astomed.se

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:20:60:35:ed:1d:0f:74:58:f9:c8:4f:20:c6:32:85:85:3a was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=astomed.se

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:20:60:35:ed:1d:0f:74:58:f9:c8:4f:20:c6:32:85:85:3a
Serial Number (int): 272353779425313100749440638836482223998266
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d0:cc:05:7b:55:94:cd:8a:18:a4:79:13:64:a2:20:ec:2b:f7:ee:cc
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b0:83:3c:bf:89:2d:10:e5:bc:4a:9a:4c:36:45:f8:b5:0c:01:88:24
Fingerprint (sha256): 8a:8d:9f:1c:a6:96:71:4e:5f:51:b3:de:f2:41:22:b9:8d:cf:c0:02:c9:76:ca:cc:d0:6c:5d:dc:8f:ca:a2:52

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate astomed.se

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for astomed.se

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

astomed.se
www.astomed.se

Other certificates including the domain name astomed.se

(limited to 100 certificates)

Certificate

The complete raw certificate details for astomed.se in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 272353779425313100749440638836482223998266
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-22 14:22:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-21 14:22:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'astomed.se'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 755116598672849910469032744117766512451000697226475111092575194651762629292809749343323977338126230132864154069778520119824446836900773065770150773475071285282870804083107682266972179221019686113141334576655759957373311956249580719125995740038236601407386121625864231870953724719641913797669868998363733776638413792645329828941835806442588581844781039271218051704963727904167920468277218884211533099331510051738309047250134460670235031551619712808940350442509247419484284861456512506615005949882932821351419933427012478618585988502091533674522625847685869177493548879157908739528493934887377679689851049081484456715153949364557336735860382044389793069866155159009880853116266308265732930413139067910143901552101316237013208463054017907534441900230812773978061479838545355106268387948776836600499962326884049419142485084053765692892620604367167311090113868700131614922767312551611758126741130871966652879199789006237264535440512551690008218846750518180242945365500192052818140521523911910366680622265701245689344845778712674076778417601623562808866410960845141297757091605267949962285802123137244344974919967920227654581764942239369499570630731801005598195772356858768432171606219463625852943239933965464462958183785690338629128184583
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d0cc057b5594cd8a18a4791364a220ec2bf7eecc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'astomed.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.astomed.se'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016fcdd8cc6a0000040300473045022100def41e9b6f14f23f4c3c8a91dc40cea9a03ff566073ba5f739e7f7eaa725b4fa0220416b11e68ea89ef1edd628533d8dad6b8a162df99d7439c7bb2b3f1a5ef648e700770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016fcdd8cc970000040300483046022100c353486c34f03f074fc2372b09ff4d26732abb60cf14de4159b39d7c42964c73022100c8c03a281527546dc069b15d16a44845fcc83f16deb0407f3dffc116f6c6e091
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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