refurn.se

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:d5:f6:09:7b:76:c4:17:50:58:1a:34:48:5e:99:4d:9a:16 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=refurn.se

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d5:f6:09:7b:76:c4:17:50:58:1a:34:48:5e:99:4d:9a:16
Serial Number (int): 334144041271221440448225492275124681677334
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 7d:85:b8:11:32:d3:96:74:65:2e:6e:1b:ed:d9:62:29:a3:1f:c3:9a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 57:61:9c:9c:0a:d0:37:d2:a6:d2:68:c8:df:36:0a:13:a5:b3:e8:71
Fingerprint (sha256): a3:04:c3:b4:11:ca:84:f9:12:31:1f:62:6f:85:44:61:a1:53:a9:5d:e6:11:34:80:9e:f0:8e:67:20:a5:04:04

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate refurn.se

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for refurn.se

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

refurn.se

Other certificates including the domain name refurn.se

(limited to 100 certificates)
www.refurn.se
www.refurn.se
refurn.se
staging.refurn.se
www.refurn.se
www.staging.refurn.se
staging.refurn.se
refurn.se
refurn.se
www.staging.refurn.se
www.staging.refurn.se
refurn.se
refurn.se
www.refurn.se
www.staging.refurn.se
refurn.se
refurn.se
refurn.se
staging.refurn.se
www.staging.refurn.se
refurn.se
www.refurn.se
www.refurn.se
refurn.se
refurn.se
www.refurn.se
staging.refurn.se
staging.refurn.se
staging.refurn.se
www.refurn.se
www.staging.refurn.se
www.refurn.se
www.refurn.se
staging.refurn.se
www.staging.refurn.se
refurn.se
www.refurn.se
www.refurn.se
www.refurn.se
www.refurn.se
staging.refurn.se
www.refurn.se
refurn.se
refurn.se
www.refurn.se
refurn.se
refurn.se
www.refurn.se
refurn.se
refurn.se
refurn.se
refurn.se
staging.refurn.se
refurn.se
staging.refurn.se
www.refurn.se
staging.refurn.se
www.staging.refurn.se
staging.refurn.se
staging.refurn.se
refurn.se
www.refurn.se
www.refurn.se
refurn.se
www.refurn.se
www.staging.refurn.se
www.refurn.se
www.staging.refurn.se
staging.refurn.se
staging.refurn.se
staging.refurn.se
www.refurn.se
www.staging.refurn.se
refurn.se
refurn.se
staging.refurn.se
staging.refurn.se
staging.refurn.se
www.refurn.se

Certificate

The complete raw certificate details for refurn.se in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 334144041271221440448225492275124681677334
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-29 07:32:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-27 07:32:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'refurn.se'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 791228580654693214211620104715500557414137652577367181373177046324993829307959752095001642262829160827786765040232134722018052775916627481810204173666433678581404161684750915947930478749764469762885768030529726021829622595259206918882422499740649436341886608214176685983463596959348959802511859758151345645515301099916111068988563361349719711742033175305648249252552868978228613820959376001344788940482501918961191654179020634805342611813008488775270012603047230709086275754461577272954968783592867730939646049156976471406390150016532268539052504457756381257661389465361580055928640565054566843124990902308032014297959934092988967914686742964599879662096647884059091761326503819627369453818568326342823675917532823415231466580015976979738425879336992256258874972916523482243025289604947418942257891803539374198324452709037049355757270402919915233051426053419948689396488922896060077181260811704018397415238896248245723353469941918347495871862441741413261806580909390196160393032533890209926699655626474054067087505063891361793905567605972706122302324448644099543924127421966653015299265765173339686959339179353470141092828398799002817054336189695063210518720911164254603977574389138991683987913413342920953406495863884282427611529941
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7d85b81132d39674652e6e1bedd96229a31fc39a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'refurn.se'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000166bef3b5810000040300473045022100dc1b0cceb1c357033054c82ced150b7c23268eec113b3e8427100d67a3107679022079200552110222d9b1961872aa891652ce4791c2a5822003f1df5427622b31cf0076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c00000166bef3b7b600000403004730450220392d9fa03ad926637d636810e7ec51e44f76abd46cc34ca8df8b20b908dec2d1022100827700971da8b475c740f600b1ad90e1c705aa22011a55536d8298bd3b005f13
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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