ramna.se

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:18:a0:46:10:fe:68:fa:b2:33:54:8c:ba:d1:9e:d0:1b:35 was issued on by Let's Encrypt.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ramna.se

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:18:a0:46:10:fe:68:fa:b2:33:54:8c:ba:d1:9e:d0:1b:35
Serial Number (int): 269716674886163943491645597775066997726005
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ec:a7:5c:29:a9:a9:46:25:02:5e:de:f6:8a:e1:96:c2:78:f4:83:e3
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 49:fb:3d:a8:73:fa:34:37:40:b3:3b:57:f3:e0:c8:bc:2e:24:f6:12
Fingerprint (sha256): e1:a2:c8:f7:cb:4d:0d:99:4e:21:94:00:35:17:17:c4:c7:8d:47:54:e8:0f:7c:9e:a5:77:22:16:09:0c:cd:80

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate ramna.se

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ramna.se

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

b201473.web05.cust.bluerange.se
ramna.dk
ramna.no
ramna.se
www.ramna.dk
www.ramna.no
www.ramna.se

Other certificates including the domain name ramna.se

(limited to 100 certificates)
ramna.se
ramna.se
u606426.web03.cust.bluerange.se
ramna.se
ramna.se
ramna.se
ramna.se
ramna.se
ramna.se
ramna.se
ramna.se
ramna.se
ramna.se
ramna.se
ramna.se
ramna.se
ramna.se
ramna.se
ramna.se

Certificate

The complete raw certificate details for ramna.se in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGpzCCBY+gAwIBAgISAxigRhD+aPqyM1SMutGe0Bs1MA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAxMjMxNTMzMDJaFw0y
MDA0MjIxNTMzMDJaMBMxETAPBgNVBAMTCHJhbW5hLnNlMIICIjANBgkqhkiG9w0B
AQEFAAOCAg8AMIICCgKCAgEAxhYWg3NNQyE7uDSK/9lGFPx2VH+C6gg3+9NnqlJa
ID1EZJYbRjDN6OI/I5tWqflo3a04TlBnoGkzsYsdYWtvW9UaOy7AyOaSOTiBuoKo
hOCUmQkAFk92Oy7Ij/X7bRTWaXF/woH8WjuTV+C9LLGrB2Si1R+FfVB19yH3fPNA
YQODxxcbfLBSg8AACQmXQ1r275mTUGqOClKbdxEeDCwPJkcASQ0pq2vpat0LVxbV
QrzyKcUbah7mkOWQUL1LAAnRpq4/kGmo49bRQEKk0Kof9LnULBkdDj1cl/9dP3Ew
u4WPpSU3FA72rUOfUAWlvJbNODuQ2rVhm+AxGRpx8Va61rX1F642b+HN2eFUOMNY
Rw/qqSFCTZctOKMB6eV5g3inlV7EGQgtmt7xz8H9yh2qNSwHdT+lUdAxHRJPfzD6
PwDdl+r18uGZRj+TNPY+s63GIjg9r1vTf+g7bGPc2RI7/wWr7LppG3WuWh/z8a5H
azbQgvBuHOL44k8v8gjKleoPl3ikk9LxwveU8DR5mycP0FZXBv1zT4JhsH86aDZq
/4UgiffFNS6k2iV/A+UPPF0HWiuZlWm173iBk0kzq7VCiD10RxHqvySDz5hk1504
QwMFuEvuoUXeYo9hFoUbcoQWBwA1Uei1qDLX0iK2lJHAWlYQHKANSL6C+7hxoIwS
Ag8CAwEAAaOCArwwggK4MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEF
BQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU7KdcKampRiUC
Xt72iuGWwnj0g+MwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYI
KwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0
c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0
c2VuY3J5cHQub3JnLzByBgNVHREEazBpgh9iMjAxNDczLndlYjA1LmN1c3QuYmx1
ZXJhbmdlLnNlgghyYW1uYS5ka4IIcmFtbmEubm+CCHJhbW5hLnNlggx3d3cucmFt
bmEuZGuCDHd3dy5yYW1uYS5ub4IMd3d3LnJhbW5hLnNlMEwGA1UdIARFMEMwCAYG
Z4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMu
bGV0c2VuY3J5cHQub3JnMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHYA8JWkWfIA
0YJAEC0vk4iOrUv+HUfjmeHQNKawqKqOsnMAAAFv0z/3hAAABAMARzBFAiANxuDs
leXb+pu+ioV2mFuC228NKeXbaYOZqlLgTh8vtwIhAN425MVE/oJH7z5KKhl/q37z
Uv3N+LNztOk0qctk6aWTAHYAB7dcG+V9aP/xsMYdIxXHuuZXfFeUt2ruvGE6GmnT
ohwAAAFv0z/3rQAABAMARzBFAiAiGEVpOg17rmXBRuJanHFwMmkF0ox40PNx50sq
O6tK8AIhAIlUlQhJVgSIqVo8yCBmVHBQEiE/oxUO4IuH0FrNlBQfMA0GCSqGSIb3
DQEBCwUAA4IBAQAv8AuXHbiwW8waFWvqIym5IycFY1sTfKofgKHj5W6+qkwduPEh
x7u8t4Agy0m7vErNfuzm0ioUwvqYWZVzx3L+iT5voNPhpmYP6gn1HIe42YrPlbQ2
aCOAEbqUDWdS6K7et5LPH0FYWUYzM45IWwHzxWvldhZlB4PIhIPy2OYPYmwHV9yr
A92VN9vcZXVNohuyoVCttA7mE+mhNTgr2k+yABpUz4txp2joJi1idjtxtNp7FPpK
h98raUTY36bqFQL/EUptwGhCEjK9E3y9gVbBaw0+5HgO4yBCfMQ/mS1b0jXbr/s5
98sz3JrD3GYO1H8N8y+3skHVdCcDC0oeuFGj
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 269716674886163943491645597775066997726005
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-23 15:33:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-22 15:33:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ramna.se'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 808121521353735500609441895345827333666246958643214826879274705382658499007681948838350488207278666878630560833093128510682471416601346703803543463872836319388534098872073858616267666354524980594037867836864899477620198338703347370012709119374695955980197605621969943502758084674068390463956673110051829914364207588409042368218501093800778193327792887228523463212858066532357045354152562394711083388483720963985066930060296894723587724388368048883666853515074800402268779988726560674232355700288904631108647039622502093977488250047064015796278507335085791227049716362935901962557315126722724746280241043619877936216975525407184396208512946968589885228480607370574551586740379897477162440564835338314618079873144155481904325752233610556164299005323568179282143061088996390766631337676712385836390726382594312233316640474875216832039064558939048135386993572268386136322336909020960653092500492002078868439285192841685781674113681452045637409235620713324362944071722346318389034290530999263321692254965060794621545992681490646873617055563111064535427271421759549686339694739794074518319675436560374406899466394911179020343122553591086640409850260493919986296841819249207437917720297838470759453518041785335109842170772494168010047750671
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							eca75c29a9a94625025edef68ae196c278f483e3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (107 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b201473.web05.cust.bluerange.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ramna.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ramna.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ramna.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ramna.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ramna.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ramna.se'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016fd33ff784000004030047304502200dc6e0ec95e5dbfa9bbe8a8576985b82db6f0d29e5db698399aa52e04e1f2fb7022100de36e4c544fe8247ef3e4a2a197fab7ef352fdcdf8b373b4e934a9cb64e9a59300760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016fd33ff7ad00000403004730450220221845693a0d7bae65c146e25a9c7170326905d28c78d0f371e74b2a3bab4af00221008954950849560488a95a3cc8206654705012213fa3150ee08b87d05acd94141f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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