*.goldennails.dk

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:26:16:75:b8:ff:29:b8:72:26:69:73:9c:26:b0:d6:93:9f was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.goldennails.dk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:26:16:75:b8:ff:29:b8:72:26:69:73:9c:26:b0:d6:93:9f
Serial Number (int): 274297442005095578655372957656262481712031
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d7:4c:a6:83:91:b1:7e:80:c7:b6:ab:18:4a:57:5f:ba:0d:9c:48:38
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): bd:d9:aa:67:8e:9a:f5:fe:00:54:95:31:c4:ad:77:2f:62:36:08:fb
Fingerprint (sha256): 8b:14:d7:20:9c:db:fd:05:3e:1b:9c:f4:14:9e:cf:67:b5:7c:ab:1f:3b:0e:e3:97:5a:51:08:8e:1a:f6:9d:4c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate *.goldennails.dk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.goldennails.dk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.goldennails.dk
goldennails.dk

Other certificates including the domain name goldennails.dk

(limited to 100 certificates)
*.goldennails.dk
*.goldennails.dk
*.goldennails.dk
*.goldennails.dk
*.goldennails.dk
*.goldennails.dk
*.goldennails.dk
*.goldennails.dk
*.goldennails.dk
*.goldennails.dk
*.goldennails.dk
*.goldennails.dk
*.goldennails.dk
*.goldennails.dk
*.goldennails.dk

Certificate

The complete raw certificate details for *.goldennails.dk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFaDCCBFCgAwIBAgISAyYWdbj/KbhyJmlznCaw1pOfMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODEyMTIxNjMyMTJaFw0x
OTAzMTIxNjMyMTJaMBsxGTAXBgNVBAMMECouZ29sZGVubmFpbHMuZGswggEiMA0G
CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv2VdZXfrJSZORLzC93eIovsEXcKXG
zVWj24i3zg5mKdJtYW/fxjaWjO2rNcUxsrpJWx6M2cMQKtcGAa1Hlc7aneXYCZzz
XRHEcC53PC8ny6KA+O+M7XnJyaVOXTwAGip5A2yDhLKIarGbEhGlePRx2bggNey9
KscseQsEcomM52/oDJ/Bj2pT9uZbARpxlAk/n1kEzTLJpsOhSfF6Oco5yT2fPw7W
5bJ/DUszfzB1NIEur+B1tqvreA0rTSG+YjE0hDjQ0ka0EXEH2cX2ZF1aBvD9wwUp
lxHyn62SKZi7TRZ5Pyr6J/Z5XnTX5VsBZ1A82hVCgxRTBFbWV3glf0eZAgMBAAGj
ggJ1MIICcTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsG
AQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFNdMpoORsX6Ax7arGEpXX7oN
nEg4MB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEB
BGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0
Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0
Lm9yZy8wKwYDVR0RBCQwIoIQKi5nb2xkZW5uYWlscy5ka4IOZ29sZGVubmFpbHMu
ZGswTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEF
BQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEEBgorBgEEAdZ5AgQC
BIH1BIHyAPAAdwB0ftqDMa0zEJEhnM4lT0Jwwr/9XkIgCMY3NXnmEHvMVgAAAWej
eeGaAAAEAwBIMEYCIQCpm4fNfbROrqgli11W/uri8Yf9QE402QWz9iwYhPRzJwIh
AMBd+3zf5lMTwVJbLTvmdUQtQEVmeYNl2tY5eWSaI0ZrAHUAKTxRllTIOWW6qlD8
WAfUt2+/WHopctykwwz05UVH9HgAAAFno3nftwAABAMARjBEAiBDLU4csRQ/6ch6
+tERYV4Z/OGp8ZaVdaWuFSWxxiPGPQIgaVRDlj/33H5jlOkUZiyLUTk+S5XagEka
lkS2wSE87UQwDQYJKoZIhvcNAQELBQADggEBAACZVnJY9cmSxDBYXLOi547dz88h
gCYff2q1nyiLbEDwNxSDe38uy+cUXqG0z2msl4mUDysPQs9tGQYRQTXCYKFdg3pF
WHYKffvt4AxMEJrNQn62OLvtV4HHQc+dMTMD+Vw0jLkg1z6PyBezeBdWTzVSKEJK
PWC82JXK59FmrOnbsZtTopLueePc467+QsnXhfgJwfj4vXAGDvgJtikUP+lWyw9T
1qYCfatmU8NvzXiFQqqElQQd6lFZTHxwv9t8ghQbczPaVg+mqGDhmXH7Xt1D/QpO
ciPyqSIVABqS0Tg74LRuzSXaKvJUlMxLRnxbs2wS3fARO6Vz00MRDLPltyU=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9lXWV36yUmTkS8wvd3i
KL7BF3Clxs1Vo9uIt84OZinSbWFv38Y2loztqzXFMbK6SVsejNnDECrXBgGtR5XO
2p3l2Amc810RxHAudzwvJ8uigPjvjO15ycmlTl08ABoqeQNsg4SyiGqxmxIRpXj0
cdm4IDXsvSrHLHkLBHKJjOdv6AyfwY9qU/bmWwEacZQJP59ZBM0yyabDoUnxejnK
Ock9nz8O1uWyfw1LM38wdTSBLq/gdbar63gNK00hvmIxNIQ40NJGtBFxB9nF9mRd
Wgbw/cMFKZcR8p+tkimYu00WeT8q+if2eV501+VbAWdQPNoVQoMUUwRW1ld4JX9H
mQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 274297442005095578655372957656262481712031
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-12 16:32:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-12 16:32:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.goldennails.dk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22198878312886093875909226519985377091944901666751702281270270424572117364136760655279563965418334859317745339496880511995604509436222043065782243115597487362348974293249407645879339814477196661081169654677570983584677120333424027109658909130947842271972256368942896427666303562868503607202351578256543916989317995764739897162704260786153770587539310530495914309968063446883164273671802164481795400070029814252889337009091140099236664701536428879127411235268333200259956074851450619705038466454291954168681855913398608414800036985588818772765676796934028299581281287568262188301016383301666906317804965661373575939993
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d74ca68391b17e80c7b6ab184a575fba0d9c4838
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.goldennails.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goldennails.dk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000167a379e19a0000040300483046022100a99b87cd7db44eaea8258b5d56feeae2f187fd404e34d905b3f62c1884f47327022100c05dfb7cdfe65313c1525b2d3be675442d404566798365dad63979649a23466b007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000167a379dfb700000403004630440220432d4e1cb1143fe9c87afad111615e19fce1a9f1969575a5ae1525b1c623c63d0220695443963ff7dc7e6394e914662c8b51393e4b95da80491a9644b6c1213ced44
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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