www.nvg.ntnu.no

Issued by R3

About this certificate

This digital certificate with serial number 03:d3:2a:82:74:06:43:43:15:49:94:22:32:67:5e:27:97:6c was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.nvg.ntnu.no

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:d3:2a:82:74:06:43:43:15:49:94:22:32:67:5e:27:97:6c
Serial Number (int): 333192942143269031317791691647087041550188
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b5:d1:76:fb:83:79:5c:ce:fb:a7:a9:6f:f5:d1:20:2d:5f:f2:c7:11
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 13:67:87:e2:d6:d9:41:11:46:89:6f:72:a3:bc:90:2e:4f:eb:cd:d8
Fingerprint (sha256): 01:b4:8d:09:00:ec:ba:11:bc:8b:2f:99:e5:78:37:58:b8:ec:6b:b3:46:57:c3:70:d2:8c:e0:f7:df:93:5b:c7

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.nvg.ntnu.no

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.nvg.ntnu.no

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

nvg.org
vevsoek.nvg.ntnu.no
www.nvg.ntnu.no
www.nvg.org

Other certificates including the domain name ntnu.no

(limited to 100 certificates)
ivt-ts1.ivt.ntnu.no
ioffice.ivt.ntnu.no
plantuml.stud.idi.ntnu.no
ntnu-mp.ntnu.no
webmail-dovecot.item.ntnu.no
cs.itea.ntnu.no
jupyter.item.ntnu.no
openstreetmap.it.ntnu.no
mediasite.ntnu.no
pbl.medisin.ntnu.no
pypimirror.it.ntnu.no
survey.svt.ntnu.no
wiki.math.ntnu.no
ntnu-mp.ntnu.no
rk.nvg.ntnu.no
elydia-test.it.ntnu.no
orgtest.it.ntnu.no
feeds.itea.ntnu.no
*.medisin.ntnu.no
www.nvg.ntnu.no
portus.it.ntnu.no
ida.it.ntnu.no
sokutv.it.ntnu.no
adm.ad.svt.ntnu.no
bloggtest.medisin.ntnu.no
rk.nvg.ntnu.no
wagtail.math.ntnu.no
hamp.medisin.ntnu.no
jupyter.indecol.ntnu.no
discoverertest.itea.ntnu.no
apitest.nice.ntnu.no
gribben.it.ntnu.no
www.math.ntnu.no
gloshaugen-vk.itea.ntnu.no
intercourse.ed.ntnu.no
uhskypepool02.uhad.no
ntnu-mp.ntnu.no
pingu.nvg.ntnu.no
alumni.ntnu.no
nettools.it.ntnu.no
rmservice.itea.ntnu.no
mopenid.item.ntnu.no
eksamensvedlegg.it.ntnu.no
ttm4175.iik.ntnu.no
q2s.ntnu.no
adfs.ntnu.no
rk.nvg.ntnu.no
ephweb-temp.it.ntnu.no
pwchange.it.ntnu.no
uhskypepool02.uhad.no
sip.s2.l.uhad.no
it-appssm02.it.ntnu.no
openstreetmap.it.ntnu.no
pakkesporing.it.ntnu.no
webmail.phys.ntnu.no
uhskypepool01.uhad.no
romres-test.itea.ntnu.no
soknadsweb.ntnu.no
syllabus.it.ntnu.no
spsts.it.ntnu.no
florat.ed.ntnu.no
www.hpc.ntnu.no
web01.ie.ntnu.no
apps.rmwin.itea.ntnu.no
secure.math.ntnu.no
www.math.ntnu.no
mediasite.ntnu.no
bamboo.it.ntnu.no
testdcboss.it.ntnu.no
ntnu-mp.ntnu.no
www.kit.ntnu.no
uhskypepool02.uhad.no
park-utv.it.ntnu.no
video.adm.ntnu.no
www.chemie.no
ovsys-prod.math.ntnu.no
ephelis.medisin.ntnu.no
www2.pvv.ntnu.no
back-up-rct.idi.ntnu.no
ibmrs02.ibm.ntnu.no
eddis.ie.ntnu.no
secure.math.ntnu.no
secure.math.ntnu.no
aleksaee.it.ntnu.no
sikkerhet.ntnu.no
ntnu-mp.ntnu.no
ovsys.math.ntnu.no
apidemo.it.ntnu.no
wwwutv.ntnu.no
pingu.nvg.ntnu.no
uhskypepool01.uhad.no
hugin.win.ntnu.no
intercourse.ed.ntnu.no
omegav.ed.ntnu.no
owncloud.item.ntnu.no
intern.svt.ntnu.no
svn.itea.ntnu.no
epay.it.ntnu.no
pyramiden.itea.ntnu.no
almaaslab.nt.ntnu.no

Certificate

The complete raw certificate details for www.nvg.ntnu.no in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 333192942143269031317791691647087041550188
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-06 21:47:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-05 21:47:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.nvg.ntnu.no'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 791136217551260912578586845583496546614185745229457573660926063840040681958889694672603440820951969258526679013181707257225027299868247026745943539722325539718439246126392667725922744060135268530521598026852237266206107553008457643691725984620384809779280951409549245142448018349548682380864035666482887623570447423113168217865192782173855621970073294506886570051376643197411731767597477632667986944043773598000277818133101360985221789123898049877922209019960130501092050304266449486234175734758466967845374426155105315686988214943777831253120269729824702712767830811688373913917154373523194871711108979955502877081677331032969111015462224056237917501078449811287819684820990727492289984135572645580371772689204783633624457709658497514624528429149225858220897434216322564373824313129332314188352473285527638499876797459992091488940325255350951750561918381694835291941537116195864930219688791381901704223999000955297392268719228355783778231737310765095535726610643907925538625268985538071615116057484752641632224966651778834699624576236276616228155090600418531554447525757049397499389190041304673159302195728598457460403987983191569147730161102920349997090606685976827132732681919668213537896594888774487247722153612990095865387524543
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b5d176fb83795ccefba7a96ff5d1202d5ff2c711
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nvg.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vevsoek.nvg.ntnu.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nvg.ntnu.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nvg.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018eb598c0da0000040300473045022025a71da30a4d6fd5aa4aaabe1ff16bc21a3b8b1df24c91721b47e0b26f168a0f022100d77af2298eb3f9b264ee9af7f725697b01be047158905c87982422753a5f0358007700dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018eb598c1c800000403004830460221008b99077c53471406dea7274dafae27a6d00f415f87950867d6ffd65a313214eb022100aa00a6de00afb31688582f9b6ee63bb48b565ea1b66503822b9bb44de8aa607c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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