inwatec.dk

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:2d:20:03:10:ac:df:ba:8a:4b:d4:71:b3:9a:e6:f9:0e:ca was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=inwatec.dk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:2d:20:03:10:ac:df:ba:8a:4b:d4:71:b3:9a:e6:f9:0e:ca
Serial Number (int): 276692115517693701989497553035668762463946
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f2:b8:de:d1:e2:63:da:d7:85:38:07:bb:45:6d:d2:ff:bb:3f:54:9a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 75:c8:df:12:04:58:90:53:44:af:72:52:67:9e:77:13:08:7e:a3:fd
Fingerprint (sha256): ec:0f:68:fa:d1:ca:9a:5f:a8:df:7f:54:35:63:7e:ae:1a:7a:b6:a4:e5:33:f8:95:70:de:90:97:16:bb:03:2e

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate inwatec.dk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for inwatec.dk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

inwatec.dk
www.inwatec.dk

Other certificates including the domain name inwatec.dk

(limited to 100 certificates)
*.inwatec.dk
jette.inwatec.dk
miastotogra.pl
makemycakes.in
happybirthdaysister.ml
athenrycu.lunaconnect.app
inwatec.dk
*.inwatec.dk
jp-dev.loogia.tech
www.anjalig.tech
refi-watch.com
nanaopoku.com
www.anjalig.tech
akut-med-group.de
*.inwatec.dk
files.inwatec.dk
*.inwatec.dk
finstein.de
mint.0xrichapewife.com
inwatec.dk
eolix.mx
note-app.hataluck.jp
www.homeinteriorstudio.com
*.inwatec.dk
inwatec.dk
inwatec.dk
jette.inwatec.dk
*.inwatec.dk
estrazioni.eu
inwatec.dk
inwatec.dk
static.flowject.eu
inwatec.dk
inwatec.dk
www.musiplan.com
www.homeinteriorstudio.com
inwatec.dk
inwatec.dk

Certificate

The complete raw certificate details for inwatec.dk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 276692115517693701989497553035668762463946
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-12 00:54:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-10 00:54:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'inwatec.dk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 1003840040293122669648938405600327718589173738937616773848811042900482996998119951528767073928006392824854600043296436636907205185521866289214266815327543084970561685270818992804867639098134753669790297121630461575318876119402301878470537982062030300185422218709588540260102586356054791527893270294936560301776211675132816413257899192303769306833368289981794008407436807047508469021721904667719390041331725075600239356281442073231573437499311719584636344453952609287213319631342488231473165965039251482287768818892041802268440280988509487591813741787362971738486135478799169085322366071585897610853215837018957409261847441525580358581825101205965725757180486607428851880341311974083534033670909440622981410097248730804252503784027881803001406169970382594563296897359970457604615148315877880429821940656103371670411465973095099248954266441515286038077432636484878388306741136285225170845160508420564834848092071510810006753794009378657692367131239687487807564162985684669692328685178800734494072337883929739730627001998529520599820201523341824049322477593845000138897278170326101413721917936313065452946954423872697770574317428100583236443033762715852199915971282711926279040147500750609552749868210854681198879496322276259683497106409
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f2b8ded1e263dad7853807bb456dd2ffbb3f549a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inwatec.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.inwatec.dk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016705a05586000004030047304502207e33eb52162cff8e80fa33e414ef6a005e59d77a9659345fcd9ff01ae45377040221009bc6bc03a3fe982b456797a27685b785d420b3d0d8e34f485638f8b7b401a6960075005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c0000016705a0564c000004030046304402204ac08d857b2d96ee1f50c4ac483ab2685d26fc4ebadfb3b8db5c0006efb939a402205ec0572e95de02dbb2ce74e5357801be058e8c94635abd7d70bdc72c21717bb6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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