*.fejo.dk

Issued by Thawte RSA CA 2018

About this certificate

This digital certificate with serial number 0d:e5:0c:d7:97:44:d4:67:9d:0a:eb:b8:a3:7e:41:cf was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.fejo.dk

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:e5:0c:d7:97:44:d4:67:9d:0a:eb:b8:a3:7e:41:cf
Serial Number (int): 18469260395594012753342669732162978255
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: ec:70:e3:6d:e0:78:53:d3:45:d2:0c:08:6a:53:92:c9:c3:e4:33:0c
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a

Fingerprint (sha1): 24:2c:41:b2:a5:bc:21:49:37:d6:21:57:e7:e1:03:fa:a7:01:74:c9
Fingerprint (sha256): 92:1b:76:a7:fb:c6:cd:37:fc:cb:fd:a4:25:8e:54:d8:07:56:78:ac:e8:26:aa:cb:ed:bc:0d:70:37:c3:42:94

Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl

Check the revocation status for certificate *.fejo.dk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.fejo.dk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.fejo.dk
fejo.dk

Other certificates including the domain name fejo.dk

(limited to 100 certificates)
*.fejo.dk
ssl511741.cloudflaressl.com
ssl511741.cloudflaressl.com
shop.fejo.dk
*.fejo.dk
sni.cloudflaressl.com
sni.cloudflaressl.com
ssl511743.cloudflaressl.com
ssl511743.cloudflaressl.com
ssl511743.cloudflaressl.com
shopv2.fejo.dk
sni.cloudflaressl.com
fejo.dk
ssl4028.cloudflare.com
ssl4028.cloudflare.com
ssl320822.cloudflaressl.com
www.fejo.dk
fejo.dk
shop.fejo.dk
ssl511743.cloudflaressl.com
ssl4028.cloudflare.com
ssl4028.cloudflare.com
www.fejo.dk
*.fejo.dk
ssl511743.cloudflaressl.com
www.fejo.dk
www.fejo.dk
shop.fejo.dk
ssl511742.cloudflaressl.com
ssl511741.cloudflaressl.com
ssl511742.cloudflaressl.com
ssl4028.cloudflare.com
ssl511742.cloudflaressl.com
ssl511742.cloudflaressl.com
fejo.dk
shop.fejo.dk
*.fejo.dk
*.fejo.dk
www.fejo.dk
ssl4028.cloudflare.com
ssl511743.cloudflaressl.com
ssl511741.cloudflaressl.com
fejo.dk
ssl4028.cloudflare.com
ssl511743.cloudflaressl.com
shopv2.fejo.dk
*.fejo.dk
ssl4028.cloudflare.com
www.fejo.dk
www.fejo.dk
ssl511743.cloudflaressl.com
fejo.dk
ssl511741.cloudflaressl.com
ssl4028.cloudflare.com
ssl511742.cloudflaressl.com
sni.cloudflaressl.com
ssl511741.cloudflaressl.com
ssl4028.cloudflare.com
ssl4028.cloudflare.com
shop.fejo.dk
ssl511743.cloudflaressl.com
ssl4028.cloudflare.com
ssl511742.cloudflaressl.com
*.fejo.dk
www.fejo.dk
www.fejo.dk
ssl4028.cloudflare.com
ssl320822.cloudflaressl.com
sni.cloudflaressl.com

Certificate

The complete raw certificate details for *.fejo.dk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAqEo/T19R/npFNDKTvqG6
IGUpuQ+9PxvJDnpnnqzv4YE+HWxYbYJaqRxUE/ZP3Vd12SjDLFuFis06/WPzSfWh
hZnrCIdK++lU7Yo89mjbw87LIX7BwVyviybLASjdePtfwO9cZTB4bEwj4pAzY6Gm
zShJlNKYtXhPbtfD6x1Po43527itPIjToyrsHAuqg3fNOxAI95yPgXbhLzGQoOMU
AFFPRxbbq0MvxuVfQQXrae82G7Q/Ilp87qG9HNZzRz8fFloZF9S9grkpIqIvsU2S
lqtD8Ld04ffUc1t14ZJ6gCFE9nvTqjA6naDY4aYm01oV6ZcGKmqVLXxAXBnZlblS
BesOF1H8z3vFUIveu4YByRugdbyguB75wzvU9q+LbgIecC05GeqWrPyh8iO/+hCm
uT75jdmM6PPJW4lL13yMWw7fH4BYJNk7TAhjiJdzvW1wd/aQae3k3o6JCnVmiWs7
OcebuQmiqwG8CXDjgu/95DELWgo/uZY/sUsLhY0OpQ9hmQcCoKaK1jNrloj77pYj
TlU4awegMN0vXrk5t8IQKJ4X6jcCeHtyxlduuD+TF2fnubhpoNQB4V3mmeC71EcG
rzXJc8z056B0i3c70lkSZ9XuSzgZYQ1m7mhZeK9q/xybWFx1BDoejWuj4JwYpHML
3vIf46XcZvGi+qhxHe7SFaECAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18469260395594012753342669732162978255
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.fejo.dk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 686563416618409912233134921253237311063749251534828891301266525712593146380973700126887351610439864390502636772968923185891890508242877841830780428435101656380757193386213297097881551321730716489352287840455094430294497272545346719786978022107898967316548587286163730062790878238538248272000350652073436146377567283041706975218724665526923778000308433859841411268146979426139335653548375428589430189392267237979131677374915985839871239481460149871468341744670220676402802817541922442640350318542984995358902868744384075336251460022627197542883867312141145631406776339203100360004873239220955356269990388953412275283157379557725527921470669311904283369412457905677226939517675463649591360909505133951146883355808669086574084764872047224300648369434503501100100064847216363444232634536097638882572169964156318364560829915068975435467986136442495318962814536996595862680101542922960270839258645644158553681997982628611053227747238811455274749638945897665393594977701887085520716793236520281733957425734571814068160609107627216728385588199017037407506977943605915268699022272611822437065372591088279992476790415169178004902168523195484629317761356698088511813666390705200925575197152409449681867729560631158815196329896316997421130454433
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ec70e36de07853d345d20c086a5392c9c3e4330c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fejo.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fejo.dk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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