postnord.no

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 07:60:ba:7e:6c:3a:d6:a7:e7:d0:89:00:b2:6f:6b:d6 was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=postnord.no

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 07:60:ba:7e:6c:3a:d6:a7:e7:d0:89:00:b2:6f:6b:d6
Serial Number (int): 9806839013344023012651480026828467158
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: ff:50:f3:34:8c:06:7c:07:3f:a7:1c:45:ec:f6:ea:b4:a4:9b:bb:a5
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 3e:f3:0f:ae:0e:ff:c1:88:4e:0c:66:20:e9:34:c3:28:2b:75:84:b6
Fingerprint (sha256): 00:06:b3:4d:05:4a:9e:fd:7d:83:20:03:d2:25:12:a9:31:90:ed:0f:61:ef:a9:45:c5:22:38:2c:62:34:8f:34

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate postnord.no

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for postnord.no

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

postnord.no
*.postnord.no

Other certificates including the domain name postnord.no

(limited to 100 certificates)
postnord.no
contacts.api.postnord.no
portal.postnord.no
portal.postnord.no
apistatus.postnord.no
apistatus.postnord.no
portal.postnord.no
t.postnord.no
apistatus.postnord.no
t.postnord.no
*.postnord.no
apistatus.postnord.no
stg.logger.api.postnord.no
contacts.api.postnord.no
ac2ada-status.elastic.co
alb-dev.cloud.postnord.no
contacts.api.postnord.no
shop.postnord.no
stg.communicator.api.postnord.no
my.postnord.no
shop.postnord.no
www.postnord.com
apistatus.postnord.no
*.postnord.no
my.postnord.no
apistatus.postnord.no
apistatus.postnord.no
my.postnord.no
contacts.api.postnord.no
*.postnord.no
apistatus.postnord.no
shop.postnord.no
apistatus.postnord.no
apistatus.postnord.no
contacts.api.postnord.no
apistatus.postnord.no
my.postnord.no
contacts.api.postnord.no
postcards.postnord.com
contacts.api.postnord.no
portal.postnord.no
webmail.tollpost.no
*.postnord.no
my.postnord.no
t.postnord.no
woocommerce-dev.cloud.postnord.no
contacts.api.postnord.no
portal.postnord.no
communicator.api.postnord.no
communicator.api.postnord.no
contacts.api.postnord.no
apistatus.postnord.no
apistatus.postnord.no
portal.postnord.no
contacts.api.postnord.no
apistatus.postnord.no
communicator.api.postnord.no
checkout.postnord.no
ac2ada-status.elastic.co
my.postnord.no
woocommerce-dev.cloud.postnord.no
contacts.api.postnord.no
portal.postnord.no
contacts.api.postnord.no
apistatus.postnord.no
*.postnord.no
portal.postnord.no
portal.postnord.no
shop.postnord.no
ac2ada-status.elastic.co
stg.portal.postnord.no
portal.postnord.no
apistatus.postnord.no
t.postnord.no
portal.postnord.no
portal.postnord.no
apistatus.postnord.no
webmail.tollpost.no
my.postnord.no
woocommerce-dev.cloud.postnord.no
t.postnord.no
apistatus.postnord.no
contacts.api.postnord.no
portal.postnord.no
shop.postnord.no
portal.postnord.no
woocommerce-dev.cloud.postnord.no
contacts.api.postnord.no
stg.communicator.api.postnord.no
apistatus.postnord.no
my.postnord.no
my.postnord.no
*.cloud.postnord.no
apistatus.postnord.no
apistatus.postnord.no
www.postnord.com
apistatus.postnord.no
communicator.api.postnord.no
contacts.api.postnord.no
woocommerce-dev.cloud.postnord.no

Certificate

The complete raw certificate details for postnord.no in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGCJSu5P0vxrOZq5Ix8a
djQcEfoG5kEZ0G2CD95SAX2VB6z+EPMoTt6cyTgTrudoZMK6Qyy4OdQSHB3W9TnL
+0jqQZJUw9gdNffNM+Pl0o3vWmtRii8T8TiNLoBEJno92M4Wml12AJYrHlwgssx9
DErmisOvSpgpfaPUYUS6DWO69BHyR0W5sI/uH4eRDiBpJ+rAq//h0txYX5mtboE2
z1qxKAssecQWcCbphnxfTBtgckVQ8AHGOSwd9Z5C+k4Qzeb13kHthIz9xq5n7Ret
2ocUVjOPzmuyG2f/NlsLYoNJklrKCPAzMH/QXkYbs6XGeUfBmVpq8kU8AbYyQ8Au
2QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9806839013344023012651480026828467158
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-23 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'postnord.no'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23780405157172989138895087602155897494361127973289495885711363695599070321732869895548477227173294814964501836704836281042819146698603602281536543465587133997680693051764515147009334943623536445055313603711640143640143862064524189453805394349381835454127388087922679910710273225885363168603595399127697303141162031500203806430664937889129333027841125856841156452367258305302245619080346299647791666721727199976564601902567758660694770717367333255401567724831766101108533335959564332010106402817437446812720478865733387122701714161536633795071225435198964494859393999395028637456000471924062568257788170576774136082137
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ff50f3348c067c073fa71c45ecf6eab4a49bbba5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'postnord.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.postnord.no'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							0168007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b000001898a6a9553000004030046304402202927e8ed0000bd8c2003964af02e232db5a614f3092f05316e6b5ebeb3b35dd402202dafec4c1f4fb402a5e1da04e8b7b2210af65dc64320dd304ceeb5bd6733b54700770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d88473000001898a6a956600000403004830460221008f050702e169087d430678de71e8eac5e173d6096269e703ef353a8a9d15094f022100deee80918545a78cda80170e09957cd8cb7deae2bc7d8963073f05acc55d1b6c007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab000001898a6a95060000040300473045022100e5f3f666a403f863bcd558250ee40417cecb09bb94b546e7cb25847075eca32302204bb81c0c028bfaee52bfc50b6e8b64dff5da08e4e303909fea4c6cb4736fce5c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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