alvira.se

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:71:9d:50:a8:cc:20:8b:ce:1d:31:b3:c4:1e:5b:c0:c1:0b was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=alvira.se

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:71:9d:50:a8:cc:20:8b:ce:1d:31:b3:c4:1e:5b:c0:c1:0b
Serial Number (int): 299997872860051131990229007334481653186827
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 42:28:b5:43:58:67:e9:91:ce:6e:35:bb:77:3c:21:59:aa:01:85:07
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 97:e4:a1:fb:d0:b0:80:e8:b7:47:3d:70:18:12:bc:75:53:31:9c:e3
Fingerprint (sha256): 98:a2:e6:95:05:31:f5:8d:90:92:25:88:08:35:47:5a:53:e9:1a:3d:d6:73:ea:d3:f3:d8:c3:c5:56:ba:f2:df

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate alvira.se

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for alvira.se

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

alvira.se
www.alvira.se

Other certificates including the domain name alvira.se

(limited to 100 certificates)

Certificate

The complete raw certificate details for alvira.se in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 299997872860051131990229007334481653186827
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-28 23:55:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-27 23:55:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'alvira.se'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 738668327497343828071685591104836267388668717331858886639583672936038812523218082926474902307491114133618352634805289847607984402369592445116634368000242692795555600610692936309425783328041848836588314288877340017742995085767969614602574215994523386790656604307222848383391824304972506597376222915539406789841676618744773974395736296037695612959598711765523484033334895901318068481179966541911245862560814545710175906133223133212747567291098285499061749914525931499486163409720997788293613066172601949499200283487075866664410183678523004058534693668426386752521860341338555579368478490082550851180044854996768984150032875882746571625102905337105383210834318914452054026886989153545841178023657402149694595504220687692723558618671375355300693340445083244823846009314517455660982305101698075340949608874586982708936875759715418559802566955085566739305541683801341213819697120210522459186721679987801395057264975234305596710228485190488749442566385571687309511838984554588934846029550027833105278708704482955802607578588538586721351681304876206289784392345429339587891151528931837943078879089663475125516122962472053534948564968647774794184853926038329826253312223140789725787015154140116152343785927480133986976794231856697513880905553
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4228b5435867e991ce6e35bb773c2159aa018507
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alvira.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alvira.se'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf64000001630ee620d800000403004830460221009aeec3619632a0e15890f877529e95478e9d00b2e079dc169c05e25083220205022100e398acbb8c86012ff93d96947ddb83539ceb3bf47da2ea5a2373c5836e2ba53e007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001630ee620e30000040300483046022100abc6843af54381634b7881596ec0b829bda6179f064169e97e4f8e33676d312a022100a1daea93f1c3b0ea52e31ad2217031869a66d887c1479ad48577bab679c4a940
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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