flagermus.dk
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:7f:2c:bf:49:08:b9:d7:c7:73:60:74:87:5c:ee:01:cc:04 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=flagermus.dk
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:7f:2c:bf:49:08:b9:d7:c7:73:60:74:87:5c:ee:01:cc:04Serial Number (int): 304612197636061683204638568107262242573316
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 54:f9:ac:1d:40:43:d1:b5:b1:fb:2e:da:32:2c:85:b5:1e:98:41:5a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): e8:f1:bc:5d:24:89:28:d3:5e:ac:ce:2e:2d:c0:3e:7e:a6:91:93:6c
Fingerprint (sha256): ad:e1:de:87:17:b1:75:ee:b9:88:0e:a7:27:b8:2a:6d:b1:80:16:0f:1c:6a:af:89:88:a9:1f:a3:95:2e:bf:a3
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate flagermus.dk
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for flagermus.dk
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
flagermus.dk
www.flagermus.dk
www.flagermus.dk
Other certificates including the domain name flagermus.dk
(limited to 100 certificates)
Certificate
The complete raw certificate details for flagermus.dk in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGYTCCBUmgAwIBAgISA38sv0kIudfHc2B0h1zuAcwEMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAxMjIwMTA3MDhaFw0y MDA0MjEwMTA3MDhaMBcxFTATBgNVBAMTDGZsYWdlcm11cy5kazCCAiIwDQYJKoZI hvcNAQEBBQADggIPADCCAgoCggIBAMao8rRBn+uEUui9lPmaaS+7MMEGyDspXWvQ HdK6shir4hrfDUzVN8dkUH4K2jTwyuKrOMLbhI6NuRnoSchU/PnMoHVWtGAd+5NV n1cRrws0f1YDzgZD36gOii3obUao380pKgrqRD4yNIrVisj/25Bm8aYvCRxIe+UF V0JJTTPJ47O8xyjughE4JuNYpSwjcUAnvWZpRGWPnvbMNR7rrs8fXSgcOon2Pcbu lEBOWyrf137UNhjGkho445RNLrLwbyZwlTNnMyXqjxuMfaku3L/wPkIOJM558T9P ElkwaYKuyjg4dJ4SMbADim/vsU3UqtEw4+vp47DBDNnGIGdXql1nJn3U7JhiYVmS eROQXAukXDruuZp4/k7yZosXvYZzHmqlQsTYpLq1LpV9q4UmNjYQCQV76OzGn+Fq RLgpOYbRdHwuI3eYRErB0cKuRuBZA6waos/b24otOOUBRaDIV1TA4tPfZ4x0QobW biExkVA09mOSqHT5nE+V0XJXfQfeGd4yinG3DCd604R9jjQSDgsb40W4RZn5xaB6 tRAZePbYj6HJ0pZef5prALz+kj4Ufm/19qLZnZwB+BXzojFk3ZLNb6FYv2kS70Gh vBJKgBnc0kvZMo/1m9lfBnwMwPo7fklzZrshITZRErfEvERU1hlz5xMPRjmarLmZ NsbRWC6JAgMBAAGjggJyMIICbjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYI KwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFFT5rB1A Q9G1sfsu2jIshbUemEFaMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyh MG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgz LmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgz LmxldHNlbmNyeXB0Lm9yZy8wKQYDVR0RBCIwIIIMZmxhZ2VybXVzLmRrghB3d3cu ZmxhZ2VybXVzLmRrMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEB MCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBAwYK KwYBBAHWeQIEAgSB9ASB8QDvAHYAB7dcG+V9aP/xsMYdIxXHuuZXfFeUt2ruvGE6 GmnTohwAAAFvywDcVQAABAMARzBFAiAPk+qQZ4zbNiEt9aCNKswbKmVJFkEhjoVH 48La/iAahQIhALLX3zqar2pMEqJV86SVONyvBO/s5dxMJE8iLVPT8jNqAHUAXqdz +d9WwOe1Nkh90EngMnqRmgyEoRIShBh1loFxRVgAAAFvywDeHgAABAMARjBEAiAM FMnfVYdbEt8CjmzcB7D3lZbLSsiA6ERSxWq44aHKGQIgRojhZsy72eu2NNqRW/JB 8zIiGv+b7PfuxN2cw5+PK+swDQYJKoZIhvcNAQELBQADggEBAIgKofB4JXWAwUqL 76DlBsgDlza9cMfC+jLnvDFyC1OOMv9p8rBJC1JdnbyeNZMxs0RM/YPUfUipzJ59 9lyYAFzJJRyOs83RJTnHWF+LT5npjenm6OyQ57EdllNNCSjAhr9HUyjapZ7Qe+xN vNbO/4STnexbJI2krtjAAD6fQT28p73ie8b07KGKmPmc1i9j7iTxMPlQLoRkKxL3 h4EC+CP/HgRkKJP1PFpKgDUKJ52k8S1mQqBiiisYqI9fQFxP7fN7IZ43Z9pEaLUz amN4NXo8ecI1VTBeivlx7NAKxEMGMV2tdDFkNWT1gXfAU24sib4C3qaAJ1lLJOXu viJcNQk= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAxqjytEGf64RS6L2U+Zpp L7swwQbIOylda9Ad0rqyGKviGt8NTNU3x2RQfgraNPDK4qs4wtuEjo25GehJyFT8 +cygdVa0YB37k1WfVxGvCzR/VgPOBkPfqA6KLehtRqjfzSkqCupEPjI0itWKyP/b kGbxpi8JHEh75QVXQklNM8njs7zHKO6CETgm41ilLCNxQCe9ZmlEZY+e9sw1Huuu zx9dKBw6ifY9xu6UQE5bKt/XftQ2GMaSGjjjlE0usvBvJnCVM2czJeqPG4x9qS7c v/A+Qg4kznnxP08SWTBpgq7KODh0nhIxsAOKb++xTdSq0TDj6+njsMEM2cYgZ1eq XWcmfdTsmGJhWZJ5E5BcC6RcOu65mnj+TvJmixe9hnMeaqVCxNikurUulX2rhSY2 NhAJBXvo7Maf4WpEuCk5htF0fC4jd5hESsHRwq5G4FkDrBqiz9vbii045QFFoMhX VMDi099njHRChtZuITGRUDT2Y5KodPmcT5XRcld9B94Z3jKKcbcMJ3rThH2ONBIO CxvjRbhFmfnFoHq1EBl49tiPocnSll5/mmsAvP6SPhR+b/X2otmdnAH4FfOiMWTd ks1voVi/aRLvQaG8EkqAGdzSS9kyj/Wb2V8GfAzA+jt+SXNmuyEhNlESt8S8RFTW GXPnEw9GOZqsuZk2xtFYLokCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 304612197636061683204638568107262242573316 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-22 01:07:08 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-21 01:07:08 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'flagermus.dk' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 810461900323435134546220535432766898189403901582826211406724803080476456434023407745161085582913816881254114534284391571112971593812662807677779058484162945703730446289765528005799966611876478389360249091080676485442814028797987618926811550612560518279935494977844386305469144670781968386069458549411228193070572793440243531881937183638770334959748296733507962626936569187764061221047991955308532058663788589764762200763130431668771493306590185960219212406202682306014899796169573474857441534588545942287206264373079353968145676343186564654293823095965035172607973685680681704857051932450655234163276387326897343682093486540136299481223131015024431947670904353545723354346972707498659536774538288148785234228535431682094814562613756438328027213632359561960315739272355400251767643158276032847681596125226471903765653249389178416024713070489615553939181084456226390957142651688278637414146048875139758863751234422867400829614558360078161425333632911109017931883379642433963944777412789379668011414594485143089861300846049287597746517250663387050783346688868640096573799297702326851608499968143720407281490773090848712416910426382243614812158007528348405688035765877907962527549255041099895248267019736281970916313441086609367909281417 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 54f9ac1d4043d1b5b1fb2eda322c85b51e98415a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flagermus.dk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flagermus.dk' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef00760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016fcb00dc55000004030047304502200f93ea90678cdb36212df5a08d2acc1b2a65491641218e8547e3c2dafe201a85022100b2d7df3a9aaf6a4c12a255f3a49538dcaf04efece5dc4c244f222d53d3f2336a0075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016fcb00de1e000004030046304402200c14c9df55875b12df028e6cdc07b0f79596cb4ac880e84452c56ab8e1a1ca1902204688e166ccbbd9ebb634da915bf241f332221aff9becf7eec4dd9cc39f8f2beb . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00880aa1f078257580c14a8befa0e506c8039736bd70c7c2fa32e7bc31720b538e32ff69f2b0490b525d9dbc9e359331b3444cfd83d47d48a9cc9e7df65c98005cc9251c8eb3cdd12539c7585f8b4f99e98de9e6e8ec90e7b11d96534d0928c086bf475328daa59ed07bec4dbcd6ceff84939dec5b248da4aed8c0003e9f413dbca7bde27bc6f4eca18a98f99cd62f63ee24f130f9502e84642b12f7878102f823ff1e04642893f53c5a4a80350a279da4f12d6642a0628a2b18a88f5f405c4fedf37b219e3767da4468b5336a6378357a3c79c23555305e8af971ecd00ac44306315dad7431643564f58177c0536e2c89be02dea68027594b24e5eebe225c3509