na-test-oidc.d-rfi-000.osl1-rf-it.sky.nhn.no

Issued by R3

About this certificate

This digital certificate with serial number 04:b0:ba:32:f8:e3:70:2b:fb:ba:56:91:6a:b6:ff:6a:f8:5d was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=na-test-oidc.d-rfi-000.osl1-rf-it.sky.nhn.no

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:b0:ba:32:f8:e3:70:2b:fb:ba:56:91:6a:b6:ff:6a:f8:5d
Serial Number (int): 408586341375242167339804886887838954223709
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 08:f0:85:ef:ad:d6:08:d6:51:63:31:18:4e:87:36:cb:70:9c:29:be
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 68:97:53:36:4e:a1:b2:34:43:78:a4:17:da:ca:33:8c:48:9d:b4:ef
Fingerprint (sha256): 09:4e:a0:cc:59:d7:b6:63:1b:cc:1e:40:ae:51:87:b6:df:10:65:7e:94:0f:1d:b0:5d:8f:2e:3a:7f:8b:ee:08

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate na-test-oidc.d-rfi-000.osl1-rf-it.sky.nhn.no

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for na-test-oidc.d-rfi-000.osl1-rf-it.sky.nhn.no

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

na-test-oidc.d-rfi-000.osl1-rf-it.sky.nhn.no

Other certificates including the domain name nhn.no

(limited to 100 certificates)
amkstatus.nhn.no
configuration-utility.ncpeh.nhn.no
www.nhn.no
amkstatus.nhn.no
register.qa.nhn.no
sonarqube.utv.nhn.no
kot.nhn.no
amkstatus.nhn.no
utviklerportal-test-standby.plattform.nhn.no
hjelp.nhn.no
amkstatus.nhn.no
geoevent.test.gis.nhn.no
norcrin.fnsp.prep.nhn.no
ws.nhn.no
antibiotika.fnsp.nhn.no
min.support.qa.nhn.no
sonarqube.utv.nhn.no
amkstatus.nhn.no
mq.qa.amk.nhn.no
finnmark.klient.qa.amk.nhn.no
amkstatus.nhn.no
amkstatus.nhn.no
skde.fnsp.inte.nhn.no
test.sso.kj.nhn.no
na-test-oidc.d-rfi-000.osl1-rf-it.sky.nhn.no
portal.admin.qa.gis.nhn.no
amkstatus.nhn.no
www.nhn.no
argo.selvbetjening.utvikling.nhn.no
abrsonline.atostatus.com.au
helseid-admin.utvikling.nhn.no
ws-td.test.nhn.no
sikkerhet.nhn.no
medusa.nhn.no
ws-at.test.nhn.no
frontend-fest-test.nhn.no
holbergsplads.nhn.no
amkstatus.nhn.no
www.nhn.no
amkstatus.nhn.no
helse-midt.fnsp.inte.nhn.no
ws-web.test.nhn.no
dev.opplaering.kj.nhn.no
mrs-sts.nhn.no
iplos.skatteetaten.no
adresseregister-test.nhn.no
portal.admin.qa.gis.nhn.no
personregister-td.test.nhn.no
nyan.t-jonas-001.trd1-sky-test.sky.nhn.no
argo.utv.kj.nhn.no
prom.nhn.no
pvk-webimporter.shp-nav.test.nhn.no
amkstatus.nhn.no
www.nhn.no
mrs-sts.nhn.no
uonsket-hendelse.qa.nhn.no
helse-sorost.fnsp.inte.nhn.no
kafka-access-management-helper.internet.shp-nav.test.nhn.no
bergen.klient.qa.amk.nhn.no
vestreviken.klient.qa.amk.nhn.no
fs.tjenesteplattform.nhn.no
ehelse-portal.qa.nhn.no
amkstatus.nhn.no
fodselsmelding.nhn.no
eksternbruker.fs.nhn.no
producerapi-p.plattform.nhn.no
test.pmd.nhn.no
holbergsplads.nhn.no
portal.test.gis.nhn.no
*.qa.amk.nhn.no
configuration-utility.ncpeh.nhn.no
norcrin.fnsp.prep.nhn.no
personregister-web.test.nhn.no
amkstatus.nhn.no
fodselsmelding.test.nhn.no
personregister.nhn.no
amkstatus.nhn.no
auth.sky.nhn.no
abrsonline.atostatus.com.au
aviacme.cname4.test.nhn.no
nhnglobalconnectdata.iu.test.nhn.no
ror.sky.test.nhn.no
api.helsenettet.iu.qa.nhn.no
amkstatus.nhn.no
metrics.qa.amk.nhn.no
selvbetjening.qa.nhn.no
*.sdwan.nhn.no
personregister.test.nhn.no
*.hn.qa.nhn.no
nav-gateway.iu.test.nhn.no
amkstatus.nhn.no
blazing-kafka-browser.internet.shp-nav.test.nhn.no
helsenettet.iu.test.nhn.no
amkstatus.nhn.no
amkstatus.nhn.no
jdps.fnsp.test.nhn.no
*.artifactory.pasientreiser.nhn.no
nordtrond.klient.qa.amk.nhn.no
*.net.nhn.no
*.hn.at.nhn.no

Certificate

The complete raw certificate details for na-test-oidc.d-rfi-000.osl1-rf-it.sky.nhn.no in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2u/NVxqtTStVpVKWZsBl
uDP6+/AneeDcnoy+6QomXW7u4XBRIsDAXSN6s3yQXBJcinOUbZtBznkLA2dcHQhN
hzHRfh3aMTilIY6D+CU8rk5OJ93ztStLYziXY8b/y9eslGtcTjWPWtweFRljC5HK
BZ7euyEsNEFtUar0bO8X1pWKF94dWDFsgvgt5WxH8y8awbEm8OmsS3IJNBeS9CcQ
KedgkZWjHupgUpqz9s2gD1E9LtHxQaE7RBgYRMztaYMN8a+y3h/cuDpfuPuj+mEg
Z8YHW1W/BEarQ8IMm9ZPToXS4HgX/3eFijBomvGTuq1euV8EVP11TkeboVNYshNr
3QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 408586341375242167339804886887838954223709
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-02 09:01:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-31 09:01:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'na-test-oidc.d-rfi-000.osl1-rf-it.sky.nhn.no'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27638201310485402593653317928680096221359976943684796604099650647173580358405182663128987517318251528043905419333789348847907700442006473801790189099761404418709477499338356090639637908991730388104115968188669508228199520415630025458731705156472142754876991165415549260569884338708139253913403252207026190664750188120222707227177862557878157567816316988692421385366526962525102690318236314252053004922218826351866668589622819417517990866301274637277406689128889601107267750954902614458625701837573437637204228278099421021053940133482386311085674110302461721581896583613607524809428924599723420154656223380771142069213
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							08f085efadd608d6516331184e8736cb709c29be
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'na-test-oidc.d-rfi-000.osl1-rf-it.sky.nhn.no'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018b8f7aa4b9000004030047304502205eab437c1686f078fcede2ea17f0a9d04e9ab706250206bffbada818ac63565202210093c395cc3a00645ca5f0e32c261b44c0f7b3bd65917761394c9affa14989383500760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018b8f7aa5130000040300473045022013e5f7eed3329891c7d76c23e5de6532ebd89a75e052c9792ffc4adbd66f336f022100bba83edaaab3695c914b194a0e662173afa9eb2dffa9b5ff127939a10900bad6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002795b4aea6133692ec904d8f04ef5392a0b1985005e4c87feedff1bf5e7446c12e4a980046af66d8aa2fc822a97775f8c78b0dcd89dfc8f955903ae33153e1fd6c8e8c002d8331ea39db359d5bc7a53065f4868d2e850a910de75e6de91baf49302bc514c7852b527753932f9165ae147ea92692e13f1c73a6a7a30910e3d6fa21d589189b269c634cc8e56cf8423fea78d3cd94b0ab04e220c4bdd9fea757f395faebca3f2c3a518d6248e970c0c4ca59d7ee8e0fdaa2c13653d10ac57f5d6166174d4c210bd5937552270ddfd1d1acb79a586c0feba096bbf1c277a1935689b6da60cb2eabe98ce231e3856082484b7c7b1aa3e5c7e6f8cf76cc8ba8ee220b