operator-test.rutebanken.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:7e:42:1e:79:ed:67:1d:7c:6d:db:db:8e:2a:5d:4f:1e:d2 was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=operator-test.rutebanken.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:7e:42:1e:79:ed:67:1d:7c:6d:db:db:8e:2a:5d:4f:1e:d2
Serial Number (int): 304300323316927095988890524290778359865042
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 35:a0:92:b8:e4:2d:ed:ec:71:af:70:06:7a:5d:be:82:79:f4:03:71
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ae:5f:27:9c:4e:e0:45:87:3d:04:a8:4d:58:a9:47:bf:17:ee:db:75
Fingerprint (sha256): 08:04:18:42:b5:47:62:12:ce:18:52:c3:c4:9f:78:a2:fb:1d:88:5a:73:54:0d:82:95:8a:40:26:fc:82:24:45

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate operator-test.rutebanken.org

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for operator-test.rutebanken.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

operator-test.entur.org
operator-test.rutebanken.org
xn--operatr-test-0jb.entur.org

Other certificates including the domain name rutebanken.org

(limited to 100 certificates)
carbon.rutebanken.org
beta.rutebanken.org
dr.rutebanken.org
operator-test.rutebanken.org
dr.rutebanken.org
operator.rutebanken.org
carbon.rutebanken.org
carbon.rutebanken.org
operator.rutebanken.org
carbon.rutebanken.org
operator-test.rutebanken.org
beta.rutebanken.org
operator.rutebanken.org
carbon.rutebanken.org
dr.rutebanken.org
dr.rutebanken.org
nexus.rutebanken.org
beta.rutebanken.org
beta.rutebanken.org
jump.rutebanken.org
rutebanken.org
beta.rutebanken.org
carbon.rutebanken.org
carbon.rutebanken.org
operator.rutebanken.org
beta.rutebanken.org
carbon.rutebanken.org
carbon.rutebanken.org
carbon.rutebanken.org
beta.rutebanken.org
beta.rutebanken.org
operator.rutebanken.org
beta.rutebanken.org
dr.rutebanken.org
operator-test.rutebanken.org
nexus.rutebanken.org
carbon.rutebanken.org
beta.rutebanken.org
carbon.rutebanken.org
beta.rutebanken.org
carbon.rutebanken.org
dr.rutebanken.org
carbon.rutebanken.org
carbon.rutebanken.org
operator-test.rutebanken.org
beta.rutebanken.org
beta.rutebanken.org
carbon.rutebanken.org
dr.rutebanken.org
operator-test.rutebanken.org
dr.rutebanken.org
beta.rutebanken.org
beta.rutebanken.org
carbon.rutebanken.org
beta.rutebanken.org
dr.rutebanken.org
beta.rutebanken.org
beta.rutebanken.org
beta.rutebanken.org
dr.rutebanken.org
beta.rutebanken.org
beta.rutebanken.org
operator.rutebanken.org
operator.rutebanken.org
operator-test.rutebanken.org
carbon.rutebanken.org
operator.rutebanken.org
beta.rutebanken.org
beta.rutebanken.org
operator.rutebanken.org
carbon.rutebanken.org
beta.rutebanken.org
beta.rutebanken.org
carbon.rutebanken.org
operator.rutebanken.org
dr.rutebanken.org
dr.rutebanken.org
carbon.rutebanken.org
beta.rutebanken.org
operator.rutebanken.org
carbon.rutebanken.org
dr.rutebanken.org
beta.rutebanken.org
operator.rutebanken.org
carbon.rutebanken.org

Certificate

The complete raw certificate details for operator-test.rutebanken.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA36g9oHtL2aKAPjBIcG4J
S1dvZpZGxOwmAYSi1fUnCrfBWEt7ggipsaNbiFbVL0IZB9ydNyl1Lhwh5dYZID3/
QeZTg7J8KmJzY53SdPqShr6Kqofcf5CUB5QfpiFcH3hvgOHFDWDfoBmum8LG6FEs
Uazwl5JbEL4Wx8NtJap2YJht5St8rQTn1RyyP5+j38TZvLjOcG6xsNkgTq/+Htbq
ifJgUfZBGl3jkagvxuc9YA05mhVyysMa7R1gE25MGAD7BopLjiIl53wcvLzasuyb
MsKsh5J1F3bHMLY5hj6PtPUjG9wBxYDwvtRE7WpgL2lhdghEr3Uzj4TwpQU1iBRX
VMqEOIdqwbAQ1kQmo2XsjB68TGSN+lCnYabjDYpxeszO+RpKSFLfbKomM2dL+Omw
PI+j0M3yqpiym5QPLd1fKcuTkx33llOsw405Gaqyujwp1kP4nrEPT/2Wns4/cFYb
4rcdvwh33ORKTiOS01YbEgE8oSX6uBfIQnDqamFJqVrvjvolTjSeyJVwfZKK1Gjt
CbPhOfuziC0dZ3iVvrFmGarTV/wHkuPeqV705pSVwr4Ja1psVdJeSYZbfqtqRyyG
3bSYeoIxbmbdJayoe+lC85paN/pFLDSf2CoVmAAN10403wCI5YDnrK+KWaarSzVc
rIXRcuIZRh8uw/IMYaBn+AkCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 304300323316927095988890524290778359865042
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-18 11:21:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-16 11:21:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'operator-test.rutebanken.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 912441729887884498542215104956979241486113223555272980395510601678274365993955276069411957739103389728032491364932203668182531322349288272721429806284796770616873717770431898268620198383748446121887872616590614431835662017448114949163298616834116121553031240166801926190280363546928774914181356500417711171880302374034832215981829619980277847233727112648483267117983756037157325935062422504595648125060324676254329249302446742602187080320293002877446104549492117017911688661698795025548773307430983881376435150470401934723769121872370824816887096537750257650880211619034220884497609400195450137157026088973784144282012318618789253336845325183584041416931031250088353459319631181485629817785352024205836363105403519784688996875358994568924019932223956288643138143858708761241859387422820080490112120869481605562240547544075427538669457645684505388008296306186687029348842324191320077228984377094630820306196079302343951136194356002988661533518437889991755712084136946990551904415700981618335141339906667710457389019700346624910718485066030878143295879350732506571924885255011007005672752632447569061490596451251569945592993798999864458163145078872540207600723074047260264623620811719733994477284692774429407831813840220859195533555721
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							35a092b8e42dedec71af70067a5dbe8279f40371
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (89 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'operator-test.entur.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'operator-test.rutebanken.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--operatr-test-0jb.entur.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016b6a894543000004030047304502200ec35504c7ce7ee4be111bc00ab67faafc015ab9a1504eddbc1c26e2fa7f3b3f022100d0f24e212efe5bd37abb7f4030078823a7b51b9ac49f827dcea69d271cadb8b3007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016b6a8945680000040300483046022100e718b137ccf011f5d4f5bcb760871327546d64ba64e27568c2a3cfbe8108baa0022100c7a8f6710a7ce696ee2ca78e5dbffabe917ef45435b78dc396ab02892dad7f78
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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