prmn.nrc.no

Issued by GeoTrust TLS DV RSA Mixed SHA256 2020 CA-1

About this certificate

This digital certificate with serial number 0e:7f:60:09:19:fd:20:bc:84:2e:66:4f:7f:77:55:ef was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=prmn.nrc.no

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:7f:60:09:19:fd:20:bc:84:2e:66:4f:7f:77:55:ef
Serial Number (int): 19270561474441296589352537494679672303
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 00:5c:c9:53:44:a4:16:30:b6:7a:0b:a0:16:4d:70:1c:46:ce:2e:b1
AuthorityKeyId: 12:c9:88:9b:2f:c9:44:7a:7d:12:f1:df:40:03:42:98:92:c7:24:d6

Fingerprint (sha1): 6b:38:c7:c4:ec:67:e1:0c:78:57:c4:26:c3:94:9d:00:66:47:17:9b
Fingerprint (sha256): 0e:ad:62:8d:6a:bd:9c:7a:67:a5:9f:24:ee:b5:8e:a3:2f:f6:52:fd:3f:ed:ad:85:4f:b4:09:9b:a3:9f:b5:42

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustTLSDVRSAMixedSHA2562020CA-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustTLSDVRSAMixedSHA2562020CA-1-1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustTLSDVRSAMixedSHA2562020CA-1-1.crl

Check the revocation status for certificate prmn.nrc.no

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for prmn.nrc.no

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

prmn.nrc.no

Other certificates including the domain name nrc.no

(limited to 100 certificates)
stories.nrc.no
eay-tar.app.nrc.no
vp.nrc.no
*.nrc.no
prmn.nrc.no
sangamstaff.nrc.no
1passwordscim.nrc.no
changamka.nrc.no
donate.nrc.no
give.nrc.no
help.nrc.no
san-14-s51.tlsprovisioning.exacttarget.com
gors.nrc.no
changamka.nrc.no
help.globality.cloud
1passwordscim.nrc.no
help.nrc.no
womenshlp.nrc.no
help.globality.cloud
current.nrc.no
lock.nrc.no
changamka.nrc.no
1passwordscim.nrc.no
admin.blp.app.nrc.no
prmn.nrc.no
help.globality.cloud
flyktninghjelpen.no
gors.nrc.no
donate.nrc.no
sangamstaff.nrc.no
latestgors.nrc.no
help.globality.cloud
video.nrc.no
prmn.nrc.no
1passwordscim.nrc.no
gors.nrc.no
latestgors.nrc.no
help.nrc.no
norcap.nrc.no
help.globality.cloud
help.globality.cloud
*.nrc.no
gorstraining.nrc.no
gors.nrc.no
eaytar.nrc.no
link.scan2mail.nrc.no
skills.nrc.no
gors.nrc.no
gorsdev.nrc.no
hjelp.nrc.no
eay-tar.app.nrc.no
ssl863184.cloudflaressl.com
prmn.nrc.no
1passwordscim.nrc.no
icladuhok.nrc.no
sangamtest.nrc.no
gors.nrc.no
changamka.nrc.no
1passwordscim.nrc.no
hjelp.nrc.no
donate.nrc.no
cash.nrc.no
identityadmin.nrc.no
help.nrc.no
help.globality.cloud
latestgors.nrc.no
current.nrc.no
admin.blp.app.nrc.no
vp.nrc.no
weboffice.nrc.no
norcap.nrc.no
ssl863182.cloudflaressl.com
sangamtest.nrc.no
give.nrc.no
san-14-s51.tlsprovisioning.exacttarget.com
link.scan2mail.nrc.no
gors.nrc.no
san-14-s51.tlsprovisioning.exacttarget.com
help.globality.cloud
lock.nrc.no
gors.nrc.no
cct.nrc.no
www.flyktninghjelpen.no
hjelp.nrc.no
skills.nrc.no
eaytar.nrc.no
help.globality.cloud
skills.nrc.no
tools.nrc.no
cdn.blp.app.nrc.no
*.nrc.no
norcap.nrc.no
skills.nrc.no
cash.nrc.no
gors.nrc.no
ssl863184.cloudflaressl.com
*.nrc.no
gors.nrc.no
ssl863184.cloudflaressl.com
help.nrc.no

Certificate

The complete raw certificate details for prmn.nrc.no in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzuuDpDi2KaDsBQ6WVQE/
Zu0s7LypfVEf8fekq1DvRDqaaWsVpfqQF0Cz+ECRLxv98AMpDDc8AGjfLtx92R0Q
qBJ2yb3lYLm6rRRu4YQDj/ti29iDgWp+EbLcoIJt2Fj2CwxoYDNQfdQBJ6T0gsBO
MLWg77xdAJ6EBAmqKXGONH+2Lz3N+ucQ6PfWaB/EAP8y/FJYBw1Qngx7ZH1Mfdi3
K74v/J3+VNddzPG71Fi2iSYsbJAPLq+z/BKIBsmFjLdWGaZHHhcDjnFX5I1e7pdx
Z5FgaGzy4xM4VoTVCGEVfgpvthF1tt1s313LoxWcBzF6u7s9SaLKA4UTDfIugPLS
fQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19270561474441296589352537494679672303
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust TLS DV RSA Mixed SHA256 2020 CA-1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-11 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'prmn.nrc.no'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26121227215606999939799779609085150286389358205285006150886335455902772252990183626362121800719326968948481345711646447221350356806622646419733156945037785335408875769132836773753408809517315152669341144697194398715411894145809604806646894046195830882250832828082117637282392474041111771664819334313407016321390359193568888656930010630585508168450607785202735552108909678818646242192153061235598340965422650653468042614419284005290317206940869773585755682292826645728811837158866892576432465490221803291358734468402599703500570128230195780343993197177585374578290290499816180046919041174175189444757351053646416237181
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 12c9889b2fc9447a7d12f1df4003429892c724d6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							005cc95344a41630b67a0ba0164d701c46ce2eb1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prmn.nrc.no'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustTLSDVRSAMixedSHA2562020CA-1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustTLSDVRSAMixedSHA2562020CA-1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (121 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustTLSDVRSAMixedSHA2562020CA-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							01660077002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc7840000017e4abe36170000040300483046022100e94d17956e381be9be50aa26b15c05ef8a6af43b6ebcbe6e7c7955751ef3056a022100e3198e4410b5ae377d54b1c076ebfd9cb6e0ed21a49f6b3eddc6093e4f02688000750051a3b0f5fd01799c566db837788f0ca47acc1b27cbf79e88429a0dfed48b05e50000017e4abe3693000004030046304402206eccf6b69c38aeccf3ba2717600fce19065399a1be187662b27f54dc02ebef85022043c7cc853741aee0dbd833a5742c726ebd1acd48d1126955b337a928e82b882700740041c8cab1df22464a10c6a13a0942875e4e318b1b03ebeb4bc768f090629606f60000017e4abe36360000040300453043021f3c8421a51176b6b3e281b09cd1c3fbca8722eebfd1fc73f4215c606cf2466e02207bfdda31b2a51a6a778c80b6ea65fd696f46350d4eedf5395a1033e58176eebc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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