flagermus.dk

Issued by R3

About this certificate

This digital certificate with serial number 04:eb:95:7c:f2:06:7e:10:ab:f6:8a:5d:72:da:2d:04:85:6f was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=flagermus.dk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:eb:95:7c:f2:06:7e:10:ab:f6:8a:5d:72:da:2d:04:85:6f
Serial Number (int): 428614203678501444608990205587918298580335
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 75:74:05:de:dc:50:4c:74:35:89:d1:09:46:12:0e:d2:c2:d7:3f:8c
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 20:cd:ee:94:82:e1:39:29:45:d1:9b:f0:fc:25:aa:45:2f:b1:e0:9a
Fingerprint (sha256): 88:18:77:20:16:58:46:ac:f4:33:6b:a5:7a:8b:42:9d:87:cf:54:05:6a:49:a1:3b:a3:87:52:9c:9f:ff:77:bc

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate flagermus.dk

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for flagermus.dk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

flagermus.dk
flagermusen.dk
www.flagermusen.dk

Other certificates including the domain name flagermus.dk

(limited to 100 certificates)
flagermus.dk
flagermus.dk

Certificate

The complete raw certificate details for flagermus.dk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA8aiJlHQnXVGtg4FyGf21
A/ioeSdApHl71vN0Te20BGunZF2MkVU/sDSHV0JmNAjzfRyVtteSslkI6BmtUHUI
TxbObjrd4W2Kp1filodEtsxCw8IkgTInaZTySkgUB7PBFEI3I5JKTpLl2j9+yyj0
36N4YeUUM2m586jjZYdZPkBNQeu6+vX0WZTBXipmD0k7th3H4PdSB8FpVEuUedKd
6fTepFl5KWrg3VYrR8kQypjRBU8tgV8UfSn/CzsE28MuIo/K/FrGCgAsSkB+WX+m
FVaukMkilPOonMxoy8BcmNaOpDOOzBRxxh8C6Sl7q33ImshlhDkviJACPdf9EOHc
udZ0qyeccxCM6DnMvlESY4C7zJNQ1wV2Xhqir3uQOQP2lr65gzlkhcfc/BNWJSvu
XkeD5tfVsj6RdUnR21dWQKKD17LTyZVtJ0/0B7d6NaV0qMihm8vATPoXUrUCCUwC
9VCcOulBYigptUJsqBwL5knsYx5ghq9f3HLju4PsrSnmlsQ9OMnuS4Gm7xA+87TY
vtMucpw1niXkLV9FzT7EXKdUIW6/mgWEM8XzEdvcfSuJpqohG1Lze8/bruds0S5e
hyh4sYmzvF3ayjJwnMf0rgLwEuiVBotS+386H8FvHQHHxHafD+E/txLPbekhpnTd
JUibesKHX0m1mK4q+bI1u68CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 428614203678501444608990205587918298580335
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-30 00:08:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-28 00:08:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'flagermus.dk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 985880051220023102428423818179444254107268099737709087158313761107627900260196182235058791914354241969142526744118698625912695000072867351288066830077442826567965610535371829444874241387701258209742470907389478135234950577112264857586067478310236563180928538950704826258857078323807710789926785334727515548449216745229513089098129606246046125257155447098681236140570844586113993678215981097525771006925191007175328408114893855641878782510387594490183755064842697627194364062631075821459904585342267013708570564639035052980009372339176854533534905070445204139505503988154727751003094638917496618279899897346691911015403753670890730243888250374301656023189316296538110334218491363826062468880526126831096261362553554186457139706994308156239135315470137586604661140138858282546477495870147773404672108029690206483906520365378556277324591485150191620900109341190959621089806194745511509801255437690661210733391470703265833210307787932198303580796510406143545680402973211505763445002254858981343703501101402611002852650346039474553516468127518555446600192133083956182292969049763147807931472210616419934786331027524025886443104062937085388585773715732359624874638139109588246186919300417867493445614572831350468871121753475366927514057647
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							757405dedc504c743589d10946120ed2c2d73f8c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flagermus.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flagermusen.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flagermusen.dk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018a43fc4a230000040300483046022100f2a982b114a829629fb14764f35751a2449978a1da99fd161e13b5f532d7d9b5022100aed42977cdad3ae18a67becc5a14c07f404f24e0bc71d8fabc46883a078758de007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018a43fc4a710000040300473045022100e329ccadd2a6b8691664d4b5b6b2ef028efa93ab3c7ac591f5c6da083091486902200fd765598cb8bdea9dfc7c9c6d608477eae5d35b0e413a60bfa5a59856c13991
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0006ee1d2e96e35a1dde6733172523bf06cd496730cf5142eaec481b9297cabd2020a537b63d55e383b608b29d76d6c1e73973bba3422e3a5afd4a26f4c8f85b341c9435431bf032918c759cfdfa4b5d15728004845e77a69a52ee04ba3a9c6fca53d5ba2ac9fb5b1699eb08ae7b328f83454a4e05ff87cca50e5396dabde953950e134c2b599ec981356e69832de7c0e5cb49c3b671a57d60e5bb597139ce42bfd5da2ba6a2c83adff64684f056c6594de4e43e943d09c85da3dc0d98359a8a13c2d4e3e5f742b4a9d5a5a80461bea191735824edb439ece69b0b3afad6c0166d92e9f4a7de647123a911fa3accd466cd2d32225be7cbba6d32b7c2f776a03816