www.abako.se

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:b6:45:1c:75:ef:c1:6c:f9:89:c0:d4:2e:b9:27:49:ab:0c was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.abako.se

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b6:45:1c:75:ef:c1:6c:f9:89:c0:d4:2e:b9:27:49:ab:0c
Serial Number (int): 323360113082950055278058845820899492997900
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ce:fc:9d:24:6e:68:d8:14:71:7c:29:fa:83:82:a2:29:02:e6:39:20
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b3:f4:00:94:34:4c:ff:8f:30:c3:3a:f2:8a:d5:c8:4a:86:2d:b8:1f
Fingerprint (sha256): 86:9d:98:84:ae:b6:35:05:bb:9b:7b:85:d8:c3:d4:4d:f5:98:e6:2f:58:31:73:5f:d8:47:7d:b0:1d:8e:20:86

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.abako.se

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.abako.se

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

abako.se
www.abako.se

Other certificates including the domain name abako.se

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.abako.se in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 323360113082950055278058845820899492997900
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-27 11:14:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-25 11:14:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.abako.se'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 716995830615837360456500343868635550751053632140939931031052098046332508869441551636905607261489798812717400384387170039957771951573582591224983451366285216482815281914087820951790498928423814020530956384791167665653941684280958350192662257449025786822516532250609710024327574323809371485683644238155661794907061122487806677326539863577109330870033349268403333634200621515851710665404555970627051318688851252242223005244245231468444370793225197670780607197039425441960740435269002617885016092180138403646163433968314183495191479664943358991331366792796793626668394306680919611893709365104408829421407990989474341252800754750433968934609925309750302542809607570729466518196417286028246817636186344964777785958249774350073687878523629531734986974964933343889711414770486268965125846511044713458560385437004470749322210233380687545222019319545797837667658691526827901897297934315302365251905503317498446984225109510113762987238539417848456429590773872996908202888634892456133448558851739387327840638533919308003252085967248388773259443053200921245239441855212862180600434207764784834404619071352681365512545301845367824860466261130721554841127902806454600624234892124426602246130079235446628034194109593191923026336827215603740541630047
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cefc9d246e68d814717c29fa8382a22902e63920
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abako.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.abako.se'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016af93639f2000004030046304402200614aad68c9e1a3f73a4cf2829b7e85a7defdc9b60f0cce6e7686b6abbf6d27e022011ad8d557d0b75fdcdf183d458228275726374e15a497ba21f6131694218f1e800750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016af9363a13000004030046304402205b50f9f462f4eac50c26da876d0f3d0f9232114c41ec9002426abb6961092f24022046fac998c4b5523b53d91af656fdfc3e4b4f9b3ff771969fd1b72fe82727e597
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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