flower.verkstad.net

- Ericsson -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 08:fa:25:8d:b0:e3:57:ce:d8:2d:54:49:73:a7:ab:b6 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Ericsson

Organization: Ericsson
Organization unit: IT Services
State / Province: Stockholm
Locality: Stockholm
Country: SE

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:fa:25:8d:b0:e3:57:ce:d8:2d:54:49:73:a7:ab:b6
Serial Number (int): 11932659855983486064540108424657480630
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: d8:78:f7:e5:f4:db:50:18:b3:f8:cd:74:5d:a2:dd:ce:3c:08:42:7f
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 5a:0e:81:39:f1:38:98:04:bc:1c:5c:d2:19:1c:96:9a:69:be:11:6f
Fingerprint (sha256): b6:f4:e3:d6:76:79:5c:15:df:34:c4:8b:29:4e:57:3f:27:1f:be:1a:24:24:db:27:c8:d1:ef:cd:56:4c:3c:8a

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate flower.verkstad.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for flower.verkstad.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

flower.verkstad.net

Other certificates including the domain name verkstad.net

(limited to 100 certificates)
kafka.verkstad.net
hilton.ilik.net
wiki.verkstad.net
bscw.verkstad.net
spaces-services.verkstad.net
kafka.verkstad.net
kafka.verkstad.net
kafka.verkstad.net
wiki.verkstad.net
area.verkstad.net
kafka.verkstad.net
worm.verkstad.net
kafka.verkstad.net
pink.verkstad.net
kafka.verkstad.net
kafka.verkstad.net
subversion.verkstad.net
kafka.verkstad.net
kafka.verkstad.net
sail.verkstad.net
kafka.verkstad.net
kafka.verkstad.net
edsp.verkstad.net
subversion.verkstad.net
kafka.verkstad.net
kafka.verkstad.net
kafka.verkstad.net
chansurf-external.acke.verkstad.net
hilton.ilik.net
edsp.verkstad.net
kafka.verkstad.net
kafka.verkstad.net
kafka.verkstad.net
kafka.verkstad.net
flower.verkstad.net
kafka.verkstad.net
subversion.verkstad.net
kafka.verkstad.net
ergocoll.verkstad.net
spaces.verkstad.net
bscw.verkstad.net
kafka.verkstad.net
edsp.verkstad.net
spaces.verkstad.net

Certificate

The complete raw certificate details for flower.verkstad.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11932659855983486064540108424657480630
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-14 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Stockholm'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Stockholm'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ericsson'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'flower.verkstad.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 768660353783798389056663261796610582506988377044442309697512019608597430367493413107612182683746212427878680548166481269017607623146719409226619998971806258641528488702023326206146945006255037251714387984916237124173609551255328194439166381145329956946916855898960497308546972407181626090925477859292708225274346493005480812912036824878214007985219587609395780314698928917213964461388150489574370082377843699232363220528577809183902012416220597950434043948947626374209964666861890776670774998180015735056211485156047369305064345568988518367124528729744008546258402661835206145952129835252332607274993472773310819170847246393525395755634454228986191325022520806200589143217012434717372260885430097623527548430314361571036514892633550454577081394853012761421692782705559148362347145429299011607126963462572478670770709607337483054249947125752247510511152200459794173568276171119998272948036604257426053837098988521986242059614293441822637371487945029893566331299828340402938487227707824208790180479256096994984279912093645358470006802793006048604291046747620962641321012172758518052498703459340704262202982239072025649012173468461426880866024250317444366866716102360137537566632061129995976611132438143454789077323108683734742187123711
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d878f7e5f4db5018b3f8cd745da2ddce3c08427f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flower.verkstad.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		007a8d4364eac9200a7eb10201e928bab591acf9cd283fd3851e45a6e07087ebb516e7d10b606c48edeaba1e2a522cc326755a4892ac5c621311bf15d73a8c091ae7f00dcb395ee5cb867434357acd2ec91a1663c9fbb5c6ca4873afc62023d1fc95998741345b4a1654aea78a56456b9b81536f8c77c2754148db89a869dae387018412dac768c6371688ab2db64c7ee0023b01796762f742306d0bc7af4f7d12f0906c6b62b0fe7b22b3a09ab564bd0c61e316586d4cbb9bef42d97184fc49e3af7707f5defb8e5b9e724faff2d6987c161fda1cdb764498933ae0b2b8676adc75ca1490bd830fad88ba93d55d4f53dbba5e57b348b0812e48824b98d33c3852