order.mediaconnect.no

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 09:38:b4:d1:3d:79:89:76:fd:ad:db:61:cf:b9:db:e5 was issued on by DigiCert, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=order.mediaconnect.no

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 09:38:b4:d1:3d:79:89:76:fd:ad:db:61:cf:b9:db:e5
Serial Number (int): 12257487997582330767733719730059074533
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 3f:84:12:68:99:2f:85:d5:09:1f:05:01:b5:d7:58:bb:da:f3:dc:91
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): 2c:40:8f:b2:6f:7b:f3:68:c5:32:24:09:75:6f:b6:4f:d6:e8:14:83
Fingerprint (sha256): 0f:14:dd:82:04:8d:23:1d:09:db:6f:2b:c7:77:e0:78:b8:26:5a:6a:3b:0a:50:e6:60:c1:ef:a5:63:b6:f4:ad

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate order.mediaconnect.no

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for order.mediaconnect.no

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

order.mediaconnect.no

Other certificates including the domain name mediaconnect.no

(limited to 100 certificates)
mediaconnect.no
*.mediaconnect.no
mediaconnect.no
status.mediaconnect.no
order.mediaconnect.no
mediaconnect.no
status.autospf.com
status.mediaconnect.no
status.autospf.com
*.mediaconnect.no
status.synccentral.eu
mediaconnect.no
status.zoho.sa
*.mediaconnect.no
*.mediaconnect.no
status.skynetexpress.com
status.autospf.com
status.synccentral.eu
mediaconnect.no
status.autospf.com
status.autospf.com
status.autospf.com
mediaconnect.no
status.autospf.com
status.mediaconnect.no
jira.mediaconnect.no
mediaconnect.no
mediaconnect.no
demo.mediaconnect.no
status.mediaconnect.no
mediaconnect.no
*.mediaconnect.no
connect.mediaconnect.no
mail.mediaconnect.no
mediaconnect.no
*.mediaconnect.no

Certificate

The complete raw certificate details for order.mediaconnect.no in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA35R/mqir1cS8k2/aLd13
6y/dOaU8lL5uWnpLCmnr+CcFenHUZJHMNHUb8MRi58nvdYLoI/wnsKNHkFcjfmFI
iSkeyZhB5mTOZFx2ioqPzHpm6EzXDgQFmPd/Lkg+BN7c+AZzgm/FeJXcXD5rRSM/
9CQ3B2vRBxBn/r9s1iWNKZq+iweW4ki7TQJzyv1D/bB50XP5UPIN7G28UthJGCyh
XCibLKWOY3F3/Jw66Qyvz4AbueXf26bx2QvfkucbKIrNVNUqIhikCBwrNJBOigF8
XRtzm5Gn5Kx2XvJ13lYaaXt+H5U9fzSFSIBj3JgDvn6U8UrtyRnlAeoB7dMWMp72
XQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12257487997582330767733719730059074533
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-08 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'order.mediaconnect.no'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28224369324148860537919498719258301000863090068431572532538044225643783246265183581172649480004573230325856875832535119860285872721956534768845754417835796445081059516900663637997736640015220709657529998416233644071352996218011314772629003875237687149310684123009811525831079299759080780689330336911662106342824017541234142370934477190835673357023804438933194278324647089791589105712589234978178374370936089141693980589939791123256977772950429069882728880067244199558581216702669566831311237041427931453000989564603446785093154753707393272795250748676946602067587830240938642048404815183602659643724038390040600966749
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3f841268992f85d5091f0501b5d758bbdaf3dc91
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'order.mediaconnect.no'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		00af843cba50d08f857c3608b62f70a2372dae57deade6440343ddea62424445b4e96cb41c69b02f0f0f38ddc80cbe187a4af0501bf68049131de66520630fc32f0e2d6100fa0e4c73d93486cc99857e78f0d4b13d7e6e568c0d51e65691da9b0b3c62e66181001d4dc99318783726e48485aefa1a91e0468ffa287b2c3322cc71589a0f2211ec3be57e7bdfded7f63442a722f32de684256262062af1607ae8031f71eb950678bc6a733d85cc820335adb1a415345a6b3cfcff7190462179f16b1d1b03c7bac887f7fb160c04de75b54c9864dc8c6a278013fd4f6e490946356ea094805f1eb655eccf9bdd8d21190f8bd79c17f77d448c496c4882bae1ac5a9bb2ebd89f9f2ef3a68cea7eeb9bf79eca340d44137251b30d9c6564643ccdbd3351a1cd07e5a21e65bd585422f45a4cf61e722676103dda1f7397d1d302dc5f4da6d7c884fcf562a68bb2fdfa76e6f60a28e806a94a539156be391f05b6cf4912743725c0a35077fc25ce0bfa41beb3e3e98443e458253ef216041ec7a8e2e7762fa08529526498a837b82f830ac5ec205ee076efd035f018615a1763a82fb7a334ad3201ec9403a848edb6bed69843758106866c6d2cde4762271556cce2b56f3b1f9252c3f89d5e5a464ed15f8dc3d5ab1dec732136bcbd7b3c6be503b9e20c0e42f19b7b3a1d5d5760c931f688e19655210761b191d89392c1931f83d266a8