sorum.kommune.no
Issued by R3
About this certificate
This digital certificate with serial number 04:0a:cd:ae:f4:c3:f8:2d:2c:98:90:14:08:df:6d:e2:1b:7f was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=sorum.kommune.no
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:0a:cd:ae:f4:c3:f8:2d:2c:98:90:14:08:df:6d:e2:1b:7fSerial Number (int): 352125367559473905911067106625659028511615
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: ef:c6:6b:9f:b3:ae:50:18:33:46:a0:60:98:27:ef:31:2c:06:4f:fb
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 9b:04:d2:2f:93:bd:a6:10:df:fc:26:89:64:dd:b0:d5:e5:fc:f6:b9
Fingerprint (sha256): 14:f9:f1:67:62:74:8e:df:54:85:f7:36:be:56:01:14:75:6b:c8:b7:d5:84:d0:00:72:00:a9:ca:54:83:7b:c8
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate sorum.kommune.no
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for sorum.kommune.no
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
sorum.kommune.no
Other certificates including the domain name sorum.kommune.no
(limited to 100 certificates)
*.sorum.kommune.no
sorum.kommune.no
sorum.kommune.no
www.sorum.kommune.no
barnehagesoknad.sorum.kommune.no
*.sorum.kommune.no
www.sorum.kommune.no
sorum.kommune.no
www.sorum.kommune.no
www.sorum.kommune.no
*.sorum.kommune.no
sorum.kommune.no
www.sorum.kommune.no
www.sorum.kommune.no
*.sorum.kommune.no
webmail.sorum.kommune.no
sorum.kommune.no
*.sorum.kommune.no
sorum.kommune.no
www.sorum.kommune.no
sorum.kommune.no
www.sorum.kommune.no
sorum.kommune.no
www.sorum.kommune.no
cwi.sorum.kommune.no
sorum.kommune.no
sorum.kommune.no
www.sorum.kommune.no
www.sorum.kommune.no
www.sorum.kommune.no
www.sorum.kommune.no
*.sorum.kommune.no
*.sorum.kommune.no
sorum.kommune.no
sorum.kommune.no
ledigstilling.sorum.kommune.no
sorum.kommune.no
sorum.kommune.no
sorum.kommune.no
www.sorum.kommune.no
barnehagesoknad.sorum.kommune.no
*.sorum.kommune.no
www.sorum.kommune.no
sorum.kommune.no
www.sorum.kommune.no
www.sorum.kommune.no
*.sorum.kommune.no
sorum.kommune.no
www.sorum.kommune.no
www.sorum.kommune.no
*.sorum.kommune.no
webmail.sorum.kommune.no
sorum.kommune.no
*.sorum.kommune.no
sorum.kommune.no
www.sorum.kommune.no
sorum.kommune.no
www.sorum.kommune.no
sorum.kommune.no
www.sorum.kommune.no
cwi.sorum.kommune.no
sorum.kommune.no
sorum.kommune.no
www.sorum.kommune.no
www.sorum.kommune.no
www.sorum.kommune.no
www.sorum.kommune.no
*.sorum.kommune.no
*.sorum.kommune.no
sorum.kommune.no
sorum.kommune.no
ledigstilling.sorum.kommune.no
sorum.kommune.no
Certificate
The complete raw certificate details for sorum.kommune.no in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgISBArNrvTD+C0smJAUCN9t4ht/MA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDAxMTcyMDI4MTVaFw0yNDA0MTYyMDI4MTRaMBsxGTAXBgNVBAMT EHNvcnVtLmtvbW11bmUubm8wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDfzWWB1hz5JDsLW2QHfBtrsnx4vUCnNjc6tPeIDC87dZjI0U8XlW3QN33jDquu QpZ53pKH+nyyCe3mCybJXvui8PC3CgfnaimAt041eRwx0XvHm9+vdrxQLa1CbY0A muTZSDJlGj6+9JrepD3Snf+hFJLKIvgG7iE1T1XhipRVuUDw/J86w5AbK3tgg46S b+LE7AwceOvuCRm8tjYevtfoHV42Eut/zAxXwSZ8WyPs7Bp9colsuE3Ot0BjckLZ pCI1reib2tWYaeToG/K24U8Hqp8fHFYznQ/V9lpnhtyOxFuc9jHJ6IxAzmuHD+yG 83aUVkASy5bezFrWz3HsRbP7AgMBAAGjggITMIICDzAOBgNVHQ8BAf8EBAMCBaAw HQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYD VR0OBBYEFO/Ga5+zrlAYM0agYJgn7zEsBk/7MB8GA1UdIwQYMBaAFBQusxe3WFbL rlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDov L3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5v cmcvMBsGA1UdEQQUMBKCEHNvcnVtLmtvbW11bmUubm8wEwYDVR0gBAwwCjAIBgZn gQwBAgEwggEFBgorBgEEAdZ5AgQCBIH2BIHzAPEAdgA7U3d1Pi25gE6LMFsG/kA7 Z9hPw/THvQANLXJv4frUFwAAAY0ZUyY4AAAEAwBHMEUCIESFBgosdcATp7sFx7FV UYzWsB72kZW/gYraHDM29x9tAiEA/kfRJb7cxk4uNNmyAjPftjRXssAZ+VdFeG2p xFHbJxoAdwBIsONr2qZHNA/lagL6nTDrHFIBy1bdLIHZu7+rOdiEcwAAAY0ZUyY/ AAAEAwBIMEYCIQDX61E4G2p5ery0HZ3cB9tboX8AjaquZf6pMqkkA91YBwIhAPhY FokPn0z0pn+fbBxrH/BDYHjas9IcNmzEkInZ5VylMA0GCSqGSIb3DQEBCwUAA4IB AQCMpoL9CUkyFaOQipiUSYGL7lDxRG8A/Mi64eLgRNMr4eZ3TnEhOi7VioXx+Qto FgY6T4Up8TUhmSusX2/A6CHrStISqbP/dB+Wpk+H5g6u6/b/9BP9X7wHvAntkuBL gLamYOZ4JwWUYHAOLFFVxyM47H2YEudLEkcx8bL+lrLW3cCP5BDHLOwzPxzX+r1p caGGHNRc7gKJl3t+ZB64C7UaParnKJ1CYXX3fOFY0Invj6B0c8w7NgkfToa6+nWy 7Lo3HoeKpLAQhBjEdFIYxWQlkKacIqClJiG+yOJh1AhtQwlK/wvD5wSjhifuIxZY iDQYGVtUPTzVmn6egd0J65ok -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA381lgdYc+SQ7C1tkB3wb a7J8eL1ApzY3OrT3iAwvO3WYyNFPF5Vt0Dd94w6rrkKWed6Sh/p8sgnt5gsmyV77 ovDwtwoH52opgLdONXkcMdF7x5vfr3a8UC2tQm2NAJrk2UgyZRo+vvSa3qQ90p3/ oRSSyiL4Bu4hNU9V4YqUVblA8PyfOsOQGyt7YIOOkm/ixOwMHHjr7gkZvLY2Hr7X 6B1eNhLrf8wMV8EmfFsj7OwafXKJbLhNzrdAY3JC2aQiNa3om9rVmGnk6BvytuFP B6qfHxxWM50P1fZaZ4bcjsRbnPYxyeiMQM5rhw/shvN2lFZAEsuW3sxa1s9x7EWz +wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 352125367559473905911067106625659028511615 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-17 20:28:15 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-16 20:28:14 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sorum.kommune.no' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28252426802629518516005532288775144086232146601939872057909980079183634106481703453250674672208421043025502182802196552773736529680892781547860980914249616687502140632075552722028433864051075946525836764107183611465007988987155352374089206082817019990496777597530656296326519680636461696306062114425484616011901243572194102357212254198575239940287141112833540552084701203368209646335508406247855189669938339188384380341135547258538565179502756327343573713234105231479966095099605058384590907629123863160160852727905038090747273719217708927092362917108196003824430902823396499031786137411807421860233980670221255816187 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) efc66b9fb3ae50183346a0609827ef312c064ffb . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sorum.kommune.no' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f10076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d19532638000004030047304502204485060a2c75c013a7bb05c7b155518cd6b01ef69195bf818ada1c3336f71f6d022100fe47d125bedcc64e2e34d9b20233dfb63457b2c019f95745786da9c451db271a00770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d1953263f0000040300483046022100d7eb51381b6a797abcb41d9ddc07db5ba17f008daaae65fea932a92403dd5807022100f85816890f9f4cf4a67f9f6c1c6b1ff0436078dab3d21c366cc49089d9e55ca5 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 008ca682fd09493215a3908a989449818bee50f1446f00fcc8bae1e2e044d32be1e6774e71213a2ed58a85f1f90b6816063a4f8529f13521992bac5f6fc0e821eb4ad212a9b3ff741f96a64f87e60eaeebf6fff413fd5fbc07bc09ed92e04b80b6a660e67827059460700e2c5155c72338ec7d9812e74b124731f1b2fe96b2d6ddc08fe410c72cec333f1cd7fabd6971a1861cd45cee0289977b7e641eb80bb51a3daae7289d426175f77ce158d089ef8fa07473cc3b36091f4e86bafa75b2ecba371e878aa4b0108418c4745218c5642590a69c22a0a52621bec8e261d4086d43094aff0bc3e704a38627ee231658883418195b543d3cd59a7e9e81dd09eb9a24