DV SSL/TLS Certificate for stockholm.lo.se

Certificate is witin its validity period

Issued by DigiCert, Inc. (GeoTrust Global TLS RSA4096 SHA256 2022 CA1)

About the stockholm.lo.se DV SSL/TLS Certificate

This certificate with serial number 08:39:8a:f7:f5:46:90:31:b3:41:b1:7c:73:49:7e:bc for stockholm.lo.se was issued on by DigiCert, Inc..

This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We found a BIMI record with a (Verified) Mark Certificate (VMC/MC) for lo.se, check the certificate details of the lo.se BIMI certificate. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for stockholm.lo.se provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 08:39:8a:f7:f5:46:90:31:b3:41:b1:7c:73:49:7e:bc
Serial Number (int): 10932603505006390263049944173864648380
Serial Number Length: 124 bits, 16 octets

Subject Key Identifier: 54:94:ad:6c:4c:24:f3:21:fd:b2:af:8b:3a:55:c5:41:28:bf:16:5d
Authority Key Identifier: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (SHA-1): b4:58:34:b0:a7:86:05:9d:06:e0:98:1d:d5:a6:81:6f:db:7b:0e:7e
Fingerprint (SHA-256): 0a:e8:67:13:58:b0:fd:f4:34:ba:9e:ca:cf:90:39:99:b4:4a:a4:df:37:71:9a:fb:c1:3c:7b:01:82:6f:eb:44

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation Information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate stockholm.lo.se
1
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for stockholm.lo.se

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

stockholm.lo.se

X.509 Certificate

The complete raw X.509 certificate details for stockholm.lo.se in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApiW6e8n9p7VQCEVukcXb
64wnARJxObECaQJfivRWTOULx4vViqvZAhoea167Y5OlOuQ/hzOSK/fxQ4H1bGCp
cACho4pZmg6fZC4FgUgczxQucHM9XfdJjXiqK6uFSc6KrYJNiRPR4a8BV+gY2dHC
Izg1MRJh0dqmPkdr/EkrgoLy4sJJm8azRvLl2BNKb8HVUncF0Y4gLxtVuyGB6vSf
mAc9i2rconjmltPFxPPswEEv8U4YAtNS0U8bj6YlWvWhuJoZ0u4pUb+hdz556i9y
Pv4JscBxa7KEkxAEMqYN/mhGZOc/5d/uy2Di/IOz6dnLRnmVbJk40BdOj1hnsQU3
tQIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10932603505006390263049944173864648380
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-08-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2026-02-28 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'stockholm.lo.se'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20974163217139265845864206065941537270173900046524488845499150890088912362039973605801263477856275078720985920954240635800037004868551827417026002723224213010002843994441297684251418578115260455789429917965462465385544659681573354549506151333223307841076678696063231499676725761748964864415960614872538645842563416988196245857963806696397034851577424909496761299948454913873776263354690252591957029445127862319074931431571456512786550127212530820033018790163460550046067378364582905849803173375414978321221093187678996376827808757521132945496387071514591666254038506005206020018779946301762880608177163070815663896501
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5494ad6c4c24f321fdb2af8b3a55c54128bf165d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stockholm.lo.se'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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