wstrmrk.se

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:8f:43:79:de:36:9a:3a:a5:6b:3f:71:95:5b:11:c6:2d:bc was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=wstrmrk.se

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:8f:43:79:de:36:9a:3a:a5:6b:3f:71:95:5b:11:c6:2d:bc
Serial Number (int): 310086927315633396669581850657545880219068
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 5c:38:08:cf:38:df:d9:1d:df:42:af:a5:26:57:6d:ed:f7:be:b3:9b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 8e:2f:99:08:90:03:9d:7f:0c:d0:f5:bd:a5:d3:13:eb:15:6c:d3:ee
Fingerprint (sha256): 78:82:60:7a:10:05:86:ac:f3:27:6a:50:a1:2c:fa:54:96:71:de:47:87:b8:33:83:03:8b:1b:b7:70:07:8c:72

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate wstrmrk.se

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for wstrmrk.se

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

wstrmrk.se
www.wstrmrk.se

Other certificates including the domain name wstrmrk.se

(limited to 100 certificates)

Certificate

The complete raw certificate details for wstrmrk.se in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 310086927315633396669581850657545880219068
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-08-17 10:32:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-11-15 10:32:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'wstrmrk.se'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 795439767079928450933113620073914370863201434639125152950146366657720122993851486200734568867875672818164976746034250442129721422656796448040061162159444091244453609189505459902021606781745524717528745120620997178913283989997112419751910165171118749925980122825466135782588407615713942728912977411997275072100097987017344184650345506067334986242634125336644210240023670837378007675197128387769651667231078912394161418252535099780284611397769100652132539542382418151675377306493394117917790177583893088320507825483225670734236898902816826056882503907064012869470453246573106645339454085426549634229609349378568527792223387421475173360304451802457039361985738222752337943202340935375791375458895128783034227836337200250212655192494800485163399792781043311869553238102563094779442787899514000094985035440258710041501139153311010304687045823677046699690787826460372702655383269807615725641841467672421729262362312358657591039204605796256454076174155996376472736902267351374116009371193101447139867409087010938029062187961927083540016078890569432094855794496361071611697193611146066306294509094733395206913924990517660965437858789255860498253687340185151564198175761414109777345683998874074023321329031177444699370034214954343077997974177
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5c3808cf38dfd91ddf42afa526576dedf7beb39b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wstrmrk.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wstrmrk.se'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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