digital2019.tu.no
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:69:73:d5:4a:fa:8a:ee:b7:1e:ca:14:32:fa:d1:51:c6:09 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=digital2019.tu.no
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:69:73:d5:4a:fa:8a:ee:b7:1e:ca:14:32:fa:d1:51:c6:09Serial Number (int): 297220475021473760666445986774198586033673
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 17:c3:98:3b:fa:90:2b:b4:22:80:4b:36:e7:48:d3:3d:8a:c0:d8:1b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 7c:d6:79:a9:64:2f:39:53:2a:54:b0:83:7c:ea:09:ae:3f:24:82:fb
Fingerprint (sha256): 02:9b:61:9b:21:2d:1b:1d:e4:db:64:40:e7:84:2e:c8:2e:af:f1:68:e6:b8:ee:bc:0b:fd:e1:3c:80:82:36:f1
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate digital2019.tu.no
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for digital2019.tu.no
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
digital2019.tu.no
Other certificates including the domain name tu.no
(limited to 100 certificates)
cdn.eblad.tu.no
dns-vetting1d.map.fastly.net
dns-vetting1d.map.fastly.net
dns-vetting1d.map.fastly.net
digital2019.tu.no
dns-vetting1j.map.fastly.net
cdn.eblad.tu.no
twentythree.net
dns-vetting1j.map.fastly.net
dns-vetting1d.map.fastly.net
dns-vetting1j.map.fastly.net
twentythree.net
tu.no
web.tu.no
twentythree.net
dns-vetting1d.map.fastly.net
dns-vetting1j.map.fastly.net
jobb.tu.no
dns-vetting1d.map.fastly.net
twentythree.net
dns-vetting1d.map.fastly.net
dns-vetting1d.map.fastly.net
cdn.eblad.tu.no
dns-vetting1j.map.fastly.net
twentythree.net
dns-vetting1d.map.fastly.net
images.jobb.tu.no
twentythree.net
dns-vetting1j.map.fastly.net
dns-vetting1d.map.fastly.net
twentythree.net
dns-vetting1d.map.fastly.net
dns-vetting1j.map.fastly.net
tu.no
twentythree.net
abonnere.tu.no
sentry.tu.no
images.jobb.tu.no
secure0139.hubspot.com
twentythree.net
digital2019.tu.no
dns-vetting1d.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1d.map.fastly.net
twentythree.net
dns-vetting1j.map.fastly.net
jobb.tu.no
dns-vetting1j.map.fastly.net
rekruttering.tu.no
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1d.map.fastly.net
twentythree.net
web.tu.no
dns-vetting1d.map.fastly.net
twentythree.net
dns-vetting1.map.fastly.net
web.tu.no
dns-vetting1d.map.fastly.net
twentythree.net
images.jobb.tu.no
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
twentythree.net
digital2019.tu.no
dns-vetting1d.map.fastly.net
m.tu.no
twentythree.net
dns-vetting1d.map.fastly.net
dns-vetting1d.map.fastly.net
twentythree.net
twentythree.net
twentythree.net
www.energilink.tu.no
images.single.no
dns-vetting1j.map.fastly.net
twentythree.net
dev.club.scorelit.com
www.aftenposten.no
twentythree.net
twentythree.net
dns-vetting1d.map.fastly.net
twentythree.net
twentythree.net
web.tu.no
twentythree.net
dns-vetting1d.map.fastly.net
digital2019.tu.no
secure0139.hubspot.com
twentythree.net
dns-vetting1d.map.fastly.net
energilink.tu.no
dns-vetting1j.map.fastly.net
dns-vetting1d.map.fastly.net
twentythree.net
*.tu.no
whitepaper.digi.no
dns-vetting1j.map.fastly.net
swarm.jobb.tu.no
dns-vetting1d.map.fastly.net
dns-vetting1d.map.fastly.net
dns-vetting1d.map.fastly.net
digital2019.tu.no
dns-vetting1j.map.fastly.net
cdn.eblad.tu.no
twentythree.net
dns-vetting1j.map.fastly.net
dns-vetting1d.map.fastly.net
dns-vetting1j.map.fastly.net
twentythree.net
tu.no
web.tu.no
twentythree.net
dns-vetting1d.map.fastly.net
dns-vetting1j.map.fastly.net
jobb.tu.no
dns-vetting1d.map.fastly.net
twentythree.net
dns-vetting1d.map.fastly.net
dns-vetting1d.map.fastly.net
cdn.eblad.tu.no
dns-vetting1j.map.fastly.net
twentythree.net
dns-vetting1d.map.fastly.net
images.jobb.tu.no
twentythree.net
dns-vetting1j.map.fastly.net
dns-vetting1d.map.fastly.net
twentythree.net
dns-vetting1d.map.fastly.net
dns-vetting1j.map.fastly.net
tu.no
twentythree.net
abonnere.tu.no
sentry.tu.no
images.jobb.tu.no
secure0139.hubspot.com
twentythree.net
digital2019.tu.no
dns-vetting1d.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1d.map.fastly.net
twentythree.net
dns-vetting1j.map.fastly.net
jobb.tu.no
dns-vetting1j.map.fastly.net
rekruttering.tu.no
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1d.map.fastly.net
twentythree.net
web.tu.no
dns-vetting1d.map.fastly.net
twentythree.net
dns-vetting1.map.fastly.net
web.tu.no
dns-vetting1d.map.fastly.net
twentythree.net
images.jobb.tu.no
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
twentythree.net
digital2019.tu.no
dns-vetting1d.map.fastly.net
m.tu.no
twentythree.net
dns-vetting1d.map.fastly.net
dns-vetting1d.map.fastly.net
twentythree.net
twentythree.net
twentythree.net
www.energilink.tu.no
images.single.no
dns-vetting1j.map.fastly.net
twentythree.net
dev.club.scorelit.com
www.aftenposten.no
twentythree.net
twentythree.net
dns-vetting1d.map.fastly.net
twentythree.net
twentythree.net
web.tu.no
twentythree.net
dns-vetting1d.map.fastly.net
digital2019.tu.no
secure0139.hubspot.com
twentythree.net
dns-vetting1d.map.fastly.net
energilink.tu.no
dns-vetting1j.map.fastly.net
dns-vetting1d.map.fastly.net
twentythree.net
*.tu.no
whitepaper.digi.no
dns-vetting1j.map.fastly.net
swarm.jobb.tu.no
Certificate
The complete raw certificate details for digital2019.tu.no in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgISA2lz1Ur6iu63HsoUMvrRUcYJMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAzMzAyMjI5NTBaFw0y MDA2MjgyMjI5NTBaMBwxGjAYBgNVBAMTEWRpZ2l0YWwyMDE5LnR1Lm5vMIICIjAN BgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAx5KBkPPoztyu5Hs7zM4vgCqYPOWc j2cZa+Rj+3fV1KPVDWBLa8t7ghQq/Begt3fogJviswKMvR/9fJmeU5EGflEpZBWE yI63tnimygbfYKtx+zMozQINgevzfU2nrGxiu+Fwt60+0v08xelfsQAK7/DHDlHY bPeObwQgOIOrWT7s7ud5znLvW9smz7Gidf9Ee7ngMS/LK3JOoq9nI+JS3QkQ5c1Q Tt8NbqR6/SC5/HUm3h9Lnj8RmxX5+lA2XPepe8nq9M7StFetfjDH/PjguhroV9Nl MTK9vsdqe3QzbbBJQS45rK5tU2SqOZIpVOa9RHjrTM187AxN71NmIZsdOdl3b6oQ tRbtyi4Enrs8FG2STKmuP67gO9gQPQQWrJRynQUzaebKFjstq4ia0wEuj7Z41jy3 S65c3VVfzkGFR65xtyoqJAmWR95sUKxNPsZT3rW0dOah0YdD02YeLb9z8YTSwF92 scOLu6Vdr98WUCrDC9P/re3vlgj7tO0saESR/HXINDlDphJqlFwmrYgSrgasPuA3 4eeYFe9vm9jpSB/+BzhyIp5MC1mDiKMmtcvkctnGwB6lrDnEmMlAY8nVPgknFwFd TA7nX5giMcpp2Z0s7N0DoVvxvDYwV78YkzSa3q7J1DwCGjoIY8Lv8cs/+a27rk2a 4qbymUNrSdYV/hUCAwEAAaOCAmgwggJkMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUE FjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU F8OYO/qQK7QigEs250jTPYrA2BswHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl 7/Oo7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5p bnQteDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5p bnQteDMubGV0c2VuY3J5cHQub3JnLzAcBgNVHREEFTATghFkaWdpdGFsMjAxOS50 dS5ubzBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsG AQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQYGCisGAQQB1nkC BAIEgfcEgfQA8gB3ALIeBcyLos2KIE6HZvkruYolIGdr2vpw57JJUy3vi5BeAAAB cS3HpTEAAAQDAEgwRgIhAPK0A9VimQv+xx3/K/TL6D6k39F8lBCS++g7dN7ZpuKx AiEA8+upMgbymq987e2TI0CQXBzoLr3OhXzWvYFAaAL16CoAdwBvU3asMfAxGdiZ AKRRFf93FRwR2QLBACkGjbIImjfZEwAAAXEtx6WjAAAEAwBIMEYCIQCBy4sGOMP+ QB5sveogxBAvppif85BvpAnempXDSgWIgQIhAIu3/gSBdmePbPsgFNYPvXCogSCU C+8OdOMzWfUFZ+IaMA0GCSqGSIb3DQEBCwUAA4IBAQAbWOnkPqh6YDLQ5HRPPpBo 4suuHYXbk8EV4rosF5bslyBQJRtFXq/AkeLRU8EG6DjOWJsNTKm2HFZOaJ4s0zxt IrC82g3YbxFmS63sfCcX/M/s2EvckcaiuCZ2VVQ/mY0ohJknuoZ9UtqPflOChuTC 8WWrEOTV1+R68CstVs5cKFItAPHUy0BnPGdtQiEVOHTmziuFt5preJWM/zjQxjkq W4lKc5RrNWG92P0ywIFVjS1M0p/FZwL3g0jUJGkXjhqzynDOA2zoSguRmLj9H5rI Yz7qci1RXAVm2b9f5hmCZS5UyuqDu22PwaLcKGpNWddP2enIG1jFPlNpWIUPTh9H -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAx5KBkPPoztyu5Hs7zM4v gCqYPOWcj2cZa+Rj+3fV1KPVDWBLa8t7ghQq/Begt3fogJviswKMvR/9fJmeU5EG flEpZBWEyI63tnimygbfYKtx+zMozQINgevzfU2nrGxiu+Fwt60+0v08xelfsQAK 7/DHDlHYbPeObwQgOIOrWT7s7ud5znLvW9smz7Gidf9Ee7ngMS/LK3JOoq9nI+JS 3QkQ5c1QTt8NbqR6/SC5/HUm3h9Lnj8RmxX5+lA2XPepe8nq9M7StFetfjDH/Pjg uhroV9NlMTK9vsdqe3QzbbBJQS45rK5tU2SqOZIpVOa9RHjrTM187AxN71NmIZsd Odl3b6oQtRbtyi4Enrs8FG2STKmuP67gO9gQPQQWrJRynQUzaebKFjstq4ia0wEu j7Z41jy3S65c3VVfzkGFR65xtyoqJAmWR95sUKxNPsZT3rW0dOah0YdD02YeLb9z 8YTSwF92scOLu6Vdr98WUCrDC9P/re3vlgj7tO0saESR/HXINDlDphJqlFwmrYgS rgasPuA34eeYFe9vm9jpSB/+BzhyIp5MC1mDiKMmtcvkctnGwB6lrDnEmMlAY8nV PgknFwFdTA7nX5giMcpp2Z0s7N0DoVvxvDYwV78YkzSa3q7J1DwCGjoIY8Lv8cs/ +a27rk2a4qbymUNrSdYV/hUCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 297220475021473760666445986774198586033673 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-30 22:29:50 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-28 22:29:50 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'digital2019.tu.no' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 814183907096343832999897278259803188207223632237398606413362651779636876602173959650562784503275971652013933112259817929301262502857813301651647898751781505088750610920036648340292272682171099011065620828490754092252367982315314845137655231502439639421794871376097325369179851959839584542173580915087539621916851074480989412184316038374297626460327306917364282136188751394644116054354599678568053110561990656467624563244707936897133001537157804467728780309394926545814839784149582890493437002152803157313528246039965247037365971202891663604767598450461634617049125250118449977862652873001960576506498064963978366383228475591745215183160661373555153294498415370713427194609413105475142590594683162988302422505130456015552419384995079149132661473558722558149733497977374770363263082394268059451803161380805406756093467359191872861566568220045579665616904136567361986673714767421272164288527185310360488145976815496889314784640404749814243526326221547060657302048683422763493389737709944494530514374730357579059989943876187958462997712205389755463762916413520033467254204675269990318417944760650521971897540729076418097121660612930794760620848989177698961759218936902541761111963293213424549678142690597083864277652622796651988172275221 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 17c3983bfa902bb422804b36e748d33d8ac0d81b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital2019.tu.no' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) 00f2007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001712dc7a5310000040300483046022100f2b403d562990bfec71dff2bf4cbe83ea4dfd17c941092fbe83b74ded9a6e2b1022100f3eba93206f29aaf7ceded932340905c1ce82ebdce857cd6bd81406802f5e82a0077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001712dc7a5a3000004030048304602210081cb8b0638c3fe401e6cbdea20c4102fa6989ff3906fa409de9a95c34a0588810221008bb7fe048176678f6cfb2014d60fbd70a88120940bef0e74e33359f50567e21a . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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