DV SSL/TLS Certificate for mail.loekkenklit.dk

Certificate is witin its validity period

Issued by Sectigo Limited (Sectigo RSA Domain Validation Secure Server CA)

About the mail.loekkenklit.dk DV SSL/TLS Certificate

This certificate with serial number da:b4:80:09:eb:51:c0:63:cd:a9:b6:86:25:b5:3c:23 for mail.loekkenklit.dk was issued on by Sectigo Limited.

With 6 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for mail.loekkenklit.dk provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): da:b4:80:09:eb:51:c0:63:cd:a9:b6:86:25:b5:3c:23
Serial Number (int): 290708913449958468143175559189150120995
Serial Number Length: 128 bits, 16 octets

Subject Key Identifier: 80:3b:8f:bd:fa:51:92:05:4f:07:24:76:df:a0:bc:17:c5:d1:88:c4
Authority Key Identifier: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1

Fingerprint (SHA-1): 67:11:21:97:0a:7f:d9:a9:41:1e:ed:ee:34:63:b2:2a:18:ee:ca:51
Fingerprint (SHA-256): 66:61:5b:eb:c0:86:25:3f:2a:a9:d4:d8:18:b5:c9:0d:67:99:df:20:fb:ff:b3:cb:68:18:52:12:79:4f:2a:45

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt

Revocation Information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate mail.loekkenklit.dk
6
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for mail.loekkenklit.dk

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9
CA Certificate
This is not a CA certificate

Subject Alternative Names

mail.loekkenklit.dk
autodiscover.flexvending.dk
autodiscover.loekken-badehotel.dk
autodiscover.loekkenklit.dk
mail.flexvending.dk
mail.loekken-badehotel.dk

X.509 Certificate

The complete raw X.509 certificate details for mail.loekkenklit.dk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpOdkoepaw7wvX5IH+w/
jUna8ui8PuRpkfePL5FXoRTrcctnTu7PyLf3v9b/n3VHc4XSKwWJSNBy6hHHkkEn
oPV9Ked96lluNsftUQ8rP5nL5jIPEgBNwJTeWANSEmVC6bmmK0f2Hd8k7uReBBmb
OIP/tRMZnvLoTVxnb8kL94dvvlaGFBKapxzKe3xPPrDdYZZPGAZuyG+K9XOUbR21
1y2BkNfAgqPu3BBwoP1HtCqMW1xX8s3GLXVWa1R+zvVLA6yvupNPPNoTH/TfoGJz
/so3/9YZ9X+lc+jkA5E1BK264ABadO0o0Pr/u9BzqOJRgYsE2RfjtMeInqJSleQt
BQIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 290708913449958468143175559189150120995
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-29 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-11-27 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mail.loekkenklit.dk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22038256988577894027137450179731963686758264712947459789954684215046503783004302802162091687532819288520348625047687687076886636204582477642203351175242351994040896825735601733842762682268861345469812315795662429309709082980298234623578839652765077391245895877358723749750139330654355342229270928718671676671970120026185237477070158487742503608609614269143193987618365548726293126445264448338384978714651052148545842031481984653667150086689022221935936462911702414752143337215553476265900915326307327734718714316827519201931630680434285251747959044310929039196549487813817927941174500518608874966041412341129348918533
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							803b8fbdfa5192054f072476dfa0bc17c5d188c4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (165 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.loekkenklit.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.flexvending.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.loekken-badehotel.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.loekkenklit.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.flexvending.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.loekken-badehotel.dk'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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