DV SSL/TLS Certificate for pokal1.no

Certificate is witin its validity period

Issued by Let's Encrypt (R10)

About the pokal1.no DV SSL/TLS Certificate

This certificate with serial number 05:ef:7e:cd:35:aa:b8:e8:3f:ce:53:dc:77:8a:77:a3:4d:d6 for pokal1.no was issued on by Let's Encrypt.

This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for pokal1.no provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Let's Encrypt

Organization: Let's Encrypt
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 05:ef:7e:cd:35:aa:b8:e8:3f:ce:53:dc:77:8a:77:a3:4d:d6
Serial Number (int): 517057463589724147675391665613127844842966
Serial Number Length: 139 bits, 18 octets

Subject Key Identifier: cb:cf:d0:cf:e0:47:82:2d:ff:d8:91:59:c8:d4:ac:d6:47:4e:a9:af
Authority Key Identifier: bb:bc:c3:47:a5:e4:bc:a9:c6:c3:a4:72:0c:10:8d:a2:35:e1:c8:e8

Fingerprint (SHA-1): 6c:91:84:4a:60:1d:15:5d:3f:ea:57:33:4f:a2:ea:ec:63:ff:81:17
Fingerprint (SHA-256): 18:9b:83:81:0e:2a:98:84:03:b3:72:bc:5a:7e:30:f9:28:fc:35:a4:af:90:92:89:bd:f3:b1:65:4f:17:2b:48

Issuing Certificate URL: http://r10.i.lencr.org/

Revocation Information

CRL Distribution Point: http://r10.c.lencr.org/87.crl

Check the revocation status for certificate pokal1.no
1
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for pokal1.no

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

pokal1.no

X.509 Certificate

The complete raw X.509 certificate details for pokal1.no in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIE7TCCA9WgAwIBAgISBe9+zTWquOg/zlPcd4p3o03WMA0GCSqGSIb3DQEBCwUA
MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD
EwNSMTAwHhcNMjUwNzAzMTA0NzUxWhcNMjUxMDAxMTA0NzUwWjAUMRIwEAYDVQQD
Ewlwb2thbDEubm8wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/NJzw
bObi0v6jP//YZ6p7QLT2LolMsLUglLrubbWPcgmoO4VJbQozXGR3uN2hbpPhWqYg
WrOljfuPG54b+y+24B296EJ6+R9tNWtdb0CVL+KBtJLyupZTXfikeC21E6C2kZJP
iivuTa7niFeouN3LFCGfnGimvPwUlyItidNLjvb0E9vWcLTr0M/sHGIcTdARZamQ
1jg2vOVYMVnoj9KY3FwPyMNh33vLfR/7qw/GmrjFbHINUe3l7rXFIjMx+s0GOq7k
NRnxbqymjNwo+si3vYTOBMmqxXnm8nSd5gdQtGhF+Bq1KfMreCWGiK6Y5woToMEe
sgwsGng4uA/DlPBRAgMBAAGjggIYMIICFDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0l
BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYE
FMvP0M/gR4It/9iRWcjUrNZHTqmvMB8GA1UdIwQYMBaAFLu8w0el5LypxsOkcgwQ
jaI14cjoMDMGCCsGAQUFBwEBBCcwJTAjBggrBgEFBQcwAoYXaHR0cDovL3IxMC5p
LmxlbmNyLm9yZy8wFAYDVR0RBA0wC4IJcG9rYWwxLm5vMBMGA1UdIAQMMAowCAYG
Z4EMAQIBMC4GA1UdHwQnMCUwI6AhoB+GHWh0dHA6Ly9yMTAuYy5sZW5jci5vcmcv
ODcuY3JsMIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDvAHYAfVkeEuF4KnscYWd8Xv34
0IdcFKBOlZ65Ay/ZDowuebgAAAGX0BvwugAABAMARzBFAiBuprF6C7zWW/Xw/nAc
BADBg1fkLvbVgIRj32Aue6Pg/QIhAP/H5gE0dZrdm+kWEBtU3SM2ot34N8M87wio
E1CFxmUYAHUADeHyMCvTDcFAYhIJ6lUu/Ed0fLHX6TDvDkIetH5OqjQAAAGX0Bvw
wwAABAMARjBEAiBDBuLmEjP76c9TGJKLsoNTpc6uN+LZbT+dbyGbP+Vw4wIgJmD9
fdMehOLZR0gTOtk0A3Q+SLF3gC66hPYUDDEmOuwwDQYJKoZIhvcNAQELBQADggEB
ABoGmLI4K+M8KMvPxAI1HHN8Soa5EbH8hhdSUdQFVOHzi53q9OamK3cN/WknMMKD
ctrUMuBJ15d6uFOJMimmjTeFCzTHDi9zjK8oByb5B2cN81LSDGZuk44578ifnpge
slxW5HeNkrDzxZbczj4uDzRrik6BobqbxdoJameDzJ4PPjT3doNYbci641LtIc6N
CcWVUgDH7a/HmLcCL8XU4XWV22Zy/9hBUn8HOrUY0QByihrgtiqK5lIxdlvN8dq7
CH1lmJsfn4O8k7Z9xnmIToNL6YDYbUQxZV4u/JA/8smisw/TGLEAHKaDDY/vM6gg
NABGrqKiIuXDtZmUrUePMsA=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzSc8Gzm4tL+oz//2Geq
e0C09i6JTLC1IJS67m21j3IJqDuFSW0KM1xkd7jdoW6T4VqmIFqzpY37jxueG/sv
tuAdvehCevkfbTVrXW9AlS/igbSS8rqWU134pHgttROgtpGST4or7k2u54hXqLjd
yxQhn5xoprz8FJciLYnTS4729BPb1nC069DP7BxiHE3QEWWpkNY4NrzlWDFZ6I/S
mNxcD8jDYd97y30f+6sPxpq4xWxyDVHt5e61xSIzMfrNBjqu5DUZ8W6spozcKPrI
t72EzgTJqsV55vJ0neYHULRoRfgatSnzK3glhoiumOcKE6DBHrIMLBp4OLgPw5Tw
UQIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 517057463589724147675391665613127844842966
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R10'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-07-03 10:47:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-10-01 10:47:50 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pokal1.no'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24137460707279791086122256595392167162002976423361009016286213805649330809141097780615962058258799370377722999222919684638790702996786902394837552963674390270033361456674770142479524427764467110467201612497084661390587390345978809529077584691382945094169843310459664265685621348238580846348160949387432447310490007566017826860823831343034423309740039369195805798359526873570807801480602123626452912667401131472957200404860772564059445211779741517606858049862915002308837456013288857931378760669177572992446147365775915086921571290892793113951848189979625480230570748930241406541095670424160293157961964403289318813777
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cbcfd0cfe047822dffd89159c8d4acd6474ea9af
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName bbbcc347a5e4bca9c6c3a4720c108da235e1c8e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pokal1.no'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.c.lencr.org/87.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076007d591e12e1782a7b1c61677c5efdf8d0875c14a04e959eb9032fd90e8c2e79b800000197d01bf0ba000004030047304502206ea6b17a0bbcd65bf5f0fe701c0400c18357e42ef6d5808463df602e7ba3e0fd022100ffc7e60134759add9be916101b54dd2336a2ddf837c33cef08a8135085c665180075000de1f2302bd30dc140621209ea552efc47747cb1d7e930ef0e421eb47e4eaa3400000197d01bf0c3000004030046304402204306e2e61233fbe9cf5318928bb28353a5ceae37e2d96d3f9d6f219b3fe570e302202660fd7dd31e84e2d94748133ad93403743e48b177802eba84f6140c31263aec
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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