kaninoppdrett.no

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:38:59:58:fa:b8:15:ab:a4:c2:c1:11:04:74:d2:6f:a1:f0 was issued on by Let's Encrypt.

With 24 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=kaninoppdrett.no

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:38:59:58:fa:b8:15:ab:a4:c2:c1:11:04:74:d2:6f:a1:f0
Serial Number (int): 280511433641788791976464755934421117280752
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 52:34:4d:25:19:50:e3:3a:be:32:9b:04:4e:a3:51:e9:a3:76:4d:61
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): e8:f1:2a:14:0c:47:07:75:4d:2b:8c:35:e0:5e:66:3c:44:3b:3e:e4
Fingerprint (sha256): 0d:1d:78:e0:df:bc:50:37:21:0a:e1:16:a4:ae:ab:cb:b7:82:e1:e1:87:79:8b:c9:5a:10:5e:1f:cd:57:7b:cd

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate kaninoppdrett.no

24

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kaninoppdrett.no

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

butikk.lablogic.no
gratis-annonse.lablogic.no
kaninoppdrett.lablogic.no
kaninoppdrett.no
markeds.lablogic.no
naturkostas.lablogic.no
nett.lablogic.no
nett.pro
pixondu.lablogic.no
rekvisitaorg.lablogic.no
vitaminer.lablogic.no
vitaminer.org
www.butikk.lablogic.no
www.gratis-annonse.lablogic.no
www.kaninoppdrett.lablogic.no
www.kaninoppdrett.no
www.markeds.lablogic.no
www.naturkostas.lablogic.no
www.nett.lablogic.no
www.nett.pro
www.pixondu.lablogic.no
www.rekvisitaorg.lablogic.no
www.vitaminer.lablogic.no
www.vitaminer.org

Other certificates including the domain name kaninoppdrett.no

(limited to 100 certificates)
kaninoppdrett.no
kaninoppdrett.no
kaninoppdrett.no
kaninoppdrett.no
kaninoppdrett.no
kaninoppdrett.no
kaninoppdrett.no

Certificate

The complete raw certificate details for kaninoppdrett.no in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA51AKtuUl85gObftEhuou
ykixYZXxPXZ8HUWH6kg+a4p2BiN0kjoMgsfWAXggJ03twUP0i8K0N6mfaWhkJq4a
bqm5hf7owWi3HgRBH57RR6HgGbWorss5TRD+2MuYR7aJQ8M5nWX2Bks6s1dKU7QI
BUKG0Ba1UfWNDUTmhvqLtIgNqwO6V+fESwhX7UernscCaUk3xNaImtHCojkbqSXR
epO5A3o1fKoi95QrZQAEasR2kqicdtPCZ94wwyOIXJS7AG6J/hu3dLQQ2Xyf2HRZ
UuJCjFXj+xvGNROMDApCzi6AfPHR1GZTgAPDgX85uh233Q5VKCVl3AYqun4cDeUa
cwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 280511433641788791976464755934421117280752
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-09-01 14:54:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-11-30 14:54:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kaninoppdrett.no'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29200518556072121698448692627675251512340414840597084179411256005854906720374526560820307064376585117991604068159143428705202531818576284682596546381674940347552541447901262114014623018940845748735898588676378990618880995581974081486798467673224725763311884290280350786674133604359040686345960820276347237974202347366798807033756641558961278156071660583956200451193469102263309790074366231705049802560256059782535289166577021976596392846567114835907460996927949193773727346939204808409071418434554146765989311556192364850409946533294382035735228705421247229477070452097159401039310796084329984001614070275237193521779
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							52344d251950e33abe329b044ea351e9a3764d61
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (556 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'butikk.lablogic.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gratis-annonse.lablogic.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaninoppdrett.lablogic.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaninoppdrett.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'markeds.lablogic.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naturkostas.lablogic.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nett.lablogic.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nett.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pixondu.lablogic.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rekvisitaorg.lablogic.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vitaminer.lablogic.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vitaminer.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.butikk.lablogic.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gratis-annonse.lablogic.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kaninoppdrett.lablogic.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kaninoppdrett.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.markeds.lablogic.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.naturkostas.lablogic.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nett.lablogic.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nett.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pixondu.lablogic.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rekvisitaorg.lablogic.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vitaminer.lablogic.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vitaminer.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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