*.nextwave.dk

Issued by R3

About this certificate

This digital certificate with serial number 03:97:76:37:19:8c:24:32:57:2e:e2:56:3e:0b:a7:15:3d:4e was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.nextwave.dk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:97:76:37:19:8c:24:32:57:2e:e2:56:3e:0b:a7:15:3d:4e
Serial Number (int): 312876630198335672573007543184286547262798
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 56:cf:39:e0:cb:f6:71:11:55:a4:a3:01:eb:50:2a:80:10:41:0b:d4
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 49:2b:a2:24:7c:e2:16:8f:f0:0d:45:e8:27:8f:1e:5e:26:e6:e9:d4
Fingerprint (sha256): c7:6b:aa:fd:05:f6:ce:47:9d:ea:42:6d:6c:5e:bb:95:af:4b:2c:eb:ad:82:fb:8d:51:47:c9:4e:46:26:63:9d

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate *.nextwave.dk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.nextwave.dk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.nextwave.dk
nextwave.dk

Other certificates including the domain name nextwave.dk

(limited to 100 certificates)
kunde.nextwave.dk
kunde.nextwave.dk
webmail.nextwave.dk
tennis.nextwave.dk
tennis.nextwave.dk
*.nextwave.dk
nextwave.dk
webmail.nextwave.dk
kunde.nextwave.dk
nextwave.dk
kunde.nextwave.dk
webmail.nextwave.dk
kunde.nextwave.dk
webpost.nextwave.dk
webpost.nextwave.dk
kunde.nextwave.dk
kunde.nextwave.dk
nextwave.dk
webpost.nextwave.dk
kunde.nextwave.dk
nextwave.dk
*.nextwave.dk
webpost.nextwave.dk
webpost.nextwave.dk
webpost.nextwave.dk
kunde.nextwave.dk
webpost.nextwave.dk
webmail.nextwave.dk
webmail.nextwave.dk
webpost.nextwave.dk
webmail.nextwave.dk
webpost.nextwave.dk
nextwave.dk
kunde.nextwave.dk
nextwave.dk
webpost.nextwave.dk
kunde.nextwave.dk
webpost.nextwave.dk
nextwave.dk
*.nextwave.dk
kunde.nextwave.dk
nextwave.dk
nextwave.dk
webmail.nextwave.dk
nextwave.dk
*.nextwave.dk
kunde.nextwave.dk
webmail.nextwave.dk
nextwave.dk
webpost.nextwave.dk
webmail.nextwave.dk
kunde.nextwave.dk
webmail.nextwave.dk
webpost.nextwave.dk
kunde.nextwave.dk
nextwave.dk

Certificate

The complete raw certificate details for *.nextwave.dk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1yYyS+qI+wsEUzkmfriF
XqYu4FRroXt1Uze/RQdsFzC9yzCiUD8Tbu57jurouucIvBki4/Fn769K/6P2G91N
m7Hu+FYTKrZ39SGAqlmDZAkpPYyS0+gW+DJeQeuV1sx/GXQ4WmxLUwDHjj/9wYz2
WyuGHffwuDqspctTcQbLkYE4PvqZiyWuUFePBXM32tTr/MdA9KSoJ2F2Za/vohYr
nkd4FAcKnOU3nIOyWOpbUlKrLpCNjxT8l0Tc26t030PvmezyHrAEPfKwejwXNAwc
/VrzTENIETmzogO/e6ZZkO2fZZ+SC2vG6eFjLGmGXI43e5+Ot3KVH41nV5Haqog4
SwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 312876630198335672573007543184286547262798
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-01 14:04:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-30 14:04:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.nextwave.dk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27160070949502045971745250027090523131311643532261521910917318721707467248421381476957907168991923158652003261955294409970621700620314828725716134896101168537430290299163367030714584807576178719918647315121750323475141636493591838529613648335763449527094512409798420223348357650528208548688443595146403191085907687542907293077778973243427068713787384271972003799840553679151587075788543800798631960067350555474737995868380227309023867634215765375493219529827673349875585910335643072019498666071318799800785650847085879504176618885057405725445858637439117884892103127300907318980352790602353221689300739345634384427083
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							56cf39e0cbf6711155a4a301eb502a8010410bd4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nextwave.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nextwave.dk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018dfa8b4e370000040300473045022037660f4eff07d2a635f3a1d9e37a57746ba4bd2c0d1cfa5da5f1a6a86ab0b0fc022100cedb0aec57c42d3981fd67068149d7f12837ec5c6d0b3b73a3e3f310aaeecea50077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018dfa8b50300000040300483046022100b8da92f0eab0b99518a863d6474d3fc970ac89cd9a97c3da74fb3c3d436699c8022100a6533270f45556a21905aeb7b0e47cf4e67a2cd5e9913e07861aae78bce1598f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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