feature.etc.se

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:cf:e8:65:ff:a2:c0:58:a3:23:f3:0d:5d:06:f8:1b:de:c7 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=feature.etc.se

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:cf:e8:65:ff:a2:c0:58:a3:23:f3:0d:5d:06:f8:1b:de:c7
Serial Number (int): 332084218249828753913147898708496458964679
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 13:b9:8d:52:0d:a8:2d:54:0e:4d:b4:fa:fa:bc:7b:fa:78:2f:54:34
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 55:e8:8f:84:06:0d:26:2a:82:5b:62:eb:44:55:de:c1:95:4a:23:b5
Fingerprint (sha256): c3:94:55:c6:fd:30:38:8e:fb:7c:9c:12:23:b2:73:23:79:2f:36:13:71:6f:d9:37:11:c6:7a:d2:a1:c8:f5:88

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate feature.etc.se

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for feature.etc.se

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

feature.etc.se

Other certificates including the domain name etc.se

(limited to 100 certificates)
feature.etc.se
etc.se
blogg3.extern.ochsavidare.com
persondata.etc.se
konto.swarm.extern.ochsavidare.com
varuhuset.etc.se
varuhuset.etc.se
kampanj.etc.se
feature.etc.se
kampanj.etc.se
feature.etc.se
bokforlaget.etc.se
etc.se
feature.publisher.ochsavidare.com
etc.se
varuhuset.etc.se
etc.se
persondata.etc.se
newpass.etc.se
kampanj.etc.se
etc.se
feature.etc.se
etc.se
etc.se
etc.se
app.etc.se
feature.etc.se
kampanj.etc.se
konto.swarm.extern.ochsavidare.com
persondata.etc.se
feature.etc.se
etc.se
www.etc.se
app.etc.se
feature.publisher.ochsavidare.com
feature.etc.se
feature.publisher.ochsavidare.com
kampanj.etc.se
etc.se
etc.se
feature.etc.se
app.etc.se
etc.se
feature.etc.se
kampanj.etc.se
etc.se
varuhuset.etc.se
www.etc.se
feature.publisher.ochsavidare.com
bygg.etc.se
kampanj.etc.se
sommar.etc.se
varuhuset.etc.se
konto.etc.se
etc.se
bygg.etc.se
feature.publisher.ochsavidare.com
varuhuset.etc.se
kampanj.etc.se
etc.se
feature.publisher.ochsavidare.com
kampanj.etc.se
feature.publisher.ochsavidare.com
bygg.extern.ochsavidare.com
bokforlaget.etc.se
etc.se
feature.etc.se
kampanj.etc.se
bygg.extern.ochsavidare.com
kampanj.etc.se
etc.se
cliq.outsourceit.es
kampanj.etc.se
blogg3.extern.ochsavidare.com
www.play.etc.se
konto.swarm.extern.ochsavidare.com
bygg.etc.se
kampanj.etc.se
konto.etc.se
feature.publisher.ochsavidare.com
app.etc.se
feature.etc.se
etc.se
etc.se
etc.se
blogg3.extern.ochsavidare.com
bygg.etc.se
app.etc.se
konto.etc.se
konto.swarm.extern.ochsavidare.com
persondata.etc.se
brev.etc.se
etc.se
solar.etc.se
etc.se
connect.etc.se
feature.etc.se
feature.etc.se
elcertifikat.etc.se
varuhuset.etc.se

Certificate

The complete raw certificate details for feature.etc.se in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 332084218249828753913147898708496458964679
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-30 15:20:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-28 15:20:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'feature.etc.se'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 910081297428249240274992776772203245827273318714765882585291244820669450493077147931778988888974343091062253133816346530801247891910801753250374843359197813592891742969501596171907618114326869460917028418673585229498928223518620497972538146997562537083780204171942249134525031120903567274096169996099889254669951745544111616426957078250813331032536544791838186156228741168508390199395934766845267452583933596512075482863506178722492673069291367533372023834375694791181473539324544375696428595039119140744328208599551111302923391548241422501177595653810713029389130177957100466105039095849049082158770902555921818574372550826058373167465160872714065206361103562126494552992531291680302254510616860699859084844363855344793912971001888985387975611892418812654595523082204155146703096470155273232599557155545698087482101098079635101969826003097556279144174519459318470588566598654828987887235432734760908182679737230163206727953481372081792125713958894711799439970889720043895721777303824481093327232646083287863903619462793828022008191183574390831927661998525010483376197482265927853050672965674208970051765363610458729557085605258326270248270222574756819566525033708406387975587919878898458354460951408313501622822441558833547871780161
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							13b98d520da82d540e4db4fafabc7bfa782f5434
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feature.etc.se'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb273000001712c3e768800000403004630440220104beed96264c6216a861ee32b98f9c9b28f0247ff473a7670f35b72c6bad3e5022070041f333d3f3a7a5a68b2e88160ab1b5df38c10291451146ced6e634b0f6598007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001712c3e767c0000040300473045022100ac54d1b4251ff1a6fbb52bc07b75a207b1360d839901fe75205b9e4a2da861ff0220216a18bf7170c0d85e0bd5f3467690696dd7d3287ab95e7affa5a96981c975fa
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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