kampanj.fortum.se

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:cf:17:69:07:94:64:9d:f1:a3:fa:a9:7b:52:a0:d3:fa:ca was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=kampanj.fortum.se

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:cf:17:69:07:94:64:9d:f1:a3:fa:a9:7b:52:a0:d3:fa:ca
Serial Number (int): 418918711268482222466515757707110370245322
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: bf:a8:d7:4d:b0:da:f7:ba:4c:8a:fa:e3:fd:44:d7:70:08:d6:00:c3
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): e0:31:72:9c:8e:70:78:b6:5e:ec:6a:bd:3a:8a:a2:5b:74:a4:0f:bb
Fingerprint (sha256): 97:95:28:aa:3b:e8:cd:67:23:05:36:b4:f6:4e:ff:8c:35:ad:7c:34:9d:99:94:17:eb:b4:ae:52:84:c2:0c:4c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate kampanj.fortum.se

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kampanj.fortum.se

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

kampanj.fortum.se

Other certificates including the domain name fortum.se

(limited to 100 certificates)
villaerbjudande.fortum.se
flytta.fortum.se
solkalkylator.fortum.se
flytta.fortum.se
solkalkylator.fortum.se
www.swingdata.app
lojal.fortum.se
elavtal.fortum.se
www.fortum.com
dc.3decorz.com
elavtal.fortum.se
www.fortum.com
fortum.se
refer.acaciamoney.com
barbaraantelo.com
flytta.fortum.se
devtools.minasidor.fortum.se
fortum.se
elavtal.fortum.se
flytta.fortum.se
flytta.fortum.se
trygg.fortum.se
*.fortum.se
cockpit.joinsherpa.io
cloud.fortum.com
powerportal.fortum.com
kampanj.fortum.se
maia.fortum.se
partners.fortum.se
villaerbjudande.fortum.se
api.fortum.se
media.fortum.se
solkalkylator.fortum.se
elavtal.fortum.se
circoplastics.com
solkalkylator.fortum.se
dc.3decorz.com
installator.fortum.se
elavtal.fortum.se
maia.fortum.se
hemmaladdning.fortum.se
www.fortum.com
circoplastics.com
cloud.fortum.com
hemmaladdning.fortum.se
kampanj.fortum.se
samtycke.fortum.se
kampanj.fortum.se
circoplastics.com
www.fortum.com
www.fortum.com
elavtal.fortum.se
www.fortum.com
www.fortum.com
www.fortum.com
www.fortum.com
testapi.fortum.se
www.fortum.com
circoplastics.com
design.fortum.se
circoplastics.com
sonnenkindprinzip.de
flytta.fortum.se
idskydd.fortum.se
www.fortum.com
flytta.fortum.se
www.fortum.com
edw.fortum.se
kampanj.fortum.se
refer.acaciamoney.com
www.fortum.com
www.fortum.com
www.fortum.com
api.fortum.se
oppenfjarrvarme.fortum.se
emp.fortum.fi
solkalkylator.fortum.se
foretag.fortum.se
circoplastics.com
villaerbjudande.fortum.se
www.fortum.com
testapi.fortum.se
fastighetsagare.fortum.se
elavtaldev.fortum.se
www.raugh.club
energy.fortum.se
elavtal.fortum.se
edw.fortum.se
fortexadmin.fortum.se
www.fortum.com
edw.fortum.se
elavtal.fortum.se
www.fortum.com
design.fortum.fi
varme.fortum.se
kampanj.fortum.se
flytta.fortum.se
www.fortum.com
installator.fortum.se
elavtal.fortum.se

Certificate

The complete raw certificate details for kampanj.fortum.se in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 418918711268482222466515757707110370245322
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-11 04:38:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-11 04:38:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kampanj.fortum.se'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 612941265789286459635517795244118911616501012539967740376281848139215458012948299017391566732410463907997898247567943040678416564179542038370670838303948361899098614141671972450126541399658332645352771080878324777837779594243606459233723116900727942628667240998944869482420405223724732180004246901013268247285769044099830035517632429205027860627690120376315514639560176099046492423756112712375350759901131777782611436768554059496317361152195624815549176249038578616515137891978133830762395655411977406144019927395345379080213119148058606022967690121779526055172868659137166482006248610356406387394790896492276880981378880938835255758957138414707901543971832641406442023289637688280691524805387622376949720142070586523423927822881260040622557222816187413261493967573021330929668540392765093551919591502297297221781511905182502647360614309310524966825608457528696471261926207990106276467783233671857965901457008903255671201493978847656566518866432279158193768048454094247249193099232157280617604172808908331245571668182394483988327061043124125917079025491573504594781802780026082199772745649831993294710514182483410378720625554627046265965688987392029715642608294488887282515153559704015105004707223872577717422543206259181178824736709
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bfa8d74db0daf7ba4c8afae3fd44d77008d600c3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kampanj.fortum.se'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c000001683b6b372600000403004830460221009bc077917c4814e9ed48c2306be05bb50e0e36fd9edaf8cc5bc0ca0935f42973022100b503dc86e746df2aaa546deaf810e3fc2d8ab79aa81c2c3386e004a516f7f38b00770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d000001683b6b36c40000040300483046022100d65268ce4b380e46d4cc6f9bc1a96646cd21f0dc8c62a049de23ff993fed6346022100dd568f8f86d30bc785b0d990bd1b650ffdb39f1a87a84b5c590b9a916ded7dad
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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