stenhusivast.se

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:3c:9d:9b:20:7d:7b:58:1e:b1:f5:05:c6:91:2a:67:8c:89 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=stenhusivast.se

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:3c:9d:9b:20:7d:7b:58:1e:b1:f5:05:c6:91:2a:67:8c:89
Serial Number (int): 281963294070867153255772866108601586388105
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: eb:2f:d0:be:48:26:26:53:57:2c:a6:4c:18:1d:3b:9a:ee:9c:6f:29
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 18:d9:21:95:c0:bd:a6:b1:ad:f2:47:d1:3b:a0:72:a3:3d:7e:2f:c0
Fingerprint (sha256): d2:55:e9:d4:d7:96:77:67:cd:38:1b:23:f4:dd:0d:84:00:fc:95:3f:3e:e1:6e:ab:3d:43:1b:e0:e2:4b:ca:02

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate stenhusivast.se

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for stenhusivast.se

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

stenhusivast.se
www.stenhusivast.se

Other certificates including the domain name stenhusivast.se

(limited to 100 certificates)
stenhusivast.se
stenhusivast.se
stenhusivast.se
stenhusivast.se
stenhusivast.se
stenhusivast.se
stenhusivast.se
stenhusivast.se
stenhusivast.se
stenhusivast.se
stenhusivast.se
stenhusivast.se
stenhusivast.se
stenhusivast.se
stenhusivast.se
stenhusivast.se
stenhusivast.se
stenhusivast.se
stenhusivast.se
stenhusivast.se
stenhusivast.se
stenhusivast.se
stenhusivast.se
stenhusivast.se
stenhusivast.se

Certificate

The complete raw certificate details for stenhusivast.se in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 281963294070867153255772866108601586388105
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-12 00:16:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-11 00:16:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'stenhusivast.se'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 606551086566976766401925118209522613974060965606232503519109438027656521037427038309339085437564215726812726400431451730807226944311367574350502253457866710901150237428758785079206652203109237077953054707883530334817518290760329799073657753341850483559574787071846462026964930312842741275141749269973312612749084441925933001140691607798261607322352314596087111959245920985240714719382612718444768023521297983214163147499702597202747313722786366755848689814022231201201873073625798032241051538099033633908084151643460742504978273860419722268498708282615888446942846572039502604032080877913524747352528420994108476389135705524660659514719918267235958278330866981113263203260520580612334819607737953192812757924230830259905802601892398121611753931835251086340686677147670790919311755901559875118142916266483418953407909765424895487469045137781638943033334913064794958790337176563662248969149391322668116927673935051238345390899623308819288656072716388594335880424439271759425932328955128554277568686298543369363034552915660147779431414407308900279670248386255749211234352837820189011260178624564527271282890919139167451494592557821510811031503034395490715612772941260966997445120044825953040197430051403829533949550868712420951702649917
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							eb2fd0be48262653572ca64c181d3b9aee9c6f29
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stenhusivast.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stenhusivast.se'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf6400000165cb59fb51000004030046304402203f4c8564b380ac5c602984dd344e1d884559adb2215baa243ef501617b64310902205edcd279309d5054e319dba208ef88c2b22771a442e7ffc3b1b7d99d3a55f1c0007600a4501269055a15545e6211ab37bc103f62ae5576a45e4b1714453e1b22106a2500000165cb59fb5100000403004730450220516459756aa27ecd3037349e7c26b896007c1fe61b8155a65bc2d469d539d4b4022100a6c2bee405d0f75148888dd425758fc53fb60b0e250c7809eba960e4f598a935
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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