ginzburg.se

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:0d:fc:b4:a4:80:ef:b4:0c:51:32:ba:ed:2e:72:42:b5:6f was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ginzburg.se

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:0d:fc:b4:a4:80:ef:b4:0c:51:32:ba:ed:2e:72:42:b5:6f
Serial Number (int): 266096431970155839416701319675977908008303
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 84:d9:b0:dc:3c:55:70:83:0c:ce:9b:c9:3a:a6:ed:33:25:5f:ff:1f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 30:0d:e1:27:ad:f7:0d:6e:7a:3d:aa:8f:7f:ae:36:ab:7e:42:2e:62
Fingerprint (sha256): d4:d2:f9:cb:97:0f:b2:91:8d:ca:8b:da:97:86:fd:55:92:3e:be:d0:22:f8:57:95:6e:90:70:0f:af:30:91:aa

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate ginzburg.se

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ginzburg.se

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ginzburg.se
www.ginzburg.se

Other certificates including the domain name ginzburg.se

(limited to 100 certificates)

Certificate

The complete raw certificate details for ginzburg.se in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGXjCCBUagAwIBAgISAw38tKSA77QMUTK67S5yQrVvMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEyMTYxNDQwMjlaFw0y
MDAzMTUxNDQwMjlaMBYxFDASBgNVBAMTC2dpbnpidXJnLnNlMIICIjANBgkqhkiG
9w0BAQEFAAOCAg8AMIICCgKCAgEAnq4TN1zpUn9WsbGn7J3n/o71whmmroLzDeQG
lV030F4MxS02lFuqenF8q0mjJMXohCiAt2oa7v21MQBIrgJnZELtrwoYQhifUJCf
Mtgbz5o3ETQZXaYN+OD+qJ7IdRqMChJll7RtWl8ZNKJ7DVuda53HFyM5+wEYEHLe
8GiEXbSd7DeJ1V59tujfB6InMKhI6fEYJhTcIeeg9o4AesY9lTEvBlDBv8KntpJM
56dykieHkrn6qJr7rj6PQcEn9PqQT1dXCcrik40n3ceS7z5OlhPNtNSQAx3tujzL
BTT1RaNfhmZYxnQb1uEBdFOoGRmmEJoncr+QLNmjBG6BFdXyKdBWMJo3GR79xu4W
7FUi1CS3PCr1SoG2qSstRQhoPj3WFZ2Bz3+mST9Gok6PHwRnlQ9bWUF/MMAfLTv1
3G9qI2zev6TVjNkgtcGPA71rWoB7exlN0wE1otw2W0uK12hdS/pXFs9Wpf64Uy2z
gyRJ6Z0pWI7eDmJ3bj9ZSd7mYWE3C2Lr8coVslKqGBcdZimI9PswzvfbcPamfXeN
u/skEQcih6+ppogc2k1ydzVNvpSooLvcXk6/eXc+OS/f7mmHxZ4qILqovlsEU7na
n2KE2m0hqPXtQ6gb3RK5OSMNEdV95UevHstHco+pemyvY8HYjMdX/EJcoBRdtUGu
jr1T34cCAwEAAaOCAnAwggJsMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggr
BgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUhNmw3DxV
cIMMzpvJOqbtMyVf/x8wHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEw
bwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMu
bGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMu
bGV0c2VuY3J5cHQub3JnLzAnBgNVHREEIDAeggtnaW56YnVyZy5zZYIPd3d3Lmdp
bnpidXJnLnNlMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgw
JgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBAwYKKwYB
BAHWeQIEAgSB9ASB8QDvAHYA8JWkWfIA0YJAEC0vk4iOrUv+HUfjmeHQNKawqKqO
snMAAAFvD14z0AAABAMARzBFAiEAmONxlIREIYjb8x159EHsZ8Z0JYX9bXx27SuA
ivStQEICIFuK8zbsIvxWScY9cNuVgXPewDgdcUaMuRe09WlpuNQyAHUAsh4FzIui
zYogTodm+Su5iiUgZ2va+nDnsklTLe+LkF4AAAFvD14zxgAABAMARjBEAiAPM8X4
w6GqaR4jWI8kQSD6Bc9siuozmv5h/QKoZ9X1VQIgGLhbF7FHB+pD+tys4LUE7vyI
SSKbsrC3BniWBAjz81MwDQYJKoZIhvcNAQELBQADggEBAAso0TmVN+U+/jvLSQfK
PK0hNJNll471AiotzQ7xlxFa/grvtauYafCVK1Tsmiy7BK0oM49Yayd87JjFrYju
tXaFrcPm8vsgrR/0inPP1P0b50d4xgKUe17NuMxQBTWlV9TUni4YZT5bcYJuNivk
J6ZUwOkIPTxsjMCGL7gtkz2kn0eQDdsFd1gsJUkWOwaE9L6VREib6lXWZrPd/7+G
bVlkx3Lk1HfJ04CcLUgNy1n8TR4cKo0/iioky8JFMgn8zoLU5ZJOaxZ6f1cxXgXI
9Lqyn0NaZFFyCiq/3uB8wdIrwxbgC79Q9H9sllulATBte0l+WGYoL2NbPxMM/Tq9
t4Y=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 266096431970155839416701319675977908008303
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-16 14:40:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-15 14:40:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ginzburg.se'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 647357842045168748900508114457954312250280067461814338140715542333304973132822745931950260714540670521520456056643567268059203874265347746768318346486724258438245726288973386208869384839788463094567821345616886595634260610431021797957475228294957552867463640625392085861838094785725198741533791705844939404561435776068776265155294120914410799109449477174041272999522471129442920445024678528286508506467982221787714132978414657944639874640637978012098902393257824185017685551519218833725934060960721533354418262606394344555456576837618490391255832786095355966932239653826693979874543201606279587337803524998528931791381902226699526114599078638446712639166708205406384524788174443876358654437347040991189239612884550051429666623817426436218937928329826792884750727948925030117475387101163157479885572632325978174114706692701426755164445234472496224985896093997716791058460355723981482351434869908195616453896467722908624231864793533192005538199116365084449554098231846095028246099349752066654115001371869897411706230951998224082747240674728748101759955154396631000872401979612476691275634812327285117834992900073925894198852039340518158788650140108102333912632229428800746392958439513184883683148756815769698991078218185151802313531271
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							84d9b0dc3c5570830cce9bc93aa6ed33255fff1f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ginzburg.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ginzburg.se'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016f0f5e33d0000004030047304502210098e3719484442188dbf31d79f441ec67c6742585fd6d7c76ed2b808af4ad404202205b8af336ec22fc5649c63d70db958173dec0381d71468cb917b4f56969b8d432007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f0f5e33c6000004030046304402200f33c5f8c3a1aa691e23588f244120fa05cf6c8aea339afe61fd02a867d5f555022018b85b17b14707ea43fadcace0b504eefc8849229bb2b0b70678960408f3f353
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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