folksam.appzone.se

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:a6:a1:3d:f4:39:5a:e4:b8:61:bc:7f:3f:7d:33:4c:6d:1b was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=folksam.appzone.se

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a6:a1:3d:f4:39:5a:e4:b8:61:bc:7f:3f:7d:33:4c:6d:1b
Serial Number (int): 318038058095038345665824530183823792303387
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 40:a3:50:75:89:33:2e:11:b9:ee:c6:38:fd:a4:b1:c7:0d:4d:74:c9
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b7:c0:23:52:2f:0b:bb:af:f8:99:b1:4d:47:fd:b7:56:ba:c4:86:4d
Fingerprint (sha256): f3:11:7c:94:de:fe:70:67:de:b8:79:c9:25:fa:89:19:2f:1a:d5:54:2b:4d:d2:67:8e:3e:6a:05:61:cc:ee:f2

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate folksam.appzone.se

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for folksam.appzone.se

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

folksam.appzone.se

Other certificates including the domain name appzone.se

(limited to 100 certificates)
folksam.appzone.se
*.appzone.se
folksam.appzone.se
*.appzone.se
folksam.appzone.se
folksam.appzone.se
folksam.appzone.se
folksam.appzone.se
kreativtsamarbete.appzone.se
*.appzone.se
folksam.appzone.se
lf.appzone.se
lf.appzone.se
folksam.appzone.se
lf.appzone.se
folksam.appzone.se
lf.appzone.se
*.appzone.se
folksam.appzone.se
*.appzone.se
folksam.appzone.se
folksam.appzone.se
folksam.appzone.se

Certificate

The complete raw certificate details for folksam.appzone.se in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 318038058095038345665824530183823792303387
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-05 02:01:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-03 02:01:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'folksam.appzone.se'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 904391556252839178371006109867400260811911664698525295632195535686181001078945382800822453127385634057378863749704087285969778591682222081494456527744556425673592136479536169800627561932853924766688173154939793228052529056717061156482213590092300314211646430451994885674126078141943901586000400829695549245874776216250151154287820268661555564898403761726312728529320665268192903132889804632085162176176154364250670359926016867264474531194531159880076389701843783297921948286836203358677553476438526937960997771356385268710705993058364961822217208680272504498626993008345565880763213188619052344184075333811562993796461516301166621915823130512254029687709452160957719233412099146889357150411457748622605449897902574829813455584916785620090932600127377858275655600860030056180533739352264490410668494410502466022107446373288974758181989708405939307756061496032906655919483462796935608495996953673966605582757300085252542297101690368696293480514222724220538255368295305856609467172082957685176417573986056300043532838181680351076459757249422204099889637742663845155447486667595924613093680397914017441441328250599424080501639633879548402662757349809265564672182413523627350928967073520604227198652796538400098650415634992777649922967421
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							40a3507589332e11b9eec638fda4b1c70d4d74c9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'folksam.appzone.se'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000166e1d118400000040300473045022047a5c4187a4aaf2d7be8b14b6f9fa26ebbeb416da31b6abe1b6b6938e8c4e264022100ba97aedaf2119fda7fa6dfffcf4a15fe01cc8a9ff9c951a5d75a854d90758bfa007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000166e1d11a15000004030047304502210098af50b5d88dc9cec80a4dbd0fb5554088b56452543dc4e71a8b3eb3a099ff22022049ec57b783135cbfbdaa4b08c2a6329870314ae9fa28419edb2a310294428008
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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