superdesk.ochsavidare.com

Issued by R3

About this certificate

This digital certificate with serial number 04:91:b3:a8:c4:8d:f0:26:cc:c6:a5:e2:db:4d:d8:3c:9a:b2 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=superdesk.ochsavidare.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:91:b3:a8:c4:8d:f0:26:cc:c6:a5:e2:db:4d:d8:3c:9a:b2
Serial Number (int): 398028895034292574119780404731154561538738
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 30:ef:2c:1e:20:f4:6a:a5:1f:28:cd:fd:08:5c:f6:cc:9d:88:5e:70
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 93:7b:05:6d:fa:09:ff:91:80:8e:c7:bf:f8:2d:a3:ac:2f:6a:f1:ac
Fingerprint (sha256): aa:d5:9b:a3:0b:af:7f:9b:6e:d5:56:df:c2:d0:9f:59:ab:59:4a:bf:15:f7:0b:e1:0a:ed:65:7e:20:8f:73:f4

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate superdesk.ochsavidare.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for superdesk.ochsavidare.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

superdesk.ochsavidare.com

Other certificates including the domain name ochsavidare.com

(limited to 100 certificates)
blogg3.extern.ochsavidare.com
jira.ochsavidare.com
konto.swarm.extern.ochsavidare.com
play.ochsavidare.com
jira.ochsavidare.com
jira.ochsavidare.com
feature.publisher.ochsavidare.com
jira.ochsavidare.com
konto.swarm.extern.ochsavidare.com
jira.ochsavidare.com
feature.publisher.ochsavidare.com
bygg.extern.ochsavidare.com
jira.ochsavidare.com
feature.publisher.ochsavidare.com
jira.ochsavidare.com
feature.publisher.ochsavidare.com
jira.ochsavidare.com
jira.ochsavidare.com
feature.publisher.ochsavidare.com
feature.publisher.ochsavidare.com
feature.publisher.ochsavidare.com
bygg.extern.ochsavidare.com
jira.ochsavidare.com
bygg.extern.ochsavidare.com
play.ochsavidare.com
jira.ochsavidare.com
blogg3.extern.ochsavidare.com
konto.swarm.extern.ochsavidare.com
konto.etc.se
feature.publisher.ochsavidare.com
blogg3.extern.ochsavidare.com
superdesk.ochsavidare.com
konto.etc.se
konto.swarm.extern.ochsavidare.com
jira.ochsavidare.com
feature.publisher.ochsavidare.com
feature.publisher.ochsavidare.com
blogg3.extern.ochsavidare.com
blogg3.extern.ochsavidare.com
blogg3.extern.ochsavidare.com
bygg.extern.ochsavidare.com
feature.publisher.ochsavidare.com
blogg3.extern.ochsavidare.com
blogg3.extern.ochsavidare.com

Certificate

The complete raw certificate details for superdesk.ochsavidare.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 398028895034292574119780404731154561538738
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-03 06:32:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-02 06:32:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'superdesk.ochsavidare.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 716293955695179554057694326215294024455246253170073010646830454344980240478063103962539717938320646494427772228584038428182085062926916598408856023916155516056697477189987941831773638608817667707806097759038334450367220828262230702724317285547163426035234373685913000789148903274103929744691686800378075495080023104021128989971493453712266926332812014949569124285966719784209230194129285096792516034089801784009598820516605990011575473391363635072423180625621759991195620811847846208687247054363311365477384702409870932575630239875030245079796275281761089416725697568268636511871334469417411807079415070438301119091831368582265268118539139963986201727382981535650034637637196730034933147568262885054515785377078434140424074797823668019202124298429590608144307611608892697209234242017010849955793494199191874072013607875224344595304761542171082330785568129474823939398091806280510424231197556950939873734610438634068987141588283377376847945970002333705986538447885802755718123567730714192305141717624698823101183418605178853346639185575002466218218813764015964127057451635017537695662572010892859315207862318747898169170571733258493710776096981678986018830622222027128322476041786590112544800156601794642309933912740794239829245541171
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							30ef2c1e20f46aa51f28cdfd085cf6cc9d885e70
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'superdesk.ochsavidare.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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