daju.dk

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:1a:d9:94:ad:59:6f:df:8c:f1:af:0f:a8:4a:64:63:f2:d9 was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=daju.dk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:1a:d9:94:ad:59:6f:df:8c:f1:af:0f:a8:4a:64:63:f2:d9
Serial Number (int): 357585699717948567523098526612161560834777
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: d1:c0:5c:a2:46:d2:80:ad:ab:83:07:ad:ee:3d:28:16:76:1a:53:fe
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 18:44:be:5a:4d:6e:91:b4:58:13:f9:ca:4e:7f:29:51:3e:69:8c:12
Fingerprint (sha256): a2:2b:a4:fe:8a:29:61:85:9a:1a:a8:13:ba:9d:c3:43:3d:a3:35:1e:d5:a3:87:fa:ba:d6:70:77:fd:51:03:15

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate daju.dk

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for daju.dk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api.daju.dk
daju.dk
www.daju.dk

Other certificates including the domain name daju.dk

(limited to 100 certificates)
daju.dk
daju.dk
sni11112.cloudflaressl.com
daju.dk
sni11112.cloudflaressl.com
daju.dk
api.daju.dk
daju.dk
sni11112.cloudflaressl.com
daju.dk
daju.dk
sni11112.cloudflaressl.com
sni11112.cloudflaressl.com
daju.dk
sni11112.cloudflaressl.com
daju.dk
sni11112.cloudflaressl.com
daju.dk
daju.dk
sni11112.cloudflaressl.com
daju.dk
daju.dk
sni11112.cloudflaressl.com
daju.dk
sni11112.cloudflaressl.com
daju.dk
daju.dk
sni11112.cloudflaressl.com
daju.dk
sni11112.cloudflaressl.com
api.daju.dk
sni11112.cloudflaressl.com
sni11112.cloudflaressl.com
sni11112.cloudflaressl.com
sni11112.cloudflaressl.com
daju.dk
daju.dk
daju.dk
daju.dk
daju.dk
daju.dk
daju.dk
sni11112.cloudflaressl.com
daju.dk
sni11112.cloudflaressl.com
daju.dk
daju.dk
sni11112.cloudflaressl.com
daju.dk
daju.dk
sni11112.cloudflaressl.com
daju.dk
api.daju.dk
sni11112.cloudflaressl.com
sni11112.cloudflaressl.com
daju.dk
daju.dk
daju.dk
daju.dk
daju.dk
sni11112.cloudflaressl.com
sni11112.cloudflaressl.com
daju.dk
sni11112.cloudflaressl.com
daju.dk
api.daju.dk
sni11112.cloudflaressl.com
daju.dk
generatorfestival.dk
sni11112.cloudflaressl.com
daju.dk
daju.dk
daju.dk
sni11112.cloudflaressl.com
daju.dk
daju.dk
daju.dk
daju.dk
sni11112.cloudflaressl.com
daju.dk
sni11112.cloudflaressl.com
sni11112.cloudflaressl.com
daju.dk
daju.dk
daju.dk
daju.dk
sni.cloudflaressl.com
daju.dk
sni11112.cloudflaressl.com
daju.dk
api.daju.dk
sni11112.cloudflaressl.com
sni11112.cloudflaressl.com
sni11112.cloudflaressl.com
daju.dk
daju.dk
daju.dk
sni11112.cloudflaressl.com
daju.dk
daju.dk

Certificate

The complete raw certificate details for daju.dk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 357585699717948567523098526612161560834777
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-08-20 09:19:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-18 09:19:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'daju.dk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 940108118013912245881389021497562418624458424950190962664344377458227876108030735789736901127245600505812682708275099132217652437145256381884672397819287035974747182596193324758509935933101703502593388192988495337323920461055501414947219420063373544075128428070974699730676313277301065390018482648450784924751625483212992978315607338421315781633018083281676349431950370045468499534295076825762963435211405412057149968353881114044479455578825042386441877603273937602609615506331880126889134851979442225256183374981139369464375398332683034726874118219634500039008680082665344052745312343344323350784425047380270756023367923784379365057916252396711636977597552600660127025258821593996546358206842625582728706005136262671491347723987865319513495846760263919235072267697387979390326003616666553850533281502782986093250145663059073531372208322381467188042882211323285470839085908471901125677694413661838929837046425638400357763084191892449782359964972611978459783952185832734911564915769661224931935806830966800854060394292930230988465857233115820495579591485266865112839831386058508193518834245862692945491527505978687012118158123317903949627370749752966044278256981408963804493401876501516601772362286764915775270635046402388509257719939
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d1c05ca246d280adab8307adee3d2816761a53fe
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (37 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.daju.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daju.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.daju.dk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		006c83278a570a93dc8c1fa055fd2960818e527fe79de6c04998b9146c23102d0cdd7b5785efa8e2494f6564894d3818fb8750039190f5197abd2c1d4d07f6fa02a6c7e50dbaada16698e48b48481ccbe5af5bf569a8e8d18d56aded36109deef29fae0f56d39ecbf74a76b82d76f0b335c558fced6aed78f1e409e8769e738776f215b9bd1a1de622dbb79a21c2cd6b435913c61a0b0c1771999e2b6e07903598d44e87b893df0e8694c63c65ef63049e883bc16eb516455d2037318a906803ec44c55c1b386e4a2798e121994c2672be1e22f0d88a95a3da661db428f2a7901de4b443062a2c8f5a2e5589b7c5dcf5a0de2cd04e2ad40063406caa5e800c1a6b