drift.bnaa.dk

Issued by R3

About this certificate

This digital certificate with serial number 04:b9:c5:4f:88:e4:ac:00:1c:9a:96:93:9f:b2:e8:d6:12:24 was issued on by Let's Encrypt.

With 40 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=drift.bnaa.dk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:b9:c5:4f:88:e4:ac:00:1c:9a:96:93:9f:b2:e8:d6:12:24
Serial Number (int): 411663652490561013712211232564287223763492
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: c1:ca:e7:49:ed:fa:86:6f:0a:ed:53:b6:68:18:b9:c0:ff:14:b2:06
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): bb:aa:27:e4:1b:ff:c2:41:8b:54:73:e9:71:04:2b:ee:01:f2:0a:79
Fingerprint (sha256): d5:ad:68:07:7a:20:7b:4e:8e:51:03:be:cc:e8:53:a6:6d:9c:88:8d:7b:0b:9b:9a:a4:bf:1b:38:12:6f:59:5c

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate drift.bnaa.dk

40

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for drift.bnaa.dk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

drift.bnaa.dk
jira-product-discovery.status.atlassian.com
netaxept-status.developers.nets.eu
payengine-status.developers.nets.eu
pharmasee-status.pharmalytiq.com
status-isac.happay.com
status-osh.highq.com
status-v2.envkey.com
status.agaveapp.com
status.airslate.com
status.apple-wellnesscenter.com
status.astridnetwork.com
status.betmodule.com
status.bloodhunt.com
status.castled.io
status.chatkitty.com
status.decentraweb.org
status.eu.workforce.com
status.exohood.com
status.getorbital.com
status.grandcentrix.net
status.growthzone.com
status.insided.com
status.koopjeserver.nl
status.mab.org.uk
status.mainstem.io
status.mycontactcenter.net
status.natera.com
status.pacifictranscription.com.au
status.saasjet.com
status.saildrone.com
status.sicredipioneira.com.br
status.superannotate.com
status.synergysuite.com
status.thegameagency.com
status.webland.ch
status.workforce.com
status.zeplin.io
thstatus-internal.intermountain.net
www.gedimai.lt

Other certificates including the domain name bnaa.dk

(limited to 100 certificates)

Certificate

The complete raw certificate details for drift.bnaa.dk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8g6BMhZ8ZB6fVC97vrIC
GiLs3TfyI5ALW5Ygoyra10U4eorH2TO5Tp5YyZoAX3BirwJjvEeTNpbzV9YOOhyO
m2d/vbG71aKvF8bRTAihe/XiLuTlqlyNbrGMCHbkUzWNPMwC1BB5piLaaavJpq0q
2PZ7mvnjAt3Z5DlyFOUeaz9UEIyZe++6A++RTNIZZL+99XNPrU/E2BwKZHEq4SnW
/5k33FhjZ5J3urvEM9KdpYPTux4QdB/lcECE+kaMzn5e/V4VZtsx48qhFblNdDXe
JBh7w6OVk2al1tYU8IoqdACtaN82U0ni7V8vGzugvPVVRT8kCtr01fD+f6v8anP4
PQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 411663652490561013712211232564287223763492
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-10 16:40:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-11 16:40:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'drift.bnaa.dk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30556822321402446995914162808692084151692692212011936893173133967009483184064772098170677235262014092123500597061343968894213250018951722560395620508606115273348568484365380378924387513041634467722044771309067518339300136326856575360266423226351734885991773306900061166171863986786789796095654669844927878424945448724071569790579952607857352088180323825382840128948035297051578044807720058314898749627555330442068812719209311647373891826628769577354703990940231058286668501910267352886782193689222554842144958177590712549408378314910064106775689010052899194189886549174235943513522964129129491645109797776694550198333
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c1cae749edfa866f0aed53b66818b9c0ff14b206
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (993 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drift.bnaa.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jira-product-discovery.status.atlassian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netaxept-status.developers.nets.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payengine-status.developers.nets.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pharmasee-status.pharmalytiq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status-isac.happay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status-osh.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status-v2.envkey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.agaveapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.airslate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.apple-wellnesscenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.astridnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.betmodule.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.bloodhunt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.castled.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.chatkitty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.decentraweb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.eu.workforce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.exohood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.getorbital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.grandcentrix.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.growthzone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.insided.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.koopjeserver.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.mab.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.mainstem.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.mycontactcenter.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.natera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.pacifictranscription.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.saasjet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.saildrone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.sicredipioneira.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.superannotate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.synergysuite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.thegameagency.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.webland.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.workforce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.zeplin.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thstatus-internal.intermountain.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gedimai.lt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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