bibliotek.lunner.kommune.no

Issued by R3

About this certificate

This digital certificate with serial number 03:2a:9a:26:bf:50:19:b7:69:72:1a:0b:d7:5f:d8:ca:20:36 was issued on by Let's Encrypt.

With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=bibliotek.lunner.kommune.no

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:2a:9a:26:bf:50:19:b7:69:72:1a:0b:d7:5f:d8:ca:20:36
Serial Number (int): 275833619504878102928444509907333562376246
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ad:e5:3a:9e:57:2b:84:50:6f:09:67:b0:7f:6d:51:ac:c3:16:9a:6d
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): b5:96:f4:ac:46:8e:96:36:1f:10:0c:21:99:ba:40:f1:43:55:a0:9b
Fingerprint (sha256): 1d:4d:6b:6c:95:b5:f7:91:18:cd:53:11:4a:03:d6:7a:54:a2:b5:6a:7f:27:85:da:47:b6:6f:a1:97:85:8f:a7

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate bibliotek.lunner.kommune.no

18

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bibliotek.lunner.kommune.no

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bibliotek.lunner.kommune.no
holebibliotek.no
lierbib.no
lorenskogbibliotek.no
midtfylkebiblioteket.no
nesoddenbibliotek.no
nordrefollobibliotek.no
oeikbib.no
tjenester.vikenfylkesbibliotek.no
www.hallingdalsbiblioteka.no
www.lorenskogbibliotek.no
www.midtfylkebiblioteket.no
www.nesoddenbibliotek.no
www.nordrefollobibliotek.no
www.oeikbib.no
www.vikenfylkesbibliotek.arena.axiell.com
www.xn--rlingenbibliotek-uob.no
xn--rlingenbibliotek-uob.no

Other certificates including the domain name lunner.kommune.no

(limited to 100 certificates)
lunner.kommune.no
k247.lunner.kommune.no
lunner.kommune.no
tilgang.lunner.kommune.no
bibliotek.lunner.kommune.no
bibliotek.lunner.kommune.no
k247.lunner.kommune.no
bibliotek.lunner.kommune.no
www.lunner.kommune.no
*.lunner.kommune.no
moteportal.lunner.kommune.no
stilling.lunner.kommune.no
mail.lunner.kommune.no
mail.lunner.kommune.no
mail.lunner.kommune.no
skjema.lunner.kommune.no
stilling.lunner.kommune.no
moteportal.lunner.kommune.no
lunner.kommune.no
bibliotek.lunner.kommune.no
skjema.lunner.kommune.no
tilgang.lunner.kommune.no
bibliotek.lunner.kommune.no
skjema.lunner.kommune.no
bibliotek.lunner.kommune.no
innsyn.lunner.kommune.no
www.lunner.kommune.no
k247.lunner.kommune.no
bibliotek.lunner.kommune.no
bibliotek.lunner.kommune.no
webmail.lunner.kommune.no
lunner.kommune.no
lunner.kommune.no
bibliotek.lunner.kommune.no
www.lunner.kommune.no
lunner.kommune.no
bibliotek.lunner.kommune.no
bibliotek.lunner.kommune.no
www.nordrefollobibliotek.no
k247.lunner.kommune.no
interactintegrasjoner.lunner.kommune.no
bibliotek.lunner.kommune.no
mpinternetserver.lunner.kommune.no
stilling.lunner.kommune.no
bibliotek.lunner.kommune.no
bibliotek.lunner.kommune.no
www.lunner.kommune.no

Certificate

The complete raw certificate details for bibliotek.lunner.kommune.no in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/qaFwTjwYRmJjS2LZKk
93A7TwfrGVyjC46t1H0IX0cc55ji0I79SgVLtuhWIpYuHcCbCRM9y8vfvAteG9BD
LwLwXu8vdX2KLfCtDkLQS9i+cJ6dk36pu/e1wWYjbYMNlbTUO6DA9ssjWUP4mQBf
BzMGjbjMrUW1cgUfYr5NmDN3XJUHSnavKzBL7HCyXOU6HT2qUgxSDmt9/17+60If
Ri6qiePQx6/DGh5Jdw1GBbgCoieR9zgLvDabJlQvjXx17NRsnM++dkJfWd4mQW2x
uHAlagqn3l0QFPmPNt4cS09XkCrmjT9G5VqU8MWXW/SKW7JP82+KevYYoP6CBd5o
UQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 275833619504878102928444509907333562376246
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-31 09:40:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-29 09:40:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bibliotek.lunner.kommune.no'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23225186218211547937034856257839540061783467393734431222822885971739338134974740194006327673475093587085093049667352056838804207784027586825993695079748223017162942342817756890503380242361629258730580793745723050378575655680440288669582967018648407846807275192681957234665437915027690452036261613977088235719310401279110390522377116347478594668385915712310500986898416339893854663794138796726001006840392708644350817605880185805442097653803016068150961810715734582876528067473202095903838729267795819268552049264844892666125900626842104500121441944224841389832807117247077490315008319769923950351451781931067368171601
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ade53a9e572b84506f0967b07f6d51acc3169a6d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (467 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bibliotek.lunner.kommune.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holebibliotek.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lierbib.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lorenskogbibliotek.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'midtfylkebiblioteket.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nesoddenbibliotek.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nordrefollobibliotek.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oeikbib.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tjenester.vikenfylkesbibliotek.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hallingdalsbiblioteka.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lorenskogbibliotek.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.midtfylkebiblioteket.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nesoddenbibliotek.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nordrefollobibliotek.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oeikbib.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vikenfylkesbibliotek.arena.axiell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--rlingenbibliotek-uob.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--rlingenbibliotek-uob.no'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b85525c1d000004030046304402201e273993069739d43c7b68cb0ebd19e7dd69bcfbc6a41b029dcb78cc580a4a7f022022b377127ae298508723595a0c69f413ed2c4e72560e8e85f8126b83da86407d0077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018b85525c1a00000403004830460221009cd968edf009f1aa80b9c2cfa18932762b0ae3afe5bd07b2f5eed100daae858e0221008e42ca3ea5dcc486cd6a367c3ce179ca3721c29d852faadae13d90567fbd4e1f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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