gave.citycontainer.dk

Issued by R3

About this certificate

This digital certificate with serial number 04:74:ba:b4:db:e6:cd:18:84:c9:3c:71:b1:9c:d0:c3:0a:1f was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=gave.citycontainer.dk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:74:ba:b4:db:e6:cd:18:84:c9:3c:71:b1:9c:d0:c3:0a:1f
Serial Number (int): 388170073770654033615874489811129585568287
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: ef:00:78:61:24:17:53:c1:fa:13:3e:6f:f5:92:72:e7:18:1c:fc:d7
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 98:db:71:14:fe:31:75:87:0a:91:84:07:7e:ed:23:b9:2f:e9:b2:33
Fingerprint (sha256): d9:06:ed:07:ed:20:29:2a:49:43:f9:c2:e6:ba:91:18:b4:e5:15:59:93:b4:62:02:fb:d7:c1:0c:36:ce:68:1d

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate gave.citycontainer.dk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gave.citycontainer.dk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gave.citycontainer.dk

Other certificates including the domain name citycontainer.dk

(limited to 100 certificates)

Certificate

The complete raw certificate details for gave.citycontainer.dk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtB+502jDjSs/oYwWD5pl
MgNLP689pE4emvw08idt87wzKPOB4vQ5Fz0kFzDgj4hMQu3oDIShw9Zx5Iu8EDxM
25+XCTJFjhK5MGs2bFZ3KKW55+/3r8Jmx57cvxIzyx/EBshgQ+rTUdwP2IyrGSB4
E2kIurUPFs5s3Ex65OnEuSDhfd7p5cPNoLsPg7j5ZItCw6sliYpBdY33kQLIW7lf
/gRuMuxWFwR+kPyqM7DcPLWqNMBKEVhNh2TR8Ms9zMecdaNWH63BTA0Fe/TISd3F
SQVeGnpO4sQCMnTO3i0MZYl8/PQx3NBBVtmCt1SkRli+QVqrO9NdkmY5BTG3mzuF
6wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 388170073770654033615874489811129585568287
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-07 19:02:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-06 19:02:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gave.citycontainer.dk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22738539509436328831255493048011671100255762246748087048551319928376266618862186457354810876331984163492028133666505561538808703961107526639571289248932997466036684238456912091141040191433164566206645809882030590128607695161869014418054177773267126156167436243817994415113093371425143599501339991044307354211317028895824749945403469526177413198916251454387502893632743151359282757766211434124417536773537518251145845433527237758058466210585149394905221616382608348512200918204729840393342647919934128205854484847284188404315641840700575204327098393289682898624422367498286740667180554790203293716401316805966149944811
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ef007861241753c1fa133e6ff59272e7181cfcd7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gave.citycontainer.dk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018ce5851d5c0000040300463044022069645609eecdf4fb6dd92b303f9be88f95b5375388fc12fa3c01301d3ee502dd02201c75d5da948c32a142bf395fddd9dc10cd5c93c836b58f513f21f21b409ce0f6007500a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018ce5851d5c0000040300463044022009d0f4437fe66b683b42a5882e30411049ae898ffdb7021b57bff6fc3f97b2fd02201b4d3343b1a303ae73ba9d9529d52056c2ea2c2daa0bba818e10a07de44b2776
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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