eenjonkoping.se

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ca:1c:70:a0:a5:74:47:5b:9a:b4:9f:99:c0:12:0e:ef:91 was issued on by Let's Encrypt.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=eenjonkoping.se

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ca:1c:70:a0:a5:74:47:5b:9a:b4:9f:99:c0:12:0e:ef:91
Serial Number (int): 330111699092734613031191587242217648877457
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 8b:a3:d0:10:f8:f9:f3:c9:c6:9e:d5:52:f4:90:af:2f:38:07:97:0e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 9a:b4:ba:7a:ce:41:87:40:a3:80:e9:8d:a0:68:28:b6:cf:f5:03:c9
Fingerprint (sha256): 7e:09:b9:90:58:e8:29:f6:cf:14:1b:5e:e2:8d:fd:0a:3f:b7:c9:3c:f4:3a:97:51:76:b5:b2:a9:f0:da:93:d6

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate eenjonkoping.se

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for eenjonkoping.se

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

b502871.web05.cust.bluerange.se
eengotland.se
eenjonkoping.se
www.eengotland.se
www.eenjonkoping.se

Other certificates including the domain name eenjonkoping.se

(limited to 100 certificates)

Certificate

The complete raw certificate details for eenjonkoping.se in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 330111699092734613031191587242217648877457
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-16 15:30:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-16 15:30:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'eenjonkoping.se'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 831876374254297652015951191889974642141749324753932626237166105743679618045855086424625579921910170378179388159014483244809986219201543234764499928999879770342249621709675575864318218568244192138973097129462690531474841245827838189255044390196784315252751452322146853116584475749242234957151501452509942266437140557338483478831898417120493836756963846320591090307486773988780372248101683452876039332514128405602255179317230849145986219480730008734197509268438255739685821480318326285953475864930281895714568112846006111570169996101060146815878005684424048374737034550832895475255734653982658773044543872556438497194662766245445983940927466888591067490624423788161370774417621127996840052505987232246902491247107369864578088343884891139361621099902715088837239778092430538363082458278434817532687141172898290661024237300836751806017939527574373660678040991737585670016358425321312330102999790039204943259189131695487552552173021927842114931516574018318502775551037026750710691869751259195528465621688573531040750787855989710174668181514269399846802107425966366809846965677587388524912687009138324905883871035712849647628703976722411642617914449567269384929045253279110872916264689583915233855615862616724444932320283858576517720923317
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8ba3d010f8f9f3c9c69ed552f490af2f3807970e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (107 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b502871.web05.cust.bluerange.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eengotland.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eenjonkoping.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eengotland.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eenjonkoping.se'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077005ea773f9df56c0e7b536487dd049e0327a919a0c84a112128418759681714558000001704ed5d7750000040300483046022100c343524d6fe0439026c6be7f042f4e66d41b622c814cb107b433981fc9926b75022100b8ccaa22ad248fb527356908411d36ac44ec0d66cacdec0035902aea293419e7007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001704ed5d7650000040300473045022100aa4073fabf34ca9e90889afcb98a3971ecbb43713b6a2006e53b760067a3b8f0022021cba631ede47af493bfe3a4a25a43190f18be891ef876971f4846b6dfdb2f34
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		003a15d7d8b8b75e62a0f3f3f3f4a09e715845f9483104b0a153abde426ed7eb0321c50bf489985fe59b744ab1170ccef112032d2d7c99b418af2e665c01cc338be273253f4e6072164eaf54cc5d53701b0ccb3bc266acdd275b46e11377218c5c7936357c047b58f618518cc370f9f9b7248a2633ab3f42660f32377f1de96d25e0d08cef6c53c8cb3a3e8cc9bd7c35eb1b1b970f1f65b655597c2d11393a015d2ad247fc57858f3d7bd0bbf4a7780c7aaf137e9707eff7fa3c5ee1a378471f3c205705f5e32af5d80e450d1407489959f356341913d407f8da13cae374e1bcc9e484d29d1dd54beccfbda9cd36921797ab454b6e2b7bce76ded9278ff3d2d883