srvnib03.coop.no

Issued by GeoTrust DV SSL CA

About this certificate

This digital certificate with serial number 06:8b:21 was issued on by GeoTrust Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

SERIALNUMBER=jus/2DJkO48ei9zLfQSJbpCwNlkbkzFO,CN=srvnib03.coop.no,OU=GT94228948+OU=See www.geotrust.com/resources/cps (c)13+OU=Domain Control Validated - QuickSSL(R)

GeoTrust Inc.

Organization: GeoTrust Inc.
Organization unit: Domain Validated SSL
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:8b:21
Serial Number (int): 428833
Serial Number lenght: 19 bits, 3 octets

SubjectKeyId: 8d:ae:80:b5:20:1e:fd:0b:38:30:6e:a0:af:48:ad:01:80:cd:5d:d0
AuthorityKeyId: 8c:f4:d9:93:0a:47:bc:00:a0:4a:ce:4b:75:6e:a0:b6:b0:b2:7e:fc

Fingerprint (sha1): 42:86:d3:3d:77:c9:77:06:33:f2:aa:fe:35:2e:4e:3e:90:d9:d1:2e
Fingerprint (sha256): 27:a5:e6:6f:0a:cd:c2:b5:c9:ce:40:51:c2:12:d2:c8:52:4f:91:16:be:79:36:91:16:29:8e:16:b8:5c:0b:84

Issuing Certificate URL: http://gtssldv-aia.geotrust.com/gtssldv.crt

Revocation information

OCSP Server: http://gtssldv-ocsp.geotrust.com
CRL Distribution Point: http://gtssldv-crl.geotrust.com/crls/gtssldv.crl

Check the revocation status for certificate srvnib03.coop.no

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for srvnib03.coop.no

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

srvnib03.coop.no

Other certificates including the domain name coop.no

(limited to 100 certificates)
ssl3.ipaper.io
ssl2.ipaper.io
ssl3.ipaper.io
ssl2.ipaper.io
ssl10.ipaper.io
ssl9.ipaper.io
ssl9.ipaper.io
ssl9.ipaper.io
ssl3.ipaper.io
ssl2.ipaper.io
ssl2.ipaper.io
ssl2.ipaper.io
medlemspanel.coop.no
ssl3.ipaper.io
ssl3.ipaper.io
coop.no
ssl2.ipaper.io
ssl9.ipaper.io
dittfordelslan.coop.no
ssl2.ipaper.io
vpn.coop.no
ssl10.ipaper.io
gw.coop.no
ssl9.ipaper.io
ssl3.ipaper.io
*.coop.no
ssl2.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl2.ipaper.io
mobile.coop.no
helloworld2.staging.coop.no
coop.no
ssl2.ipaper.io
ssl10.ipaper.io
kompetanse.coop.no
ssl9.ipaper.io
ssl2.ipaper.io
ssl3.ipaper.io
lsrp3.coop.no
ssl9.ipaper.io
ssl9.ipaper.io
*.coop.no
auth.coop.no
ssl5.ipaper.io
ssl10.ipaper.io
ssl3.ipaper.io
ssl9.ipaper.io
ssl9.ipaper.io
ssl1.ipaper.io
ssl9.ipaper.io
kampanje.coop.no
ssl3.ipaper.io
nettbank.coop.no
ssl3.ipaper.io
coop.no
api.coop.no
ssl2.ipaper.io
coop.no
ssl3.ipaper.io
ssl9.ipaper.io
ssl9.ipaper.io
ssl9.ipaper.io
ssl9.ipaper.io
ssl9.ipaper.io
ssl2.ipaper.io
cdcapp.coop.no
ssl9.ipaper.io
ssl2.ipaper.io
ssl3.ipaper.io
webapps.coop.no
ssl3.ipaper.io
sni.cloudflaressl.com
sni116f0gl.wpc.edgecastcdn.net
dittfordelslan.coop.no
ssl9.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl2.ipaper.io
ssl10.ipaper.io
coop.no
ssl10.ipaper.io
kompetanse.coop.no
ssl2.ipaper.io
ssl10.ipaper.io
ssl1.ipaper.io
ssl9.ipaper.io
ssl2.ipaper.io
ssl10.ipaper.io
ssl10.ipaper.io
ssl2.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl1.ipaper.io
srvnib03.coop.no
edge1.coop.no
ssl3.ipaper.io
secure.coop.no

Certificate

The complete raw certificate details for srvnib03.coop.no in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnMDLSTAirOrUsPXOl62
Ii89fsjaPcVCTkkii+PWwGz6GBHdo3k7VRynwyUf+XmbpgtQTDUDujEObwA6EfVy
lL/9cdja/7CFKfDfdTCeCKJcQzVe4W3IkrYuCeBPBOLH8Zmv2ce3Onq9PtwIFm8+
fsXmNPTTBr0uNbzgohuGPnlZgQ5kOiQfrg9jgc6DR/xbxsLKGkUlafkHS88s5HWN
7Sh8ckATfn0pGFgjLV9ZdK0CfhxqVCiOmsvUQcBDxYQDZ07W5J7M4Ek4lkT78IPw
PKHcQAlvYeBKSU5XepxqzTOpAsyRsdjVTLfj1a87Ebjem8xMpEEJ57vi9FU+sZkA
2wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 428833
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Validated SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust DV SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-04-23 12:51:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-07-26 03:59:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'jus/2DJkO48ei9zLfQSJbpCwNlkbkzFO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GT94228948'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.geotrust.com/resources/cps (c)13'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated - QuickSSL(R)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'srvnib03.coop.no'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23032086235790385322497639809755303089612230397141345865257069056385790120986597008984471252973825930739854723663467100339758852003430390690056370676943038389110433895711217611961019196917718359921649938389209684777826515477091850877326621723499901222469881817439887306558164637845026264331460479411778992995902425264521802010149094468241969537346367589397236204015670574237280531066993193824710976755801734608475075261036513474880884885509580639491784491553235706322342138329800194856614193278266441242190730433706874102527364506157168647007452045560610227486584068212202423438134925595291868513262392759812307353819
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8cf4d9930a47bc00a04ace4b756ea0b6b0b27efc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'srvnib03.coop.no'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssldv-crl.geotrust.com/crls/gtssldv.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8dae80b5201efd0b38306ea0af48ad0180cd5dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssldv-ocsp.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssldv-aia.geotrust.com/gtssldv.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.geotrust.com/resources/cps'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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