citycontainer.dk

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:8e:e6:a8:28:30:df:34:88:b7:c5:2e:a4:86:48:a6:c5:44 was issued on by Let's Encrypt.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=citycontainer.dk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:8e:e6:a8:28:30:df:34:88:b7:c5:2e:a4:86:48:a6:c5:44
Serial Number (int): 309963549458125180867196450894111381570884
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b4:d8:34:a0:a2:b1:e7:0e:39:fa:14:19:03:9c:c5:c4:c3:df:03:90
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b5:84:ad:3c:7c:b6:2f:6c:dc:5b:da:ac:65:6c:54:87:10:60:85:9d
Fingerprint (sha256): 7a:fa:d7:c8:55:d6:5d:f8:e5:b9:21:f0:e7:ee:47:3b:a0:ef:8f:f0:ea:b8:bb:1e:21:9f:47:cd:8e:9c:b5:63

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate citycontainer.dk

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for citycontainer.dk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

citycontainer-reconor.peytz.dk
citycontainer.dk
citycontainerfyn.dk
www.citycontainer.dk
www.citycontainerfyn.dk

Other certificates including the domain name citycontainer.dk

(limited to 100 certificates)
owncloud.citycontainer.dk
cityapi.citycontainer.dk
citycontainer.dk
citycontainer.dk
citycontainer.dk
*.citycontainer.dk
reconor.wp.prod.combell.peytz.dk
owncloud.citycontainer.dk
reconor.wp.prod.combell.peytz.dk
citycontainer.dk
citycontainer.dk
reconor.wp.prod.combell.peytz.dk
citycontainer.dk
citycontainer.dk
citycontainer.dk
citycontainer.dk
citycontainer.dk
citycontainer.dk
citycontainer.dk
testcityapi.citycontainer.dk
citycontainer.dk
citycontainer.dk
*.citycontainer.dk
ch.citycontainer.dk
skype.citycontainer.dk
citycontainer.dk
co2.citycontainer.dk
ch.citycontainer.dk
citycontainer.dk
cityapi.citycontainer.dk
citycontainer.dk
ch.citycontainer.dk
citycontainer.dk
citycontainer.dk
*.citycontainer.dk
citycontainer.dk
ch.citycontainer.dk
gave.citycontainer.dk
owncloud.citycontainer.dk
citycontainer.dk
testcityapi.citycontainer.dk
cityapi.citycontainer.dk
citycontainer.dk
citycontainer.dk
citycontainer.dk

Certificate

The complete raw certificate details for citycontainer.dk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 309963549458125180867196450894111381570884
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-17 11:21:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-18 11:21:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'citycontainer.dk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 995782736541004442884259163238709352907630499905934068607478125316294753252676700684794128041507711738789119247927747879167246038026347899660455199537693463658976980857050427582424560433169151050460620616142013448214108083308005400044376042859780661105270862025499209965099556100421258331453577638496868360814623527062798011662994789208790056076643177006369241153219193177691100657434020375830846576234378583361269152005610091108770582481009315852933114904136702114719305931069775782061465131318644003906465868994276735545865744426249210848681499566071052315255431268809703355840388610129592073116038441584082991119979307849543761827639296526055702918017619772835043995039397199607236754956602980744076263676331147906286968979098169483811865115913502025636642351073712875876569822165030759318329417467024420575714407827218041503671113170408294376238227739507295419003058910999860945983966429045918051402473997069390031616605810997288304066716788387680914086473633401256712952294815076085579218337992603028392702061171292756314463045476891204288557044382101274600303427648661537022072117092082498796576670484931367986390999482370151894658102332173673448158112284053545360372479633985415792732139572423358397152470577077909675732985873
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b4d834a0a2b1e70e39fa1419039cc5c4c3df0390
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citycontainer-reconor.peytz.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citycontainer.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citycontainerfyn.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.citycontainer.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.citycontainerfyn.dk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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