citycontainer.dk

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:d8:53:22:13:5c:0b:42:72:61:2e:66:95:c9:71:5b:b6:7f was issued on by Let's Encrypt.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=citycontainer.dk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d8:53:22:13:5c:0b:42:72:61:2e:66:95:c9:71:5b:b6:7f
Serial Number (int): 334948351904605044334599642957378876061311
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 25:71:f1:12:22:f5:41:d4:85:53:81:7d:dc:2f:31:44:1e:e0:a2:6e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b0:6c:a1:fd:37:b1:16:61:3f:c9:ea:fa:a0:46:6e:aa:a4:3a:09:a3
Fingerprint (sha256): a5:cc:ab:cd:94:38:ba:e9:b5:5f:ac:00:85:c7:90:bc:97:ac:37:2b:ed:33:5a:9d:54:69:ee:e5:b6:ed:b0:34

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate citycontainer.dk

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for citycontainer.dk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

citycontainer-reconor.peytz.dk
citycontainer.dk
citycontainerfyn.dk
www.citycontainer.dk
www.citycontainerfyn.dk

Other certificates including the domain name citycontainer.dk

(limited to 100 certificates)
owncloud.citycontainer.dk
cityapi.citycontainer.dk
citycontainer.dk
citycontainer.dk
citycontainer.dk
*.citycontainer.dk
reconor.wp.prod.combell.peytz.dk
owncloud.citycontainer.dk
reconor.wp.prod.combell.peytz.dk
citycontainer.dk
citycontainer.dk
reconor.wp.prod.combell.peytz.dk
citycontainer.dk
citycontainer.dk
citycontainer.dk
citycontainer.dk
citycontainer.dk
citycontainer.dk
citycontainer.dk
testcityapi.citycontainer.dk
citycontainer.dk
citycontainer.dk
*.citycontainer.dk
ch.citycontainer.dk
skype.citycontainer.dk
citycontainer.dk
co2.citycontainer.dk
ch.citycontainer.dk
citycontainer.dk
cityapi.citycontainer.dk
citycontainer.dk
ch.citycontainer.dk
citycontainer.dk
citycontainer.dk
*.citycontainer.dk
citycontainer.dk
ch.citycontainer.dk
gave.citycontainer.dk
owncloud.citycontainer.dk
citycontainer.dk
testcityapi.citycontainer.dk
cityapi.citycontainer.dk
citycontainer.dk
citycontainer.dk
citycontainer.dk

Certificate

The complete raw certificate details for citycontainer.dk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 334948351904605044334599642957378876061311
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-20 23:24:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-18 23:24:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'citycontainer.dk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 601073336436365211701722231978926077538211086418614979888525781608438425108022604277094600286695081312832441055398067617126557269075952020743547611510439179184175839351582275391686072773107333611178182249537688770894999561496320957262337857219883322884080699382066680690422606946662383314050439363890509864076667554118675740945346054161388764396933652730491051071232242868612027986921286405420583063053088441955826128326070203574930826114191815577476717906628006058553003714510514796012837276639876881404318659876294074168155541641022795097737253783842626243064508452020275901864255278998298695533103453217920216304286582831103045923314857724623777888044417177674294206715981925516065363009113282416843884382796250015601675461199506140895918998853524308094067060590537857454143832610522089771352929943579613165955436222875416442085477707605084816141478083269051536253325780147218745984985443693533913726355851747206830563597662179082538611978123753529502802719935621583406024760696429844826325734266287605144831058066764282192706465954288666187248914867059606985126258005755521132909761536669272861660148006914228578183720922237441004665666655108528849381179579568915947803967282486931317751635444780543364830389259912074222780697619
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2571f11222f541d48553817ddc2f31441ee0a26e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citycontainer-reconor.peytz.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citycontainer.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citycontainerfyn.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.citycontainer.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.citycontainerfyn.dk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf64000001641fba98650000040300473045022100ba8e1da521bbf7864de24abdc6257f87e479dcc3b73e57c0369f2bb3c9438a640220155bd293451720fff2de2c24e777a52da1f070a15fe078004577e2a26cc748ce007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001641fba98860000040300483046022100d50c80d7c32e39edcaf6f9f0e4347f014c828aabc0709870a76a6f2576d5392f022100d36e8d6a3aff9f31d812f00d96f3a8c456bdcadaa46755bf83b465feb0bfe5ea
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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