www.adventureholidays.dk

Issued by R3

About this certificate

This digital certificate with serial number 03:f0:55:81:d9:bb:93:9c:41:df:05:3e:db:79:bd:0d:51:3a was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.adventureholidays.dk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f0:55:81:d9:bb:93:9c:41:df:05:3e:db:79:bd:0d:51:3a
Serial Number (int): 343118284458386673595561842354871524479290
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: bb:5d:77:69:9f:cb:f0:c8:ec:91:14:c4:22:34:a4:b0:8e:18:73:68
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 47:45:46:ab:b7:e2:81:19:57:e9:20:eb:74:22:be:55:9f:27:8a:1d
Fingerprint (sha256): 85:e0:0f:6c:41:1e:a8:99:d9:1e:b5:f0:da:76:f2:34:ba:a0:24:52:db:08:60:8f:d8:09:61:5a:f8:2a:5e:7a

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.adventureholidays.dk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.adventureholidays.dk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

adventureholidays.dk
www.adventureholidays.dk

Other certificates including the domain name adventureholidays.dk

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.adventureholidays.dk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9OypZt98kfjvDFq5rQ5
LAT1HvpMAPyyqcMAcQ+7rJiIA5iOPTQIHc140VZXeidtqwH3XfR25h9Yq+EirwPF
1LpPhOJFvpSbHpAzWBN+owJ170xaFJ1i4KMfQa4Z4MhNm7qLHdVYjOaMRcz3xmuF
8Rggo+NCnr0Unr4YGBenTnlgx/W/1AjZzH0lcMsLbQofPG+0S+xLGdFj55+Kb9Yj
Bu12HWOXxzUvx5bIkzIFw3fLVSAmFFUPgCt9BXj3+EPDET7Emrrn6h2jDYD3plBd
3/XEXEYWrAWdsF4TZH7sAPmxIlYJc65kRwh4tKM+CWH+88o/GyKRXyaUqAzp1nmT
PQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 343118284458386673595561842354871524479290
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-21 00:03:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-20 00:03:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.adventureholidays.dk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22196095464448725035385855541059429263427179297470959814736179750571679385108763046653714169806277544556267767600493331004589014200763956746345105814393865665882759147402257230349751290082644802568552611522545908405678686049390065984209523676770133455357747393413221742085754872391272928028152943048055125396892807696077805536839869708645992412453903801289493765671291909688594307951631650306237767052573765482645666550426068587999755494342985888364255153572216203547270651735678152959035228249693594984541767282047495887066899553317994973242987385777152999942790791127948433327586317559211383458874054645544186909501
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bb5d77699fcbf0c8ec9114c42234a4b08e187368
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adventureholidays.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.adventureholidays.dk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018ab543073b00000403004830460221008e999f6e3df3dd4dfc19846a24f817ccaaca339c854538ab3f2a410a594b9261022100c74bdd0cc5dbe33e3481adf709e16860b12e1ac7efefaa3c40b586073398c5290077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018ab54309090000040300483046022100fc91f77a5346fecba7f1bf34ab5bca7c36f847b412e734a86a1d44f4eb3ce7c4022100cd4f8faafe10587747a1599f3e2ce873f238f11547dfed3dd59c28bb995d08b7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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