onestepbeyond.se

Issued by R3

About this certificate

This digital certificate with serial number 03:8f:1b:58:7c:65:87:f1:b7:12:24:a9:f3:c9:b3:a5:ba:60 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=onestepbeyond.se

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:8f:1b:58:7c:65:87:f1:b7:12:24:a9:f3:c9:b3:a5:ba:60
Serial Number (int): 310033584866047591967257969890137332890208
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 01:f5:b6:09:2b:16:cd:43:67:dd:ed:fe:54:e0:8d:5c:34:aa:05:66
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 54:0d:d2:68:f3:6a:ee:bc:4c:5b:b1:57:80:39:b6:20:77:ae:14:02
Fingerprint (sha256): 7e:66:bc:e8:3f:c3:d0:ee:c2:48:70:b3:0f:9b:31:44:b1:c1:7a:e5:72:94:ab:62:9a:da:df:6c:2d:83:ae:b3

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate onestepbeyond.se

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for onestepbeyond.se

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

onestepbeyond.se

Other certificates including the domain name onestepbeyond.se

(limited to 100 certificates)
onestepbeyond.se
onestepbeyond.se
karriar.onestepbeyond.se
stage.onestepbeyond.se
karriar.onestepbeyond.se
onestepbeyond.se
karriar.onestepbeyond.se
onestepbeyond.se
stage.onestepbeyond.se
karriar.onestepbeyond.se
onestepbeyond.se
onestepbeyond.se
onestepbeyond.se
stage.onestepbeyond.se
stage.onestepbeyond.se
onestepbeyond.se
stage.onestepbeyond.se
karriar.onestepbeyond.se
stage.onestepbeyond.se
karriar.onestepbeyond.se
stage.onestepbeyond.se
api.onestepbeyond.se
karriar.onestepbeyond.se
xyz.onestepbeyond.se
karriar.onestepbeyond.se
karriar.onestepbeyond.se
xyz.onestepbeyond.se
onestepbeyond.se
onestepbeyond.se
karriar.onestepbeyond.se
stage.onestepbeyond.se
karriar.onestepbeyond.se
onestepbeyond.se
onestepbeyond.se
beyondcom.se
api.onestepbeyond.se
karriar.onestepbeyond.se
xyz.onestepbeyond.se
stoppaskitsnacket.se
onestepbeyond.se
botek.se
beyondcom.se
onestepbeyond.se
onestepbeyond.se
stage.onestepbeyond.se
karriar.onestepbeyond.se
api.onestepbeyond.se
stage.onestepbeyond.se
xyz.onestepbeyond.se
karriar.onestepbeyond.se
karriar.onestepbeyond.se
stage.onestepbeyond.se
onestepbeyond.se
karriar.onestepbeyond.se
onestepbeyond.se
stage.onestepbeyond.se
karriar.onestepbeyond.se
onestepbeyond.se
karriar.onestepbeyond.se
onestepbeyond.se
onestepbeyond.se
karriar.onestepbeyond.se
karriar.onestepbeyond.se
karriar.onestepbeyond.se
xyz.onestepbeyond.se
botek.se
stage.onestepbeyond.se
karriar.onestepbeyond.se
stage.onestepbeyond.se
stage.onestepbeyond.se
karriar.onestepbeyond.se
onestepbeyond.se
onestepbeyond.se
karriar.onestepbeyond.se
stage.onestepbeyond.se
onestepbeyond.se
karriar.onestepbeyond.se
stage.onestepbeyond.se
onestepbeyond.se
karriar.onestepbeyond.se

Certificate

The complete raw certificate details for onestepbeyond.se in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIE7TCCA9WgAwIBAgISA48bWHxlh/G3EiSp88mzpbpgMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzExMDExMjQwMzlaFw0yNDAxMzAxMjQwMzhaMBsxGTAXBgNVBAMT
EG9uZXN0ZXBiZXlvbmQuc2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCfshwr53t0qC79p/oyfPuQK7Etf0DDnAozfDcoMce/bmlgUY73C9JwjZej2QYh
EHkQwdvpYZPb/lC8caW4idIKSFPr2VX7rwQdsGC44Mjc1dquz5sI5JeOtdBNRoMM
6C5WosAJ1DsoLgbpBIO/MgvUtXCXiNtgJReOezimvGsyCbXihMwfqQ9iYHz9GOOO
CRfM7bRZ6G6aLRkOu7UW2d/O4yW5mBzzjvwq/ZooJXKYtg+nwSzyXw5oYHggqTs0
jRTd9yMyGXF5DvMJCu5hiFG5p08/ip+1MhKk0HOTiNiUFFoZl2OPVQOkKqmRU9SB
JhJc1VLVvEcZeBHpzWPzlDO7AgMBAAGjggISMIICDjAOBgNVHQ8BAf8EBAMCBaAw
HQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYD
VR0OBBYEFAH1tgkrFs1DZ93t/lTgjVw0qgVmMB8GA1UdIwQYMBaAFBQusxe3WFbL
rlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDov
L3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5v
cmcvMBsGA1UdEQQUMBKCEG9uZXN0ZXBiZXlvbmQuc2UwEwYDVR0gBAwwCjAIBgZn
gQwBAgEwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdgDatr9rP7W2Ip+bwrtca+hw
kXFsu1GEhTS9pD0wSNf7qwAAAYuLHV6vAAAEAwBHMEUCIQDdcKQlcYpHS63YKnv4
lrpOUutF+KezzL2Rr5JclEuKnQIgJ5Xh1kumSxI4Pkj30X8g1L8DSRNt/4zk9lV1
XlEMSjAAdgA7U3d1Pi25gE6LMFsG/kA7Z9hPw/THvQANLXJv4frUFwAAAYuLHV6m
AAAEAwBHMEUCIAC4Q2MN9KJmkAOMYenvsZTv8Q1G2l9vuEY3ht/z2HJbAiEAi/Z2
qRymc0uWROTv04IQW3mLghQpx+79zMfYBnTBuZswDQYJKoZIhvcNAQELBQADggEB
AEpxcNWSVbW3yX69zkizXqvSJH+UTFLBTR1hiRJnI3b+6a6DFsA7BVcSoF9UA0Bi
PcBmHY7HmSKhLW2BVDOePPBCLbT4g96xttPsfE0q0uv4mTgPiRniZmzKREj6oWxj
fm69UQp5EaaGyhu7UWoBth2/ckLA4b0+x/rqx0wlG2aG+BwgBAUztRy18Fr+yaZg
QLOAqaJuxRxGelLhFzhA6Gnl9QFEl/O/5TBtQ/AM+IA+7jIQzH4L0c+lCVK8Pvh4
yPZDXbURIcJK1/SXIWc7rx9hQyQKukcwkpZMR/sOL1b0rgUIKG9o/U2jKomyWCXk
NUKJNxP3Q2B/W4gVDFM76kM=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7IcK+d7dKgu/af6Mnz7
kCuxLX9Aw5wKM3w3KDHHv25pYFGO9wvScI2Xo9kGIRB5EMHb6WGT2/5QvHGluInS
CkhT69lV+68EHbBguODI3NXars+bCOSXjrXQTUaDDOguVqLACdQ7KC4G6QSDvzIL
1LVwl4jbYCUXjns4prxrMgm14oTMH6kPYmB8/RjjjgkXzO20Wehumi0ZDru1Ftnf
zuMluZgc8478Kv2aKCVymLYPp8Es8l8OaGB4IKk7NI0U3fcjMhlxeQ7zCQruYYhR
uadPP4qftTISpNBzk4jYlBRaGZdjj1UDpCqpkVPUgSYSXNVS1bxHGXgR6c1j85Qz
uwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 310033584866047591967257969890137332890208
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-01 12:40:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-30 12:40:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'onestepbeyond.se'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20159719826200212908309352597109655159044737266961708029920326862017688965871751189431235317459434533742440595120597113617314693948772314573931896359644189470453260402600353273568870525109075132555776400711800653562278097644289878336937836269930808833380384440231515784076170411962785422984949549069268950230080161460686963865803675956047809630440641756606145908654024148448720753391107388562168539774728684047216983554132919943482003794009168725189431848756772865063153064546072634241499405968414246557682331087891121995675064746948396989353476742576559845685861880940234105900393447776887636147404463322951960507323
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							01f5b6092b16cd4367ddedfe54e08d5c34aa0566
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onestepbeyond.se'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b8b1d5eaf0000040300473045022100dd70a425718a474badd82a7bf896ba4e52eb45f8a7b3ccbd91af925c944b8a9d02202795e1d64ba64b12383e48f7d17f20d4bf0349136dff8ce4f655755e510c4a300076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018b8b1d5ea60000040300473045022000b843630df4a26690038c61e9efb194eff10d46da5f6fb8463786dff3d8725b0221008bf676a91ca6734b9644e4efd382105b798b821429c7eefdccc7d80674c1b99b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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