dflund.se

Issued by R3

About this certificate

This digital certificate with serial number 03:52:65:f5:2f:aa:ba:8d:9f:bf:7f:4c:e0:2c:6c:d9:eb:63 was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=dflund.se

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:52:65:f5:2f:aa:ba:8d:9f:bf:7f:4c:e0:2c:6c:d9:eb:63
Serial Number (int): 289375536989902085903610245810986247908195
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 02:b3:ec:02:6f:3b:21:03:ac:37:81:dc:99:dd:c8:85:d4:2c:f5:67
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 06:e9:50:a3:c1:61:02:39:22:11:db:2d:1d:71:63:0c:80:37:b6:fd
Fingerprint (sha256): 7b:1c:3d:8b:4e:cc:78:ce:3a:f5:81:b4:08:6f:10:41:71:4a:1e:11:e3:80:73:cf:b9:13:b9:5d:88:06:53:74

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate dflund.se

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dflund.se

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

df.lth.se
dflund.se
www.df.lth.se
www.dflund.se

Other certificates including the domain name dflund.se

(limited to 100 certificates)

Certificate

The complete raw certificate details for dflund.se in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAriVze+y8163s1g4UZlxP
w8EkjhRdXZIpHf5Fk6dYpt0lFw83koXRy2bhNUPBrDg63THktTs+Bqj7W+j3Q67E
ioZEI9zLh83U05Cr3SEpP/yRaZPmoX5FMkD8DiL3CBb3QTYGdz79XexN/zDOEXv5
Nj4MlnMYZlsGcA3/tIwx/akpkmeHX0R2VZOrKf3+B2Zdk/xjhJxGrVu1ErwNzKLY
Wv3vdD9AwKUNdYt9snnwxHicNG/oIE6yMYJl42gZqPNDOxO9K8eQVROXmm7qZMMF
ZTLyG69oHSyigPpoD4i0WXZznJdM2wkkirnn/nTNB5lZ0X6SWsYphVTrcUy19P/m
awIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 289375536989902085903610245810986247908195
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-26 02:15:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-24 02:15:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dflund.se'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21983932894588655582899851253516053054942834289871834026629771490529117035656212904214223161105863141794745744546815897403583124711450255615683200988002353218672235867534401900116226567637842928958514377440322328900422611383425781195121671004599026111969342310550031616404206716670314088602433719142993320816395889046389438321681159933753830595084138963884432484891248923321918739078195009301272925086890034940138608633246032926231915861944012356369774919266270404309717411222870076750930880197363911673338781260433403874288061010216935770266051486228707583525784022803582016192209161347290255794683447549752514700907
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							02b3ec026f3b2103ac3781dc99ddc885d42cf567
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'df.lth.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dflund.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.df.lth.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dflund.se'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018a2fd6ab6f00000403004630440220402ddba3f137343ab6990fea2eb4b2bd8523675e5d695048c49e334b18cea1c3022033c88b80914a4c6e7b88b58359f45333e644590e9f0d3d56d5f260e3c22501d20076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018a2fd6ab7900000403004730450220736384a39d3776581ef4b882ef28b9951e6caadaa8fa220fe5837a811140beee022100dcdd8341c69a7db96f00ec1204297794d612bc74d2b79b0441aea6708d94a64a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		007acac8a1ece14a0d135358e32263d1b3691ebd7c6f8e92489e657d33253700ef23c394c774f36a43bf891707382816beb20d7a8a634ffde104a5e13054b863763ce1734520008941ce9cc0b3a28f5a4b1a9cce4629cf3a1de102bf80d28e68fb552ec6df8fe78ab62d1bea076d1d76b15ef067a709e11b16b75f696570e6192992fd2af1df5b3bae20c3af37e71355fbacf6c90bb283647124a1ae7150924b096f173890345a7a6a362977356f7fcc55b5701d474bb2d0edffb2f4f1803037b3ca78e42110a253cd0c9d83d96183ae4d559c3ec71c0603ebaba3833916f3b319d60caca3933425eea09919faccd6a982a2beb6d5d627540713cfdecafd12f4bd