eenjonkoping.se

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ee:c2:46:d0:67:4a:ff:63:4b:69:1f:56:16:20:5b:fc:dd was issued on by Let's Encrypt.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=eenjonkoping.se

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ee:c2:46:d0:67:4a:ff:63:4b:69:1f:56:16:20:5b:fc:dd
Serial Number (int): 342582299041351374295665009476859116387549
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 8f:0a:69:e6:61:0b:4b:a7:b3:1c:1c:86:8f:d5:d7:24:58:0f:f6:0d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): fc:28:1b:a1:eb:3e:5f:dc:cc:b5:cf:e2:97:26:7a:eb:82:7c:32:03
Fingerprint (sha256): 95:d4:37:3d:74:11:03:d9:16:c3:aa:10:0c:d6:15:b1:87:2e:a9:81:91:b2:90:4f:34:c8:ec:e2:43:11:9b:b6

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate eenjonkoping.se

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for eenjonkoping.se

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

b502871.web05.cust.bluerange.se
eengotland.se
eenjonkoping.se
www.eengotland.se
www.eenjonkoping.se

Other certificates including the domain name eenjonkoping.se

(limited to 100 certificates)

Certificate

The complete raw certificate details for eenjonkoping.se in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 342582299041351374295665009476859116387549
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-19 11:46:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-17 11:46:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'eenjonkoping.se'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 942691153434592311471258772811213043096658497735907905371917521016030471073832323475528306707739485292347366798794228963219503378763879827747411857182547539406881231420782419661447950308519213775585544664268263073310727351459701715504893069389187697570981857684858129559623287142867371648031238540264767013196046554234355995806973607011625283489204492975044548624208632278872515286395555486633134943961534563354973769193541499033891772486070880298835256541301236153910101972549102591746299140473877771180633128686269508275980093566030588164060146864747276431448105283162946638192626933521409434358181920382710784481121699794970273527333245085647706068655869099805903203818578115598051689967599604555621890004676336467899832723843294154553221516308275614026638088637909775328222985462227621683045002873589972251272108080316170355370674592299221803831151179103376074946219070468462993893602747831152962420848471539842458938425614490557358126990559648149280925903624401266853312844261356945531040360972888052713962709865356728939330754272873695992448502072905331544628708256585486086582512249504423966779701334077748613535458957436813724561994357574530909842301257882848180728236340418376025659314838711566210289015936528711913848696559
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8f0a69e6610b4ba7b31c1c868fd5d724580ff60d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (107 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b502871.web05.cust.bluerange.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eengotland.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eenjonkoping.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eengotland.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eenjonkoping.se'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016de40dc1da0000040300483046022100952f15f0dc43a8e34d5ee09101b2bdd0bdd3227a12e766723fa5760ac0ed79d7022100e1a458e7fd1fdfd0346daab0d4941ea7989b83b61a179ba2f157d47303ac36b5007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016de40dc1f5000004030047304502202d18ebe40689f027de48b97289aff7effd91f4fa02a9a47ffa955d1fb802e42c022100f05492632f6f3094e6d9301f93619d2cdec478e05421082b7fb6b19135e7b3ad
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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