bokforlaget.etc.se

Issued by R3

About this certificate

This digital certificate with serial number 03:b1:89:7c:c7:0b:fe:1d:dc:f0:50:c3:5f:e6:c2:86:57:cd was issued on by Let's Encrypt.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=bokforlaget.etc.se

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b1:89:7c:c7:0b:fe:1d:dc:f0:50:c3:5f:e6:c2:86:57:cd
Serial Number (int): 321749588857669505975139140332158783477709
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: cb:a5:fd:e5:75:ad:46:62:5e:d9:3d:fa:be:a4:f6:8f:a6:11:6a:cf
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 42:d1:2e:f2:af:d7:f6:c9:01:fe:cf:d3:fb:0c:11:48:d1:91:ad:4f
Fingerprint (sha256): 7f:2d:80:d6:80:a7:28:0b:b8:12:57:c0:3d:7e:f8:55:58:8d:fe:77:53:c9:59:a8:69:ae:ea:fe:4d:02:f4:8e

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate bokforlaget.etc.se

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bokforlaget.etc.se

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bokforlaget.etc.se
el.etc.se
elbilspool.etc.se
kommunikation.etc.se
kund.etc.se
kund.staging.etc.se
personal.etc.se
users.etc.se

Other certificates including the domain name etc.se

(limited to 100 certificates)
feature.etc.se
etc.se
blogg3.extern.ochsavidare.com
persondata.etc.se
konto.swarm.extern.ochsavidare.com
varuhuset.etc.se
varuhuset.etc.se
kampanj.etc.se
feature.etc.se
kampanj.etc.se
feature.etc.se
bokforlaget.etc.se
etc.se
feature.publisher.ochsavidare.com
etc.se
varuhuset.etc.se
etc.se
persondata.etc.se
newpass.etc.se
kampanj.etc.se
etc.se
feature.etc.se
etc.se
etc.se
etc.se
app.etc.se
feature.etc.se
kampanj.etc.se
konto.swarm.extern.ochsavidare.com
persondata.etc.se
feature.etc.se
etc.se
www.etc.se
app.etc.se
feature.publisher.ochsavidare.com
feature.etc.se
feature.publisher.ochsavidare.com
kampanj.etc.se
etc.se
etc.se
feature.etc.se
app.etc.se
etc.se
feature.etc.se
kampanj.etc.se
etc.se
varuhuset.etc.se
www.etc.se
feature.publisher.ochsavidare.com
bygg.etc.se
kampanj.etc.se
sommar.etc.se
varuhuset.etc.se
konto.etc.se
etc.se
bygg.etc.se
feature.publisher.ochsavidare.com
kampanj.etc.se
etc.se
feature.publisher.ochsavidare.com
kampanj.etc.se
feature.publisher.ochsavidare.com
bygg.extern.ochsavidare.com
bokforlaget.etc.se
etc.se
feature.etc.se
kampanj.etc.se
bygg.extern.ochsavidare.com
kampanj.etc.se
etc.se
cliq.outsourceit.es
kampanj.etc.se
blogg3.extern.ochsavidare.com
www.play.etc.se
konto.swarm.extern.ochsavidare.com
bygg.etc.se
kampanj.etc.se
konto.etc.se
feature.publisher.ochsavidare.com
app.etc.se
feature.etc.se
etc.se
etc.se
etc.se
blogg3.extern.ochsavidare.com
bygg.etc.se
app.etc.se
konto.etc.se
konto.swarm.extern.ochsavidare.com
persondata.etc.se
brev.etc.se
etc.se
solar.etc.se
etc.se
connect.etc.se
feature.etc.se
feature.etc.se
elcertifikat.etc.se
varuhuset.etc.se
etc.se

Certificate

The complete raw certificate details for bokforlaget.etc.se in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 321749588857669505975139140332158783477709
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-12 06:25:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-11 06:25:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bokforlaget.etc.se'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 584957175475249894765567737296433793173185976736224716485933665400584134116878910443355309948346544609099858868810577608330991575378744965968750091981130583883858960984647739879324492223450715047407401183677989191000954133208668230310673661497875365504776861118762537125508338892350584800167574405716621498249024726833032589350951511969034674724798866591604099355742869943731963949286731437928391739318685642120868854391106977142083252802431820102101493301800350097981063458356003458894738111850152054145949372697814880432524953126444262334862889998742871445400994269910276849821193744843456440021508812975625365570524381900721453456569851304242572808604635573942893439377029899357037125676043294677321190573002083957617833077485807092343339933600451307357642470312050194836939396112361118566645168854263919828420818816226840663631885657507081444442694519731403400181447448414370099526296341885156485211987665860747914732513725745890859458963294559269536743582045665957746727077830038990263103036412927096971695831536753282988587384308344044791871169968853419869262484292594314984174265940250655590453968581686050365792058478426588273733263629620180513291880987976282155925381660088977100145752478276036615235947251367906709365791493
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cba5fde575ad46625ed93dfabea4f68fa6116acf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (140 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bokforlaget.etc.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'el.etc.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elbilspool.etc.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kommunikation.etc.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kund.etc.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kund.staging.etc.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'personal.etc.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'users.etc.se'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018a8847e4e30000040300483046022100dac4ee5e9ceb898034dd8f7f1fea835c6ba70cbb141c976729911e660bf9e883022100faad62a5475ffafef6d0365787d2c62ae601e8d27a71bee940876006e4c513f7007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018a8847e4d70000040300483046022100d054aa9ff7986c4ac4e8043e29a18d502a4bab49e42b622112dd8294989ddb15022100e04c5042515495ea47ef106bc9b06df3f1757f56ed048ad6ac851734fe7b77af
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00b497f64a75462dbb7851bc1514a9cb5f89a2242cb10ee05536273013306443a10bbc3dac88a5d28a22ceecc44336fdbf3ece1a46178e1125420d26f2632800ee0c3ec3974f31a92425a520dd758201db83e1d2aa553bedca1cdcd0e4b5d9de2a79bf1aa542d1540e5344ed634ce8f839fc70f21056f5be36e10e3ed46f7fde0bc112a3f858a48ee333d5c22dfaa38c0d291f19c1d2dfa7dec72853ee9bfe963e21af2a0c006d2f7bd6e55c11736db7565ceea8b8fb28b48a9c1974ba03fd5d1196b72a1db69cde77e72df11874754f93b81badd656c3d68b030fb2516052843e45a1d0ce7641f0c06f07e3c222b739652fd1a02c51ec8ea18156d57fa42557d3