novaflex.se

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:b2:1b:fa:7c:78:de:b3:20:cb:96:9f:8c:38:b5:22:dc:03 was issued on by Let's Encrypt.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=novaflex.se

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b2:1b:fa:7c:78:de:b3:20:cb:96:9f:8c:38:b5:22:dc:03
Serial Number (int): 321944308861903705451120086796320066690051
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 11:a3:8b:3c:b6:e9:e2:33:70:30:be:16:8e:41:08:6a:d7:68:79:ee
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 3a:b9:88:d4:87:f2:bf:bf:27:5c:09:b6:60:c1:75:1c:1f:b5:85:f0
Fingerprint (sha256): 7f:c7:c0:83:ad:e0:0b:8d:19:c4:78:55:fc:54:49:e4:40:c2:21:ec:3c:bb:d1:c9:7c:97:33:99:2c:c4:ab:01

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate novaflex.se

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for novaflex.se

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

b591762.web05.cust.bluerange.se
novaflex.dk
novaflex.se
www.novaflex.dk
www.novaflex.se

Other certificates including the domain name novaflex.se

(limited to 100 certificates)
novaflex.se
novaflex.se
novaflex.se
novaflex.se
novaflex.se
novaflex.se
novaflex.se
novaflex.se
novaflex.se
novaflex.se
novaflex.se
novaflex.se
novaflex.se
novaflex.se
novaflex.se
u318363.web03.cust.bluerange.se
novaflex.se
novaflex.se
novaflex.se
novaflex.se
novaflex.se

Certificate

The complete raw certificate details for novaflex.se in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA9FxPyet+aVLRF+A7I1oX
L/QHEYjaXZRIEVRS1Ut32R4qgZ56o7Fvlne5byyE081tjm/eqvBcThsVlDVaU4eu
4oR8rAqqMrL/E2MYUTdPz6X56rpPIQ6rm2ixT2+cssyl8JYpiyqIQv9qmqmyO0wn
N2heLfs+fu9HsHGOaxNDc6qNjlC9XEKjVUBDJr2ZhOEFpypNGlCfIoOwH7c16VW2
yhO4w36WMLeBEoY4yLS+CouUDgwYWpZN2DCk0jhwXqMwf7iMfQJsKULhXqrnYU/7
hS9Qs4PtiIgQz9w2bE/Zrgt5BryFtSEmneoi5PEab4gJZ/2TC03Ft1thh1JUJDYL
ag8BCrS4y8mCdQI2a03S7pseN32do/CdxCwOs6I3ZrXYqoRkbgCqfSZpIwvDbLi8
/4xIMim95oQIja3UiuNuKY9F5j0k6YAf1XWy1XOaP1+/VwW/TuKhqHeFkaL3d/62
9A4oFKAtx5f2IURRRkVkorVcwXxU2nsEJ2aP5CvWbtEjlV4kuVXNathD08zwQqzt
EWrKhZeJ4vQm+cYGkHSMte35ojCzlXZECkTxgT9yI1g6WzbK2lDE6N8DUdfYLxVj
eJyZMatcBCRPCYCm45wKBeJo5FJf2PUmVGpzYynG+8Wfvh0B88RiBKzYgR/ld9pJ
yoJPUn8GvTgj3Bmnr0GKMHMCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 321944308861903705451120086796320066690051
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-24 12:22:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-22 12:22:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'novaflex.se'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 996904241567690569346769797460180019905217635715619758244413668061996042684171268575628171996033262548728393315615648422785607504113411562785774889671358857689585747592675756698967073949845853398143817995961243942373340361939512945562124884368908163227316176429868552935975218644471753708860151188663510422948709756744761979902580367860357965676286026608149786563579261414389004754905052450158111604678609280786784281608971087455095329030000766914621917962715961208904337986058402675233766806638337008869999821188254188258459306281246062239078305173418841736328289427461929289239559877359298516423368422052541551027596730327527783658556311071198726160628707088002173656768391265214099659216504289377470945914530257774303715493997283588807260171790184251389767180714067754281272874268487095439621205826682013352906992322076546013293295134716346668729916506172445085489456767561121065786191922190257964298310778094952639989458446738720753170556493785309385250698673876388865350016120023784946867552783425808245462146406624444726906740069631530663824692432156756689949311386720022923142857674937264721953554394040544141149787100075922360336930189061552283433698270805583838332677427560339195807599534672362465658544962180977773232402547
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							11a38b3cb6e9e2337030be168e41086ad76879ee
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (95 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b591762.web05.cust.bluerange.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'novaflex.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'novaflex.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.novaflex.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.novaflex.se'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016e9d940afa0000040300483046022100f350b3efb7dd849fced0b49435449df04b88b5fc0fb9d598d70384cea81dc1fc022100f352c82d6181518deb7f16a598aa90ddb4af44a1ee25e1af56f63014129c50320077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016e9d940b2e0000040300483046022100f5a34957140a1f626ccb07046dfb7a2aa571f204a608d2b45613dacf603cac8b022100a0bc62c6b685777a1c580d23ffa8cbab39820965d85495a384d48b86079be9ce
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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