rk.nvg.ntnu.no

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:db:17:d1:bf:4c:82:ed:06:17:30:3a:d1:27:15:2f:3e:f5 was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=rk.nvg.ntnu.no

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:db:17:d1:bf:4c:82:ed:06:17:30:3a:d1:27:15:2f:3e:f5
Serial Number (int): 335890357464914844526413001459298892463861
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 09:b6:7f:b0:41:92:b8:ee:de:81:42:94:ff:1b:1c:fe:55:48:61:3f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 65:42:67:f7:4c:2b:f5:be:96:9a:8b:39:19:b6:05:bb:c9:09:71:c8
Fingerprint (sha256): 02:58:82:65:87:e8:ff:f9:c3:46:e3:93:71:c2:e8:2d:19:15:95:0d:81:0e:78:0f:10:e0:70:f1:b0:21:0d:2f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate rk.nvg.ntnu.no

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for rk.nvg.ntnu.no

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

oldwww.nvg.ntnu.no
rk.nvg.ntnu.no
tut.no
webmail.nvg.ntnu.no

Other certificates including the domain name ntnu.no

(limited to 100 certificates)
ivt-ts1.ivt.ntnu.no
ioffice.ivt.ntnu.no
plantuml.stud.idi.ntnu.no
ntnu-mp.ntnu.no
webmail-dovecot.item.ntnu.no
cs.itea.ntnu.no
jupyter.item.ntnu.no
openstreetmap.it.ntnu.no
mediasite.ntnu.no
pbl.medisin.ntnu.no
pypimirror.it.ntnu.no
survey.svt.ntnu.no
wiki.math.ntnu.no
ntnu-mp.ntnu.no
rk.nvg.ntnu.no
elydia-test.it.ntnu.no
orgtest.it.ntnu.no
feeds.itea.ntnu.no
*.medisin.ntnu.no
www.nvg.ntnu.no
portus.it.ntnu.no
ida.it.ntnu.no
sokutv.it.ntnu.no
adm.ad.svt.ntnu.no
bloggtest.medisin.ntnu.no
rk.nvg.ntnu.no
wagtail.math.ntnu.no
hamp.medisin.ntnu.no
jupyter.indecol.ntnu.no
discoverertest.itea.ntnu.no
apitest.nice.ntnu.no
gribben.it.ntnu.no
www.math.ntnu.no
gloshaugen-vk.itea.ntnu.no
intercourse.ed.ntnu.no
uhskypepool02.uhad.no
ntnu-mp.ntnu.no
pingu.nvg.ntnu.no
alumni.ntnu.no
nettools.it.ntnu.no
rmservice.itea.ntnu.no
mopenid.item.ntnu.no
eksamensvedlegg.it.ntnu.no
ttm4175.iik.ntnu.no
q2s.ntnu.no
adfs.ntnu.no
rk.nvg.ntnu.no
ephweb-temp.it.ntnu.no
pwchange.it.ntnu.no
uhskypepool02.uhad.no
sip.s2.l.uhad.no
it-appssm02.it.ntnu.no
openstreetmap.it.ntnu.no
pakkesporing.it.ntnu.no
webmail.phys.ntnu.no
uhskypepool01.uhad.no
romres-test.itea.ntnu.no
soknadsweb.ntnu.no
syllabus.it.ntnu.no
spsts.it.ntnu.no
florat.ed.ntnu.no
www.hpc.ntnu.no
web01.ie.ntnu.no
apps.rmwin.itea.ntnu.no
secure.math.ntnu.no
www.math.ntnu.no
mediasite.ntnu.no
bamboo.it.ntnu.no
testdcboss.it.ntnu.no
ntnu-mp.ntnu.no
www.kit.ntnu.no
uhskypepool02.uhad.no
park-utv.it.ntnu.no
video.adm.ntnu.no
www.chemie.no
ovsys-prod.math.ntnu.no
ephelis.medisin.ntnu.no
www2.pvv.ntnu.no
back-up-rct.idi.ntnu.no
ibmrs02.ibm.ntnu.no
eddis.ie.ntnu.no
secure.math.ntnu.no
secure.math.ntnu.no
aleksaee.it.ntnu.no
sikkerhet.ntnu.no
ntnu-mp.ntnu.no
ovsys.math.ntnu.no
apidemo.it.ntnu.no
wwwutv.ntnu.no
pingu.nvg.ntnu.no
uhskypepool01.uhad.no
hugin.win.ntnu.no
intercourse.ed.ntnu.no
omegav.ed.ntnu.no
owncloud.item.ntnu.no
intern.svt.ntnu.no
svn.itea.ntnu.no
epay.it.ntnu.no
pyramiden.itea.ntnu.no
almaaslab.nt.ntnu.no

Certificate

The complete raw certificate details for rk.nvg.ntnu.no in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 335890357464914844526413001459298892463861
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-01 20:08:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-30 20:08:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'rk.nvg.ntnu.no'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 677506569086746423843707732361866056514477177670518051061201365065857574193351891543301760654639902272143222686259042958951843748880617592611853879091655299192476103504809467910421158422011343311237229236063326033652741369952650437999502184293763487154254015493801928068278000017059657638751419277272016473495842723418746049516652985771148208942423908577117621345797421126472261264353136006910551883119997676765248686261567516672372210403677389135925900488661889006776838973544739562735773378119405731903575268682390593603895362755251416862817851363002982479132260286836123988650114333446016881308627031184760530705914780602082219424375928219918707671719601208656114924459269190314676376831191432053776481613195504968072673449312904630390761775661905392062241183838407765630954414098462952088199764286154050140309451905741354520857770748205391460463281168358694694834270033387223970935989799177571427029545988687704029455340793411544846526404497818728534708152953837984507993032331268343326080345352242513918503972932066712815557687535730829045007421789709403205561770709999450588439468296434389123139970657606361057113373686349568489915542467588329630104881940023279959544096046987594361709843495509328481792281648895723475452327507
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							09b67fb04192b8eede814294ff1b1cfe5548613f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oldwww.nvg.ntnu.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rk.nvg.ntnu.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tut.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.nvg.ntnu.no'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016a753a6f670000040300473045022067961793c74df2109a1c584bf5c34af5b0df51708023216bd6ca5b67654c7926022100bd3939679ccbfbd18bfc5c5b34cddecaa536d021a7f98fd8c608efc183bf2d60007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016a753a6f5a0000040300463044022065a302dae84bb903a63e2296160a309dba17eb192b4e346ec64a761a5dbd144c022013ea6a29d1cac18859807a135cc126373340f51de54425002f56add0f727a878
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0096bbb0b090ea07646d75712491418e3da72269146a85a04fe8de4e1f10846ab58e9046487c9afb8097a9e6ffa6a757083de8cf2fae703ea4c07350ab88ca76b98cce7e8476f73f2505fdaa943c41c22dd79043d130a07682ec8d331a0ce21603e55a47fbf216531a2a575693e4534f4f17d4f628573c9ab760a90ca658e310b9ecf6e8a3158772e59ea2ce2d2537528aa283a0dfcf2f180449c9bb26221795f3bb449c682a83b8558b6d8869818d184f13084ede805dfb738899fd7318bcba96b98d810271cd1a64abdfed5e1f697f05cd28bb951c6b6119700bb69e386415ff621f7d31787992590a0d7b2013abc16e5fa036cc9dab64cc3449167cf9a4fab0