rk.nvg.ntnu.no

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:f3:af:f1:3b:64:b7:47:bf:07:bd:3f:8a:bf:08:39:9f:5c was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=rk.nvg.ntnu.no

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f3:af:f1:3b:64:b7:47:bf:07:bd:3f:8a:bf:08:39:9f:5c
Serial Number (int): 344259340404515759092208619964540309315420
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 09:b6:7f:b0:41:92:b8:ee:de:81:42:94:ff:1b:1c:fe:55:48:61:3f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 33:89:fd:c8:65:2a:f1:3a:a2:29:e9:c0:5b:23:cd:d7:0e:5d:4e:a3
Fingerprint (sha256): 04:f4:06:41:12:cb:56:32:d9:3f:46:08:86:5d:9e:da:04:64:47:f1:9f:81:56:b0:bf:25:a1:51:d9:e8:a7:d9

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate rk.nvg.ntnu.no

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for rk.nvg.ntnu.no

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

oldwww.nvg.ntnu.no
rk.nvg.ntnu.no
tut.no
webmail.nvg.ntnu.no

Other certificates including the domain name ntnu.no

(limited to 100 certificates)
ivt-ts1.ivt.ntnu.no
ioffice.ivt.ntnu.no
plantuml.stud.idi.ntnu.no
ntnu-mp.ntnu.no
webmail-dovecot.item.ntnu.no
cs.itea.ntnu.no
jupyter.item.ntnu.no
openstreetmap.it.ntnu.no
mediasite.ntnu.no
pbl.medisin.ntnu.no
pypimirror.it.ntnu.no
survey.svt.ntnu.no
wiki.math.ntnu.no
ntnu-mp.ntnu.no
rk.nvg.ntnu.no
elydia-test.it.ntnu.no
orgtest.it.ntnu.no
feeds.itea.ntnu.no
*.medisin.ntnu.no
www.nvg.ntnu.no
portus.it.ntnu.no
ida.it.ntnu.no
sokutv.it.ntnu.no
adm.ad.svt.ntnu.no
bloggtest.medisin.ntnu.no
rk.nvg.ntnu.no
wagtail.math.ntnu.no
hamp.medisin.ntnu.no
jupyter.indecol.ntnu.no
discoverertest.itea.ntnu.no
apitest.nice.ntnu.no
gribben.it.ntnu.no
www.math.ntnu.no
gloshaugen-vk.itea.ntnu.no
intercourse.ed.ntnu.no
uhskypepool02.uhad.no
ntnu-mp.ntnu.no
pingu.nvg.ntnu.no
alumni.ntnu.no
nettools.it.ntnu.no
rmservice.itea.ntnu.no
mopenid.item.ntnu.no
eksamensvedlegg.it.ntnu.no
ttm4175.iik.ntnu.no
q2s.ntnu.no
adfs.ntnu.no
rk.nvg.ntnu.no
ephweb-temp.it.ntnu.no
pwchange.it.ntnu.no
uhskypepool02.uhad.no
sip.s2.l.uhad.no
it-appssm02.it.ntnu.no
openstreetmap.it.ntnu.no
pakkesporing.it.ntnu.no
webmail.phys.ntnu.no
uhskypepool01.uhad.no
romres-test.itea.ntnu.no
soknadsweb.ntnu.no
syllabus.it.ntnu.no
spsts.it.ntnu.no
florat.ed.ntnu.no
www.hpc.ntnu.no
web01.ie.ntnu.no
apps.rmwin.itea.ntnu.no
secure.math.ntnu.no
www.math.ntnu.no
mediasite.ntnu.no
bamboo.it.ntnu.no
testdcboss.it.ntnu.no
ntnu-mp.ntnu.no
www.kit.ntnu.no
uhskypepool02.uhad.no
park-utv.it.ntnu.no
video.adm.ntnu.no
www.chemie.no
ovsys-prod.math.ntnu.no
ephelis.medisin.ntnu.no
www2.pvv.ntnu.no
back-up-rct.idi.ntnu.no
ibmrs02.ibm.ntnu.no
eddis.ie.ntnu.no
secure.math.ntnu.no
secure.math.ntnu.no
aleksaee.it.ntnu.no
sikkerhet.ntnu.no
ntnu-mp.ntnu.no
ovsys.math.ntnu.no
apidemo.it.ntnu.no
wwwutv.ntnu.no
pingu.nvg.ntnu.no
uhskypepool01.uhad.no
hugin.win.ntnu.no
intercourse.ed.ntnu.no
omegav.ed.ntnu.no
owncloud.item.ntnu.no
intern.svt.ntnu.no
svn.itea.ntnu.no
epay.it.ntnu.no
pyramiden.itea.ntnu.no
almaaslab.nt.ntnu.no

Certificate

The complete raw certificate details for rk.nvg.ntnu.no in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 344259340404515759092208619964540309315420
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-01 21:08:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-30 21:08:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'rk.nvg.ntnu.no'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 677506569086746423843707732361866056514477177670518051061201365065857574193351891543301760654639902272143222686259042958951843748880617592611853879091655299192476103504809467910421158422011343311237229236063326033652741369952650437999502184293763487154254015493801928068278000017059657638751419277272016473495842723418746049516652985771148208942423908577117621345797421126472261264353136006910551883119997676765248686261567516672372210403677389135925900488661889006776838973544739562735773378119405731903575268682390593603895362755251416862817851363002982479132260286836123988650114333446016881308627031184760530705914780602082219424375928219918707671719601208656114924459269190314676376831191432053776481613195504968072673449312904630390761775661905392062241183838407765630954414098462952088199764286154050140309451905741354520857770748205391460463281168358694694834270033387223970935989799177571427029545988687704029455340793411544846526404497818728534708152953837984507993032331268343326080345352242513918503972932066712815557687535730829045007421789709403205561770709999450588439468296434389123139970657606361057113373686349568489915542467588329630104881940023279959544096046987594361709843495509328481792281648895723475452327507
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							09b67fb04192b8eede814294ff1b1cfe5548613f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oldwww.nvg.ntnu.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rk.nvg.ntnu.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tut.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.nvg.ntnu.no'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc56000001693b4d18eb000004030047304502206e3c723b55155bee21454558f891f0841819887f991349b035a1a1cf76162cf3022100b3ccf350f9cdd94069f1cc4ef970eb96cd5eae7f7008e7afdb35100006ff1244007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001693b4d19520000040300473045022100c7890583e3a16e35f6667d4ad1f2812f4ded69c40c4b9ba0d66b416f9b940e02022068dcc6a057982ed3feb792ebb65ce0766bb9bd8ea3b221f4e15ab82aad62527f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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