eenmalardalen.se

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:3f:9e:6e:07:57:fe:1a:dd:d6:3a:5e:33:f4:df:f4:e1:17 was issued on by Let's Encrypt.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=eenmalardalen.se

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:3f:9e:6e:07:57:fe:1a:dd:d6:3a:5e:33:f4:df:f4:e1:17
Serial Number (int): 282985236236236677713485662414197881102615
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a3:19:35:2c:ba:15:69:d1:79:34:ac:65:71:94:97:97:fd:87:1f:73
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a0:19:fb:12:e1:12:57:50:16:9a:66:e1:bc:fd:d8:da:ee:54:dc:a3
Fingerprint (sha256): 6f:a6:ae:a3:c3:a9:60:7e:2f:be:9b:0e:b3:d9:a5:ba:51:da:3b:54:c5:55:f6:16:fa:1a:ff:b4:58:6f:8b:96

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate eenmalardalen.se

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for eenmalardalen.se

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

b156392.web05.cust.bluerange.se
eenmalardalen.se
eenorebro.se
www.eenmalardalen.se
www.eenorebro.se

Other certificates including the domain name eenmalardalen.se

(limited to 100 certificates)

Certificate

The complete raw certificate details for eenmalardalen.se in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAvTLty3Wa5QBx8X21ZuX2
bUdq/pj50xyJOd/RzkOQrVLgFo5tnNBpMGOObGDyrYvv6RtHhI0qA6DdQx0AL4xa
zTjZiE7lkYES8UlP+CbruvtJJWjRQwh6YEcN18Hh3GdXJzesheWjiQhRTb4mCLdF
eH3N7WZ18D1ni3SMNWebTmaRukMyt+ydFbUy+5Avs1qOHJW+K+EjiQWMbztKDmyo
A8aluyIjAQLp+lPx8hevnsJqDOyXu1/iX7rqOPAV7SqShmgjKRez3wrAvulWzzWk
iwDdWJx8K6PuLcmXKODmccuwUEyI9O9UZlRok1QLPulkvKxvxUBi7521w/P5xQ5h
nW+ztCzgoDVUlexusM5HL4FHwPdKe3a0M5yoyLf7cztjgXkwymRPAzZAOjCo20M5
2Jpr7QPtMhfRXvZAaugBwOxmV7l9nH9Ur6a8E5/ZiIM4f58UP3M/VFDTUb9rnBFw
Paygy7CJP/+wmW/bIPQ7SfbLhckRGrEgmsToLvpSr0PBrh00qPAGBaX2uRSNHoku
uTcNWL8XBu1YtpRPuidlz3BIyqPYkCNZW/hLAEBR99t80zGi7iVfWuvRwpeXwkA+
tRdgGzj3fePKQaAE4UoujvcBka+LVeIBMPGTYCK/CYT3QC5HaCMHmsrn2eF40bPk
mfqocxpjeKZwdoRNynIsuT8CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 282985236236236677713485662414197881102615
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-25 15:04:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-24 15:04:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'eenmalardalen.se'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 771864337163695854118815831631749763651819805799540903044193252315246848824891456075628373472370588751640051526210562033372604197077064054186692176254218635241088816823353927278399815406599715657851207389006342541458025503922577124624971642190137553195881453351801320240357254052431248462560165072763309380470649747588013229329141838466257092328351433795240094766052629916408323820313729480220469538262259120979488136220738834467730236010281438556687897338846168002270419557182501105389971266871517692184959320778755098904477785481530828137568028882797621175202845667016971278527877677887073134139614458992120744998304108129731546847103943310829652504424862404460244509794190269525708115601498096155456825370086535202328068793552262431757722969253222289523306411330263951912197846060135138845968174061420750465344200690326399139073076153744005446418490411757589981575320860043091302407798784479506426357845607012081879626989083311549712966880589106098054431419781907291439254419858395325737051646926584195645022799519164804487891889696676145809731053585214737262137821583812964370620963083143848743103514136009913976311681985715955695331272600836705878485750810681365973508959236896469486344087104660172301074266116315882341779945791
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a319352cba1569d17934ac6571949797fd871f73
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (107 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b156392.web05.cust.bluerange.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eenmalardalen.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eenorebro.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eenmalardalen.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eenorebro.se'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016fdd72ca88000004030047304502202d0c506264a71d9560bf42c04b39800f9bb0fc36d449a2a95648492efe11ea9f022100b1a8c2bc719b2742e59ac2102faf4e9f6ff1f0964886a802c779f988baca5f8800760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016fdd72cac70000040300473045022100a66481cbcc362448f67d48c178939e395b5bfd4901cc49ed66338e1579e84b3b022005d3872df5bf0bb14b6dfae2ecb743e2476e6af2b6c9f5055e079750e2eab6a0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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