dittfordelslan.coop.no

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:2d:be:9f:ba:76:d2:26:3d:51:7d:00:47:61:cc:de:a3:b5 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=dittfordelslan.coop.no

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:2d:be:9f:ba:76:d2:26:3d:51:7d:00:47:61:cc:de:a3:b5
Serial Number (int): 276902946983064759385873283045723882824629
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a6:3e:91:2e:bf:3a:ed:83:73:05:3b:1e:ab:42:e9:54:77:4b:0f:df
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): d0:00:94:2a:47:05:ed:8c:e9:a8:af:e1:58:7e:11:7f:cf:94:6a:09
Fingerprint (sha256): 04:e8:9e:b0:80:7c:cd:a8:46:f1:34:4e:71:8b:f1:dc:82:d0:9b:bc:e9:6a:a6:37:75:1c:5a:05:18:f0:07:93

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate dittfordelslan.coop.no

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dittfordelslan.coop.no

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dittfordelslan.coop.no

Other certificates including the domain name coop.no

(limited to 100 certificates)
ssl3.ipaper.io
ssl2.ipaper.io
ssl3.ipaper.io
ssl2.ipaper.io
ssl10.ipaper.io
ssl9.ipaper.io
ssl9.ipaper.io
ssl9.ipaper.io
ssl3.ipaper.io
ssl2.ipaper.io
ssl2.ipaper.io
ssl2.ipaper.io
medlemspanel.coop.no
ssl3.ipaper.io
ssl3.ipaper.io
coop.no
ssl2.ipaper.io
ssl9.ipaper.io
dittfordelslan.coop.no
ssl2.ipaper.io
vpn.coop.no
ssl10.ipaper.io
gw.coop.no
ssl9.ipaper.io
ssl3.ipaper.io
*.coop.no
ssl2.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl2.ipaper.io
mobile.coop.no
helloworld2.staging.coop.no
coop.no
ssl2.ipaper.io
ssl10.ipaper.io
kompetanse.coop.no
ssl9.ipaper.io
ssl2.ipaper.io
ssl3.ipaper.io
lsrp3.coop.no
ssl9.ipaper.io
ssl9.ipaper.io
*.coop.no
auth.coop.no
ssl5.ipaper.io
ssl10.ipaper.io
ssl3.ipaper.io
ssl9.ipaper.io
ssl9.ipaper.io
ssl1.ipaper.io
ssl9.ipaper.io
kampanje.coop.no
ssl3.ipaper.io
nettbank.coop.no
ssl3.ipaper.io
coop.no
api.coop.no
ssl2.ipaper.io
coop.no
ssl3.ipaper.io
ssl9.ipaper.io
ssl9.ipaper.io
ssl9.ipaper.io
ssl9.ipaper.io
ssl9.ipaper.io
ssl2.ipaper.io
cdcapp.coop.no
ssl9.ipaper.io
ssl2.ipaper.io
ssl3.ipaper.io
webapps.coop.no
ssl3.ipaper.io
sni.cloudflaressl.com
sni116f0gl.wpc.edgecastcdn.net
dittfordelslan.coop.no
ssl9.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl2.ipaper.io
ssl10.ipaper.io
coop.no
ssl10.ipaper.io
kompetanse.coop.no
ssl2.ipaper.io
ssl10.ipaper.io
ssl1.ipaper.io
ssl9.ipaper.io
ssl2.ipaper.io
ssl10.ipaper.io
ssl10.ipaper.io
ssl2.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl1.ipaper.io
srvnib03.coop.no
edge1.coop.no
ssl3.ipaper.io
secure.coop.no

Certificate

The complete raw certificate details for dittfordelslan.coop.no in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 276902946983064759385873283045723882824629
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-15 22:13:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-15 22:13:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dittfordelslan.coop.no'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 759706584014412219528262718772790578663748756926558996121520601501122378632853762573194129268688493903424122497440513428060137890189819166555386146133430423967514739358255541579343247166334992389266147571163317836836328282203393839136429597356205539945811671318522619114768661931508243377992965280897641567518740376112343544457401887429145798807495015295014238696547530264212946110796138212940242691176983128731413088427820626295516481567570741773207435743846263211768563842805150101092730436788993175800016188486604411361896934871769237392815662027475423254677382283618757038633235589150279534722569233178949822732260736975897053298586279676751574923010802642674228691838513251636540028787658139686366723714419755512090964526200188264766843955337017287823298304370883564045331987142393345246068741645109995451215716561590153064300837431675348679734758416562792685954097553885153885814678171604528921299449958745956222102687553664479817403795284254393961939755209036229109475165640571672988095963916401248799109413048248198110794506897794098933628891647357440317858550595389191078226300450664637808198087940990187282029185206833466428006966218559908855429487082630872763922965675440493743300723432090141370008107826318297515274035149
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a63e912ebf3aed8373053b1eab42e954774b0fdf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dittfordelslan.coop.no'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075005ea773f9df56c0e7b536487dd049e0327a919a0c84a112128418759681714558000001704b20698500000403004630440220497ad3ad2b5b98796614b91cb1e4a47cee27a2ae4062c3abf84e586584572eff02205ea86520975e871b05a299153611798e866255e3d3e465d58d26a2f7ee31745c007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001704b20697600000403004830460221008a7f0e1c92a6f2072dec08fbeae13679f9e10352a754adbd5d170efc1460c66d022100b5aa4f338c0324e03a1993c20b553239ca8e397a8ff9c31c6bda901abeea07ff
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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