lf.appzone.se
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:c7:b5:97:df:42:32:89:41:39:85:0d:d4:1d:55:fc:aa:44 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=lf.appzone.se
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:c7:b5:97:df:42:32:89:41:39:85:0d:d4:1d:55:fc:aa:44Serial Number (int): 329294427644832243222657921199553013131844
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: de:c3:04:5c:b2:ca:ae:88:f6:a2:a2:c1:db:1a:1c:e5:9c:f3:b4:eb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): ee:7f:c8:d2:22:ff:17:b7:ff:da:03:30:80:e2:ab:c4:24:d0:7c:d9
Fingerprint (sha256): ac:4b:5c:24:a7:6b:37:b8:f0:78:5d:79:01:c0:eb:e2:6e:6c:60:61:c6:53:29:d2:a3:65:78:b8:9d:cb:f3:a0
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate lf.appzone.se
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for lf.appzone.se
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
lf.appzone.se
Other certificates including the domain name appzone.se
(limited to 100 certificates)
folksam.appzone.se
*.appzone.se
folksam.appzone.se
*.appzone.se
folksam.appzone.se
folksam.appzone.se
folksam.appzone.se
folksam.appzone.se
kreativtsamarbete.appzone.se
*.appzone.se
folksam.appzone.se
lf.appzone.se
lf.appzone.se
folksam.appzone.se
lf.appzone.se
folksam.appzone.se
lf.appzone.se
*.appzone.se
folksam.appzone.se
*.appzone.se
folksam.appzone.se
folksam.appzone.se
folksam.appzone.se
*.appzone.se
folksam.appzone.se
*.appzone.se
folksam.appzone.se
folksam.appzone.se
folksam.appzone.se
folksam.appzone.se
kreativtsamarbete.appzone.se
*.appzone.se
folksam.appzone.se
lf.appzone.se
lf.appzone.se
folksam.appzone.se
lf.appzone.se
folksam.appzone.se
lf.appzone.se
*.appzone.se
folksam.appzone.se
*.appzone.se
folksam.appzone.se
folksam.appzone.se
folksam.appzone.se
Certificate
The complete raw certificate details for lf.appzone.se in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGUTCCBTmgAwIBAgISA8e1l99CMolBOYUN1B1V/KpEMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAyMjgwMjAxMDZaFw0y MDA1MjgwMjAxMDZaMBgxFjAUBgNVBAMTDWxmLmFwcHpvbmUuc2UwggIiMA0GCSqG SIb3DQEBAQUAA4ICDwAwggIKAoICAQDgaEeA2auey9GK1pCIak97Y+e73RiC88nC PpuF6coIeKUIww1EfexTt7aU+DTz1r019zro1NsYmiC4TvMcVuCDjdTgQn/I6nAY raKS752G5C8GIatYCAV6KwAspHB1jfbwpbOme4+c+OSqdDlp8p7bgdyYTMOUzpnq sAnTB6xDtbcfak/gQjAL7GQhcdtE3i6j57cWzW0T7dnv2T9l4xrf5D8DN/hEg+AZ LzsqxB3vqZc3897Xi5khwnsLEg7E9BhBAivfwz7HQjAjX88gxJVLNlDWtexP473l 0FxwWMhPW+5YK4/IddAYFPBaK/TLb/sm3J7OggisYndCipBpSeI9N7WyaeY8fNJW CLq7OXyv+0yJN4pG6Vjox9DFVizZnTFjekCQeDOwWz///Ea4SE9KHGjXVwn16OPJ 3kiIAq0K8UGcrBwSz2eIjbYGreDlnrJ/YrkXT/nlzCquUVVUrb/mCuHY/qBDWND0 wWP/u9rpvYLejXCqAp/KUAVvUQdlohoOaZ98tsNqV7XUuiOo7X8XXUFjeys2niZX G9JPgK3Ckqz4CxlwGT/NY2/hjE1R6lF0+Ovq5DB7drEX0RY69/BYI0zBbFk0FgNx qLRHFlFoemtucFHNxcHoS/Zy+1ZktmqedqlGueFLU65lSQYBzrBD7w9oj9kX9zS9 vKt0kO7vtwIDAQABo4ICYTCCAl0wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG CCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBTewwRc ssquiPaiosHbGhzlnPO06zAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86js oTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14 My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14 My5sZXRzZW5jcnlwdC5vcmcvMBgGA1UdEQQRMA+CDWxmLmFwcHpvbmUuc2UwTAYD VR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYa aHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEDBgorBgEEAdZ5AgQCBIH0BIHx AO8AdQBep3P531bA57U2SH3QSeAyepGaDIShEhKEGHWWgXFFWAAAAXCJvY+OAAAE AwBGMEQCIFW3NGqI26NVt3RQpUaIrpGSY293CejepFnfp1h9pOK3AiAq6XWHYQYT tnCFooNessceWEObuwBwJfmvBcXqa+ufqwB2ALIeBcyLos2KIE6HZvkruYolIGdr 2vpw57JJUy3vi5BeAAABcIm9j4QAAAQDAEcwRQIhAPRNguY/Wisl58GriQ8MUQpM 2ZixvribpN/MC5Rj/l7qAiBujYnIOPQ6PGv2eUbmDVgrFfQcVPlNnJvkuvQYxfd+ +jANBgkqhkiG9w0BAQsFAAOCAQEAV2F5jQGCcCx9nJlXR5dFDqx6SklTCBm1R3Rg 1QR0gf7Zcp9CwcP8zykT0w0LVy7MdeE+LWjj0dwmn0pBeYn+GFZRZvWhOCQqZh7e mkhhigcy2jrhyW2F+AZPne9Dm4qxeGPRvDe9LTtaRLrEJVthHOi9wFNdKrR9Vo0X 3C2A830GnkRp4q9nR8K9EfdOxwvNsGVAyAx+z7X2QVtzQPWtilF3ys67VcQpesMF GlIUf7GmWPZF8KsaCewtXjham1aXqzuwapQ+qEccJ04g62DFppY9LWKbqkkPPZxw yg0j58esTeldKW3MWHpH8EmMfcPaSoAHK1p8vUnubxEj4pdFAQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA4GhHgNmrnsvRitaQiGpP e2Pnu90YgvPJwj6bhenKCHilCMMNRH3sU7e2lPg089a9Nfc66NTbGJoguE7zHFbg g43U4EJ/yOpwGK2iku+dhuQvBiGrWAgFeisALKRwdY328KWzpnuPnPjkqnQ5afKe 24HcmEzDlM6Z6rAJ0wesQ7W3H2pP4EIwC+xkIXHbRN4uo+e3Fs1tE+3Z79k/ZeMa 3+Q/Azf4RIPgGS87KsQd76mXN/Pe14uZIcJ7CxIOxPQYQQIr38M+x0IwI1/PIMSV SzZQ1rXsT+O95dBccFjIT1vuWCuPyHXQGBTwWiv0y2/7JtyezoIIrGJ3QoqQaUni PTe1smnmPHzSVgi6uzl8r/tMiTeKRulY6MfQxVYs2Z0xY3pAkHgzsFs///xGuEhP Shxo11cJ9ejjyd5IiAKtCvFBnKwcEs9niI22Bq3g5Z6yf2K5F0/55cwqrlFVVK2/ 5grh2P6gQ1jQ9MFj/7va6b2C3o1wqgKfylAFb1EHZaIaDmmffLbDale11LojqO1/ F11BY3srNp4mVxvST4CtwpKs+AsZcBk/zWNv4YxNUepRdPjr6uQwe3axF9EWOvfw WCNMwWxZNBYDcai0RxZRaHprbnBRzcXB6Ev2cvtWZLZqnnapRrnhS1OuZUkGAc6w Q+8PaI/ZF/c0vbyrdJDu77cCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 329294427644832243222657921199553013131844 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-28 02:01:06 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-28 02:01:06 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lf.appzone.se' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 915502077751521663772673729364508001338817507317051661323119130877786482155319007490037955665922224602965323915461554066558208622846491718996634382784450054529372564805240655343639028428658786197439340572297141691331647651936823179869324431155662959254204204052442937368422474429808582300521339581421078500661111870100401331146138629028247081251348146744449956801404443618056772786618429158033161320769383231174551171160775076705571792648230761449112564061926174028808607098199610605784527826121515168169739293559285812451957594983346337528037136793091583700001597995665842171488060059474589872606635635347686118297100378168291255134595598197286326296673237426701056198831379539522585048004515832892184468315109728814326500803851793051886158084180700698900342998649606756316769057944129542086660429827748021073501109730085624981763643963547445925793617814760170062670882764898235635401262832083245575041574418330921273821371563366516979628351532151613679924443387343748149796576677188346055686317180568850422953648104542247572996972580592415038489560737281078159577005215540757578997931646187530467845202507618792591941972312462193933801004449694124786463541935556560259502156307876554593678873790175968914899847650680375842243014583 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) dec3045cb2caae88f6a2a2c1db1a1ce59cf3b4eb . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lf.appzone.se' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef0075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000017089bd8f8e0000040300463044022055b7346a88dba355b77450a54688ae9192636f7709e8dea459dfa7587da4e2b702202ae97587610613b67085a2835eb2c71e58439bbb007025f9af05c5ea6beb9fab007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000017089bd8f840000040300473045022100f44d82e63f5a2b25e7c1ab890f0c510a4cd998b1beb89ba4dfcc0b9463fe5eea02206e8d89c838f43a3c6bf67946e60d582b15f41c54f94d9c9be4baf418c5f77efa . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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