dr.rutebanken.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:34:52:9e:73:22:ce:af:12:5d:0b:82:23:8e:f0:fd:fa:ef was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=dr.rutebanken.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:34:52:9e:73:22:ce:af:12:5d:0b:82:23:8e:f0:fd:fa:ef
Serial Number (int): 366253646220722625797122186625209698482927
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 8c:65:b5:c7:21:39:48:32:db:0a:f2:f7:7d:cd:f4:6d:6a:20:1e:c3
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 9f:24:49:b3:b2:b3:e2:3d:80:13:4d:26:dc:f9:a5:f0:b5:5e:e8:5e
Fingerprint (sha256): ef:2e:11:35:28:56:21:0b:13:8c:ab:84:fc:34:b3:36:f2:e0:cc:ae:cf:ba:ba:fd:25:aa:0d:e5:aa:b5:87:2d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate dr.rutebanken.org

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dr.rutebanken.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dev.rutebanken.org
dr.rutebanken.org
jump.rutebanken.org
nexus.rutebanken.org

Other certificates including the domain name rutebanken.org

(limited to 100 certificates)
carbon.rutebanken.org
beta.rutebanken.org
dr.rutebanken.org
operator-test.rutebanken.org
dr.rutebanken.org
operator.rutebanken.org
carbon.rutebanken.org
carbon.rutebanken.org
operator.rutebanken.org
carbon.rutebanken.org
operator-test.rutebanken.org
beta.rutebanken.org
operator.rutebanken.org
carbon.rutebanken.org
dr.rutebanken.org
dr.rutebanken.org
nexus.rutebanken.org
beta.rutebanken.org
beta.rutebanken.org
jump.rutebanken.org
rutebanken.org
beta.rutebanken.org
carbon.rutebanken.org
carbon.rutebanken.org
operator.rutebanken.org
beta.rutebanken.org
carbon.rutebanken.org
carbon.rutebanken.org
carbon.rutebanken.org
beta.rutebanken.org
beta.rutebanken.org
operator.rutebanken.org
beta.rutebanken.org
dr.rutebanken.org
operator-test.rutebanken.org
nexus.rutebanken.org
carbon.rutebanken.org
beta.rutebanken.org
carbon.rutebanken.org
beta.rutebanken.org
carbon.rutebanken.org
dr.rutebanken.org
carbon.rutebanken.org
carbon.rutebanken.org
operator-test.rutebanken.org
beta.rutebanken.org
beta.rutebanken.org
carbon.rutebanken.org
dr.rutebanken.org
operator-test.rutebanken.org
dr.rutebanken.org
beta.rutebanken.org
beta.rutebanken.org
carbon.rutebanken.org
beta.rutebanken.org
dr.rutebanken.org
beta.rutebanken.org
beta.rutebanken.org
beta.rutebanken.org
dr.rutebanken.org
beta.rutebanken.org
beta.rutebanken.org
operator.rutebanken.org
operator.rutebanken.org
operator-test.rutebanken.org
carbon.rutebanken.org
operator.rutebanken.org
beta.rutebanken.org
beta.rutebanken.org
operator.rutebanken.org
carbon.rutebanken.org
beta.rutebanken.org
beta.rutebanken.org
carbon.rutebanken.org
operator.rutebanken.org
dr.rutebanken.org
dr.rutebanken.org
carbon.rutebanken.org
beta.rutebanken.org
operator.rutebanken.org
carbon.rutebanken.org
dr.rutebanken.org
beta.rutebanken.org
operator.rutebanken.org
carbon.rutebanken.org

Certificate

The complete raw certificate details for dr.rutebanken.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 366253646220722625797122186625209698482927
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-09 05:53:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-08 05:53:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dr.rutebanken.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 944198062868706056012269495363976357866242081136351917736595511976572040468290436336759610427785971634593007598438325738510833159789052192462689626478839413590006189738927307994362036861025871627203550153202865775666410268725861379007491564796617364959092549816611975607793779292969727168500546117325719269650321319636949841906189619295672329487375078738786306312154766097381222331361951494572326945319951106917728885529971611435453965539164058536632750451774819732746572790700494385122719214325062610834181187372161636328320324741065701946970558716160471148267858331589051148087204998393671509314099738194539151100095435358610559159995402070168246049877794604544334055977302223928556636197731321844725887423840905567029034993028778740736846663665847720511959035707286572531034553403303719995677302268314891457682594717750889068105149114643576288967215171536342993586942812775593913298041890612983804487797795530045063405978457091431110980819091324044410399225682293206869134815506831687726026270986859936541900365081583254238542263483285087078848993799485926992075563137782901807599118289669238063454092272117479227888510414147758251227133190445807939549213913674452144500209726139011713752590013562939835147503884277656760603893761
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8c65b5c721394832db0af2f77dcdf46d6a201ec3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (84 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.rutebanken.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dr.rutebanken.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jump.rutebanken.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nexus.rutebanken.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016a00df7352000004030046304402206a4e005e0a1c895dc3c33fd35f69080940cd5705ba9ad3e096cd4877f07b4c800220150964a3346a26eda3b786288c948e10e07210b8fcb03ed33ce7f861a736171500760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016a00df735200000403004730450221008a06a6d0801425e7c675e395b6de0c1b69f5876b694e1b4f9b10927d5aa3a5220220192366ef9aa35ef22eb6dbe3a094a50621fe2bdbe4fbbc304cd6d5dbb98599ab
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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