getgeek.se

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:d7:6d:8d:37:de:1a:01:fa:4e:ed:1b:55:c5:81:2a:e9:6e was issued on by Let's Encrypt.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=getgeek.se

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d7:6d:8d:37:de:1a:01:fa:4e:ed:1b:55:c5:81:2a:e9:6e
Serial Number (int): 334643185781809348105576659823341498722670
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c8:7d:b2:8c:ad:1a:58:ab:36:3b:07:50:89:2e:af:21:5a:0c:a1:dc
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): e1:08:22:b9:25:b2:56:f0:7a:49:7e:83:fe:dc:de:1f:84:38:3d:e8
Fingerprint (sha256): 62:d3:91:11:7c:df:b6:19:da:19:3c:16:35:4d:a6:49:1a:34:81:2d:22:7f:4b:84:39:53:a8:b5:ee:a5:b3:6b

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate getgeek.se

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for getgeek.se

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

getgeek.eu
getgeek.io
getgeek.nu
getgeek.se
www.getgeek.eu
www.getgeek.io
www.getgeek.nu
www.getgeek.se

Other certificates including the domain name getgeek.se

(limited to 100 certificates)
www.getgeek.se
getgeek.se
getgeek.se
storage.getgeek.se
www.getgeek.se
www.staging.jampad.app
vassmarinediveservice.com
labb.getgeek.se
labb.getgeek.se
getgeek.se
old.getgeek.se
old.getgeek.se
mysql.getgeek.se
overstage.getgeek.se
storage.getgeek.se
getgeek.se
getgeek.se
getgeek.se
old.getgeek.se
old.getgeek.se
www.getgeek.se
www.comunidadcep.com.ar
storage.getgeek.se
getgeek.se
geekbot.getgeek.se
labb.getgeek.se
www.getgeek.se
storage.getgeek.se
order.getgeek.se
www.getgeek.se
getgeek.se
www.getgeek.se
jobb.getgeek.se
order.getgeek.se
getgeek.se
jobb.getgeek.se
www.getgeek.se
getgeek.se
order.getgeek.se
getgeek.se
storage.getgeek.se
getgeek.se
storage.getgeek.se
order.getgeek.se
overlord.getgeek.se
getgeek.se
getgeek.se
overstage.getgeek.se
beta.getgeek.se
getgeek.se
getgeek.se
www.stagingconsultancy.lmserp.com
getgeek.se
jobb.getgeek.se
trendingscanner.com
labb.getgeek.se
getgeek.se
jobb.getgeek.se
beta.getgeek.se
storage.getgeek.se
jobb.getgeek.se
storage.getgeek.se
labb.getgeek.se
getgeek.se
old.getgeek.se
labb.getgeek.se
old.getgeek.se
overstage.getgeek.se
getgeek.se
old.getgeek.se
www.sudheeksha.co
getgeek.se
getgeek.se
overstage.getgeek.se
getgeek.se
www.getgeek.se
labb.getgeek.se
order.getgeek.se
getgeek.se
www.getgeek.se
getgeek.se
labb.getgeek.se
jobb.getgeek.se
old.getgeek.se
old.getgeek.se
beta.getgeek.se
egedenfoods.com
old.getgeek.se
mysql.getgeek.se
mysql.getgeek.se
getgeek.se
getgeek.se
getgeek.se
beta.getgeek.se
www.getgeek.se
labb.getgeek.se
beta.getgeek.se
www.getgeek.se
old.getgeek.se
email-editor.acceptmed.com

Certificate

The complete raw certificate details for getgeek.se in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 334643185781809348105576659823341498722670
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-09-01 12:33:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-11-30 12:33:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'getgeek.se'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 763670658488259459966967653567800563336355900210913465346678627111192532247904081111967263292559419664627918341300115738792972382179044234803813479002598852017386290803809422409898337869258559758653902243911311989802218809587962332790277129610549031381692479167267759181045420555245911001216594314654311079695273305054400562986186476986760974240243585084507477227534676689157709330924393049294606151089642908397195141021384864282095848636442925765921966696234107982453090128650415965341916454278866735480868581347464969583269004981266564236886883426449597092830978415110635211693282110490962417942727329324020830190732805907232192800841497521788360482018335973877538181480148573627863390546526036434155913011796429005551147691156686927930131125575283404452074264877842688995818013408968410402900728661786091046157129986472434973831793619185999914786381140918894141212997360809396482779746025653467367909434706609967763583939431567203008322194730790090893727487258159669429981387028291175506655323392246894366483710135447072193349032854399809486987183858335386374050683067946617582071852646115835859242150377265226130348323151971418737409123267391249655137298689318320259371885595452029091846890946371930348877411371256838130802957257
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c87db28cad1a58ab363b0750892eaf215a0ca1dc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (114 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getgeek.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getgeek.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getgeek.nu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getgeek.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.getgeek.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.getgeek.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.getgeek.nu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.getgeek.se'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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