gopkg.pco.dk

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:dd:fc:3e:14:4c:60:49:ec:2b:00:97:05:65:99:9f:55:4c was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=gopkg.pco.dk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:dd:fc:3e:14:4c:60:49:ec:2b:00:97:05:65:99:9f:55:4c
Serial Number (int): 336874548673850500676479136611624709739852
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: cf:4d:70:6b:a2:d6:33:71:69:ac:41:a6:83:fa:d9:78:90:ae:b4:a8
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 43:22:80:2e:9d:92:59:55:f7:e9:3b:fd:71:6b:35:e7:77:bd:a7:10
Fingerprint (sha256): 65:68:c1:df:29:6d:6e:95:66:7f:88:a2:76:06:ca:d2:7f:ef:7a:4d:72:01:e0:28:56:2a:c2:4d:37:d7:be:32

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate gopkg.pco.dk

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gopkg.pco.dk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.prod.ng.peytz.dk
*.stage.ng.peytz.dk
gopkg.pco.dk

Other certificates including the domain name pco.dk

(limited to 100 certificates)
social.innx.pco.dk
social.innx.pco.dk
dfi.dk.d9.vps.prod.combell.peytz.dk
gopkg.pco.dk
mylife.custom.prod.combell.pco.dk
noedhjaelp.fkn.wp.prod.combell.pco.dk
hal.aws.pco.dk
noedhjaelp.fkn.wp.prod.combell.pco.dk
dfi.dk.d9.vps.prod.combell.peytz.dk
dfi.dk.d9.vps.prod.combell.peytz.dk
shellservice.hal.aws.pco.dk
social.innx.pco.dk
dfi.dk.d9.vps.prod.combell.peytz.dk
dfi.dk.d9.vps.prod.combell.peytz.dk
noedhjaelp.fkn.wp.prod.combell.pco.dk
noedhjaelp.fkn.wp.prod.combell.pco.dk
login-bilvask.hal.aws.pco.dk
shellservice.hal.aws.pco.dk
noedhjaelp.fkn.wp.prod.combell.pco.dk
hal.aws.pco.dk
social.innx.pco.dk
noedhjaelp.fkn.wp.prod.combell.pco.dk
dfi.dk.d9.vps.prod.combell.peytz.dk
dfi.dk.d9.vps.prod.combell.peytz.dk
anet.d7.prod.hz.pco.dk
gopkg.pco.dk
dfi.dk.d9.vps.prod.combell.peytz.dk
noedhjaelp.fkn.wp.prod.combell.pco.dk
shellservice.hal.aws.pco.dk
shellservice.hal.aws.pco.dk
noedhjaelp.fkn.wp.prod.combell.pco.dk
noedhjaelp.fkn.wp.prod.combell.pco.dk
procurement.fkn.wp.prod.combell.pco.dk
dfi.dk.d9.vps.prod.combell.peytz.dk
hal.aws.pco.dk
noedhjaelp.fkn.wp.prod.combell.pco.dk
dfi.dk.d9.vps.prod.combell.peytz.dk
noedhjaelp.fkn.wp.prod.combell.pco.dk
gopkg.pco.dk
dfi.dk.d9.vps.prod.combell.peytz.dk
anet.d7.prod.hz.pco.dk
shellservice.hal.aws.pco.dk
dfi.dk.d9.vps.prod.combell.peytz.dk
dfi.dk.d9.vps.prod.combell.peytz.dk
noedhjaelp.fkn.wp.prod.combell.pco.dk
social.innx.pco.dk
noedhjaelp.fkn.wp.prod.combell.pco.dk
shellservice.hal.aws.pco.dk
noedhjaelp.fkn.wp.prod.combell.pco.dk
noedhjaelp.fkn.wp.prod.combell.pco.dk
noedhjaelp.fkn.wp.prod.combell.pco.dk
anet.d7.prod.hz.pco.dk
social.innx.pco.dk
noedhjaelp.fkn.wp.prod.combell.pco.dk
dfi.dk.d9.vps.prod.combell.peytz.dk
social.innx.pco.dk
dfi.dk.d9.vps.prod.combell.peytz.dk
noedhjaelp.fkn.wp.prod.combell.pco.dk
dfi.d9.prod.combell.pco.dk
hal.aws.pco.dk
noedhjaelp.fkn.wp.prod.combell.pco.dk
anet.d7.prod.hz.pco.dk
shellservice.hal.aws.pco.dk

Certificate

The complete raw certificate details for gopkg.pco.dk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 336874548673850500676479136611624709739852
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-22 23:04:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-22 23:04:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gopkg.pco.dk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 793999286667241185134110365306774442370509978836718723332997456758348818893477599783582904358698626483364060233035957847567031304118454018798674124503677273840368620147381183314202464065864257014730845831105468211628888629069514523565446089194645917007872495736307358696856720438614422276583849569370173729961291985249033254765891895997983552837237549067286959412086395181512332065230008990999409226272831818336969962312449791269386179296550392283235054144594112980049882194309256046829802284942023132763620745555109653925458964275834230629162539351181210301219596701669390144569634433235339554181500649126392136359392134631128881443952953561383797027073738002484648501906855433688435089495703176478740778371393900553781323231723873162247297381346021225926197427650252432316197981900733095682162728010630927580187131915589266152374269018848631877809504853321595600024347283464547729911355274148828565719037560396265439093502411016407376622788588072809300886760726076203178507540976391656733014168555133360478858703551384266315387344672856206522890054817961010475862502362392432816273906547250323416216879150321724149735780514137689962724321953567572663874197201925478813888438744066547997555112227993655644897831299969228870533713637
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cf4d706ba2d6337169ac41a683fad97890aeb4a8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (57 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod.ng.peytz.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stage.ng.peytz.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gopkg.pco.dk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb273000001706f5c2033000004030046304402204904cce015232ac3d688d3ed9af93dc8560e9e512e0f7a564d7924c6df4e7085022018b2f1b80e7f4130ca68cef70da8b160ab56b117695d87c76ffafa7fd92eab0700760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001706f5c207d0000040300473045022100e3e002687c45e10a4197efb681e443dc74d81b1ee65fa4c6dd27ab8bdcf4c2bd022041be5c33d9ced1268389824574a92c5d6af4976a4184ddfd5e39a038f447ef6d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005d8c3416a4a216917908ef91368c6ec070f053e39c1019cc5491aeecc575e52fa73649ac9c25af44e33ada98d26babaad523fe36fbce20f5cf7c1fb7e044abfe22e7b3e09a1805fcf51ebbdb1a85ff221b435fbf2e86007dd2ff72d82b582cb51e236e39fdbf5ad86ff88cb765e47f133543de49ea2bc85d0f69d6a9715fb23c58901f6535c9cd2d6732a8847cd95f36bbbf65fec3455bafc826d0aefced27590ef7af609cddcee4d82603bcc14929b3e7a565f859a8138479ef28f55e161e94d96835621dfccfddf93da5b0c3617ccdde1047b2ed297ce5fbd0c8ce307615501f58fcde62508ac0e63e8aef2790f6f616a5fb98c006feb187c27cf46794b325