sikt.no

- Uninett AS -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number de:91:bc:06:03:72:39:c5:dc:cb:61:38:84:3d:c8:0a was issued on by GEANT Vereniging.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Uninett AS

Organization: Uninett AS
State / Province: Trøndelag
Country: NO

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): de:91:bc:06:03:72:39:c5:dc:cb:61:38:84:3d:c8:0a
Serial Number (int): 295845311678179880788115943021109692426
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: d7:54:12:86:6f:4b:95:e6:23:e0:18:2a:91:68:8d:3e:a4:77:a3:0e
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): 47:09:13:83:30:63:fb:06:0b:a0:86:1e:cd:c4:6a:40:b8:d6:2e:0a
Fingerprint (sha256): 07:6e:f1:8b:35:b3:07:eb:64:4d:2e:45:07:62:36:f1:41:97:29:bd:52:31:e2:31:83:be:cd:8a:c4:db:0e:55

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate sikt.no

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sikt.no

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sikt.no
www.sikt.no

Other certificates including the domain name sikt.no

(limited to 100 certificates)
surveybanken.nsd.no
sikt.no
sikt.no
sikt.no
feidehotell1.sikt.no
polsys.sikt.no
sikt.no
matomo.sikt.no
sikt.no
skolevalg.sikt.no
*.nva.sikt.no
ess.nsd.no
rdakatalogisering.sikt.no
www.sikt.no
sikt.no
gitlab.sikt.no
sikt.no
sikt.no
matomo.sikt.no
skolevalg.sikt.no
filesender.sikt.no
sikt.no
gitlab.sikt.no
sikt.no
sikt.no
skolevalg.nsd.no
sikt.no
old.sikt.no

Certificate

The complete raw certificate details for sikt.no in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 295845311678179880788115943021109692426
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-25 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Trøndelag'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Uninett AS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sikt.no'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 791929159584353325938285008614205776439953676981399118923641457159789225089977192635281792704714214005814502360847205243952761787419886003243204607524177281753143127715973324665133095184723514977716871596683885632872883296267596969896171004105657007891224824627053355962115882146902194604425914548784408890341874300177833038310232550688053836826852084679407598370258063953645660187899417406882800493605432443168895059834209424844867168353692764608997574827594450560759430357521316272574136479478402657073598180045928856627583644923843060258892491892806020940311212148220095802628273569161211067085106659107358993135919952437253294845316369919047318599856022468720785402234918835289809114238451532582265866434754855652003977056263380667434561189551174261298728871633714353711395586267774751386065692086159478174148350617586474298867223972586868684465853994412742583418761791939123025122226973056040972335865242439246194605484677862490255958142625753403472395358434451596963921353285748442465185023591497285271417779218472543970259950992844219201298162488000062613897804998102189503292064767449072628868423144108683096454978226635814906236064374568106962643052020531347397273477719913055703463675234273972201565579360251101814048077843
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d75412866f4b95e623e0182a91688d3ea477a30e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sikt.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sikt.no'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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