www.abako.se

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:85:42:18:03:f7:13:e3:96:24:c5:2d:54:58:e4:6e:0e:d4 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.abako.se

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:85:42:18:03:f7:13:e3:96:24:c5:2d:54:58:e4:6e:0e:d4
Serial Number (int): 306682266339034705166334481350729617247956
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ce:fc:9d:24:6e:68:d8:14:71:7c:29:fa:83:82:a2:29:02:e6:39:20
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 4b:fc:d7:c3:33:65:71:ee:f9:f8:89:c5:e4:31:2f:2f:57:bc:9f:5a
Fingerprint (sha256): 9c:e6:f9:54:41:9a:fa:02:69:9b:dc:66:38:d1:7b:38:18:45:0d:42:01:4e:4e:33:29:a2:4d:8c:1b:0a:e7:16

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.abako.se

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.abako.se

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

abako.se
www.abako.se

Other certificates including the domain name abako.se

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.abako.se in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 306682266339034705166334481350729617247956
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-11 10:27:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-09 10:27:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.abako.se'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 716995830615837360456500343868635550751053632140939931031052098046332508869441551636905607261489798812717400384387170039957771951573582591224983451366285216482815281914087820951790498928423814020530956384791167665653941684280958350192662257449025786822516532250609710024327574323809371485683644238155661794907061122487806677326539863577109330870033349268403333634200621515851710665404555970627051318688851252242223005244245231468444370793225197670780607197039425441960740435269002617885016092180138403646163433968314183495191479664943358991331366792796793626668394306680919611893709365104408829421407990989474341252800754750433968934609925309750302542809607570729466518196417286028246817636186344964777785958249774350073687878523629531734986974964933343889711414770486268965125846511044713458560385437004470749322210233380687545222019319545797837667658691526827901897297934315302365251905503317498446984225109510113762987238539417848456429590773872996908202888634892456133448558851739387327840638533919308003252085967248388773259443053200921245239441855212862180600434207764784834404619071352681365512545301845367824860466261130721554841127902806454600624234892124426602246130079235446628034194109593191923026336827215603740541630047
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cefc9d246e68d814717c29fa8382a22902e63920
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abako.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.abako.se'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016c806ea94a0000040300483046022100b9fe3c17037173ffbad085fb5a1f7cb6a31985081e4b17a02f143a85cf87ba3e022100f6d79fe49f9b0c6b0575eb186fccd79feded87f53668b93771b66dbd5854698400760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016c806ea937000004030047304502207df512d596876d0cb527360059f16a1b8f4dad24d5d284ab4e611f082aea26e7022100b80c1556a068b8aec3241143ea8a6d5d3ba365f1d0c798a397b96dedbfbecbd2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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