq+ZoFWaoYmgSl83lwSWjzkWsJ7x9Je5U
H+V6b3/0kzTPr8f2VRcaj9rQvDzULgbNW72XNJ07/DGyAOlljum5EUVJPDRohMVz
KuUvkq6ZvW3ey8XRK27KMUV+POVDuYZ9sHu1W9DOHjQyIIfoWkegYHBQGoYOzrzx
lidf1nnsGNAY1u1d2xbm9Q13f6OSmpD1DDRduRIuW5m2EGFdjCRWtcgMg1iSW51n
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 414766136079633965149685690729053722105635
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-24 00:59:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-23 00:59:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.laxhjalponline.se'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28575053018349465658395599324193645685560667302709313895835467713197201862735521320446118332461637817638007539116211460063070651755910228627379843593274129143615477625033758532416015949169049774619693619445212136517339397069766597672367090947246399873347512104216183128283829888535424290194491637327367634421359838731883650033003419195550445575665384051747186184069295005197135656589677449650232268014975965615581470507096439931941983026229470537854968215987472370107952031223210169735489709085051983593492757074347938287640751607725962826131750198624982970178079965556922864602208061546570754637689922843416391935873
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							854b727156575a65fc3e119884f8e1c3232bc4d1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (328 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iris-frontend.iris.app.iterate.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iris-frontend.iris.g2.iterate.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jourhavande-kompis-chat.rkuf.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laxhjalponline.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ny.laxhjalponline.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.iris-frontend.iris.iterate.iterapp.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tenant1.iris.app.iterate.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tenant2.iris.app.iterate.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.laxhjalponline.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--lxhjlponline-gcbd.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--lxhjlponline-gcbd.se'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018f0dd4c778000004030047304502210090280c241ecde96c805c92abb3487e91d01b79f57f989e74deac458de46614f602201a3009a30c55c99a172b17fa43cbc722677caf2a0c4b70d6a6462fe5d83bfd9d007700dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018f0dd4c8380000040300483046022100ca4e31ab1c7e1891259e2193d59b4e1d49ccfcef3be552d7c73f099231295ccd022100a295bbf4f8294c9dfb42f4305d7a1243880037d3860441efe1153a167b691069
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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