matomo.newwweb.dk
Issued by R3
About this certificate
This digital certificate with serial number 04:c0:d8:a1:31:e2:ad:25:71:9d:0a:c6:64:c8:4d:66:72:0f was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=matomo.newwweb.dk
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:c0:d8:a1:31:e2:ad:25:71:9d:0a:c6:64:c8:4d:66:72:0fSerial Number (int): 414071308394542158987893275682324332573199
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 0d:55:93:b4:d6:e2:43:ed:b0:91:3d:04:fa:ea:c4:f3:0f:b7:b6:5f
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 98:4a:2a:38:3c:e4:1c:f2:4b:0d:f4:a3:de:2a:82:2e:19:79:15:9e
Fingerprint (sha256): 89:e8:9f:a3:e6:45:f2:65:98:f6:8a:cc:6c:2e:fe:41:39:31:e3:bc:d4:bc:bf:08:7a:e5:6d:3a:3f:ca:b4:23
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate matomo.newwweb.dk
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for matomo.newwweb.dk
Public Key Algorithm
RSA
Key Size
3072
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
matomo.newwweb.dk
matomo.newwwebcms.dk
matomo.newwwebcms.dk
Other certificates including the domain name newwweb.dk
(limited to 100 certificates)
newwweb.dk
image.newwweb.dk
mail.newwweb.dk
image.newwweb.dk
newwweb.dk
newwweb.dk
mail.newwweb.dk
mail.newwweb.dk
newwweb.dk
image.newwweb.dk
newwweb.dk
image.newwweb.dk
newwweb.dk
newwweb.dk
matomo.newwwebcms.dk
mail.newwweb.dk
matomo.newwweb.dk
newwweb.dk
newwweb.dk
mail.newwweb.dk
newwweb.dk
mail.newwweb.dk
mail.newwweb.dk
newwweb.dk
image.newwweb.dk
mail.newwweb.dk
image.newwweb.dk
mail.newwweb.dk
image.newwweb.dk
newwweb.dk
newwweb.dk
mail.newwweb.dk
mail.newwweb.dk
newwweb.dk
image.newwweb.dk
newwweb.dk
image.newwweb.dk
newwweb.dk
newwweb.dk
matomo.newwwebcms.dk
mail.newwweb.dk
matomo.newwweb.dk
newwweb.dk
newwweb.dk
mail.newwweb.dk
newwweb.dk
mail.newwweb.dk
mail.newwweb.dk
newwweb.dk
image.newwweb.dk
mail.newwweb.dk
Certificate
The complete raw certificate details for matomo.newwweb.dk in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEkjCCA3qgAwIBAgISBMDYoTHirSVxnQrGZMhNZnIPMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzEyMDIwNzAwMzNaFw0yNDAzMDEwNzAwMzJaMBwxGjAYBgNVBAMT EW1hdG9tby5uZXd3d2ViLmRrMIIBojANBgkqhkiG9w0BAQEFAAOCAY8AMIIBigKC AYEAuMaAvG/A3ptmPLbM0TcR5dB8qYDPVKiZOHMZrYNJz3TyryWlBMEfIZJsBxD6 4rL4rqgzkGhveqUhOWaCPnATWdzzaYnkSieTfUsnH2LSnXpLEyVQ5lp4eU4Kd7Zd 12WU7iCU9Dmqu1Covfm/R6f3nIPtyJsIwJJnv0CgxyYK+1Ed7jJ3cwFooQ/fpqip 73l1safvquQQlkGi/XebQnLqOLzsUauSiKrJl5Sp6lNYpkKN2qnlKS6hp1mEEdRv 0iiGLKtgNPTw6YVWjlIP62/EtmdRBOpmPkEJjip/zRgkgGqmaGg6wLtTM4jTi8E1 Mai5OxPeZnLxtThNSGQY5oN3hhAZHa/w1PxspIdpQ8Pjl1NtTUgaJSJHCMGm6xJa xXYAQyU4nUxd+9x3+xfRX2KChuT+nm4e8AXxJkRttLP5X/ErvVP0HajFje/u49se IWp9MElm5/9TVUiyOi+HsSq7dYYA+VTxPs+OBXw7nv7C/tcDuOObX1OverggP3GB AaSJAgMBAAGjggE2MIIBMjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYB BQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFA1Vk7TW4kPt sJE9BPrqxPMPt7ZfMB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUG CCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3Jn MCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5vcmcvMDIGA1UdEQQrMCmC EW1hdG9tby5uZXd3d2ViLmRrghRtYXRvbW8ubmV3d3dlYmNtcy5kazATBgNVHSAE DDAKMAgGBmeBDAECATATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsF AAOCAQEAIuUXjX579H2XrUqxUyxv7t7LrSO+74txd545VsG59G3wttT5q37z9Ucj tVbn8njdnSke54fh9idJrZ+mJnsPyhKbi//vQK7gV8Fg4n7qPQH3Y3Rjq+jKuGoF 77EJ9H5zSziP/eURTpO6Rl1u6s9sC27kscFwKQ1Xc+IF+food1j2N4CZDQi0jpoA OVSKbhK9aLboMvjih1G44YuuYbbeGVHokwpUnXBa+3odpXeQJ0rpQYpsv1lAlVhn qHUrjGUMK/o//N13HvFctTK0r2HQ4MTL61t9L9minZNG0M+tdHoqKNPDJmUAhbkN GtOs4hMVLbA1gGlRCnHDXX4GHvf1xw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBojANBgkqhkiG9w0BAQEFAAOCAY8AMIIBigKCAYEAuMaAvG/A3ptmPLbM0TcR 5dB8qYDPVKiZOHMZrYNJz3TyryWlBMEfIZJsBxD64rL4rqgzkGhveqUhOWaCPnAT WdzzaYnkSieTfUsnH2LSnXpLEyVQ5lp4eU4Kd7Zd12WU7iCU9Dmqu1Covfm/R6f3 nIPtyJsIwJJnv0CgxyYK+1Ed7jJ3cwFooQ/fpqip73l1safvquQQlkGi/XebQnLq OLzsUauSiKrJl5Sp6lNYpkKN2qnlKS6hp1mEEdRv0iiGLKtgNPTw6YVWjlIP62/E tmdRBOpmPkEJjip/zRgkgGqmaGg6wLtTM4jTi8E1Mai5OxPeZnLxtThNSGQY5oN3 hhAZHa/w1PxspIdpQ8Pjl1NtTUgaJSJHCMGm6xJaxXYAQyU4nUxd+9x3+xfRX2KC huT+nm4e8AXxJkRttLP5X/ErvVP0HajFje/u49seIWp9MElm5/9TVUiyOi+HsSq7 dYYA+VTxPs+OBXw7nv7C/tcDuOObX1OverggP3GBAaSJAgMBAAE= -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 414071308394542158987893275682324332573199 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-02 07:00:33 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-01 07:00:32 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'matomo.newwweb.dk' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3184 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 4193251103216937357650423661627710214031520787217690027998961098195423013658330721281308713935264145324357463651372500239905549205923725922833563989160132210836883677049914623326010739454137547226582788171055101429157253850803482312218739071291412275494487941354784372890396641408052218287827605501355407723784788467449056629157317537559258561306885279634380169131644903531933807144565856857229113815522917964485675030162271114121415902313446234924679480747012146668055570691697460079585936560720557293226590060816148005855847878677169097227238465565023944430543488777742238180844354030070796662718664943727129645839919729849296356197722935692926908323793976147273303824403711041487056270533830732995900732880557873922406017189844986867996049936561022057853714843377485005352502579507494064913559511556303941638868296837147779575550906943801656459129954641274139364288816726845281083406099415092036503499933923421484216329353 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 0d5593b4d6e243edb0913d04faeac4f30fb7b65f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (43 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matomo.newwweb.dk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matomo.newwwebcms.dk' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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