registrering.adressa.no

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:06:9e:c5:b7:cf:5e:03:7c:6b:d6:fb:54:59:e8:96:a0:f3 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=registrering.adressa.no

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:06:9e:c5:b7:cf:5e:03:7c:6b:d6:fb:54:59:e8:96:a0:f3
Serial Number (int): 263589596630731801703585375479859313549555
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b6:a2:d8:82:6d:81:cc:77:77:c2:fd:3e:60:0a:6a:df:a1:8e:6a:cf
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a1:52:a8:a4:fb:57:49:10:28:f5:e6:3b:97:7f:f9:63:5f:53:f2:df
Fingerprint (sha256): 2f:09:bb:46:28:d4:35:45:fb:23:ce:1b:bc:e5:4b:f9:00:67:a0:3c:44:fa:cc:4b:2b:0f:b5:f7:2f:c7:b0:a6

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate registrering.adressa.no

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for registrering.adressa.no

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

registrering.adressa.no

Other certificates including the domain name adressa.no

(limited to 100 certificates)
id.adressa.no
registrering.adressa.no
pmftp.polarismedia.no
lesertur.adressa.no
registrering.adressa.no
torg.adressa.no
gratis.adressa.no
registrering.adressa.no
id.tek.no
polarismedia.no
polarismedia.no
alogin.adressa.no
*.adressa.no
polarismedia.no
id.dolen.no
info.adressa.no
*.adressa.no
arlingtonmoments.dallasnews.com
arlingtonmoments.dallasnews.com
polarismedia.no
registrering.adressa.no
info.adressa.no
polarismedia.no
folk.adressa.no
registrering.adressa.no
polarismedia.no
alogin.adressa.no
id.dolen.no
id-pre.adressa.no
polarismedia.no
id-pre.adressa.no
info.adressa.no
registrering.adressa.no
folk.adressa.no
info.adressa.no
polarismedia.no
id.tv.nu
alogin.adressa.no
gw.adressa.no
info.adressa.no
alogin.adressa.no
studio.adressa.no
id-pre.tv.nu
info.adressa.no
arlingtonmoments.dallasnews.com
info.adressa.no
gratis.adressa.no
godmorgen.adressa.no
folk.adressa.no
studio.adressa.no
godmorgen.adressa.no
torg.adressa.no
info.adressa.no
gratis.adressa.no
alogin.adressa.no
id.schibsted.no
lesertur.adressa.no
gratis.adressa.no
polarismedia.no
gratis.adressa.no
gratis.adressa.no
info.adressa.no
gratis.adressa.no
gratis.adressa.no
folk.adressa.no
torg.adressa.no
alogin.adressa.no
folk.adressa.no
id-pre.bsnett.no
id-pre.tv.nu
id.dolen.no
torg.adressa.no
lesertur.adressa.no
studio.adressa.no
gratis.adressa.no
id.schibsted.no
gratis.adressa.no
registrering.adressa.no
karriere.adressa.no
info.adressa.no
folk.adressa.no
gratis.adressa.no
info.adressa.no
id-pre.byas.no
info.adressa.no
id.tv.nu
registrering.adressa.no
studio.adressa.no
polarismedia.no
gratis.adressa.no
id.dolen.no
lesertur.adressa.no
polarismedia.no
gratis.adressa.no
alogin.adressa.no
folk.adressa.no
id-pre.adressa.no
id.adressa.no
*.adressa.no
id-pre.byas.no

Certificate

The complete raw certificate details for registrering.adressa.no in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 263589596630731801703585375479859313549555
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-04 21:17:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-03 21:17:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'registrering.adressa.no'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 673042792524271757035000100776667930895745658731303788672134161080800389260334505629536519404642507527775814865311709339317926773502359683892237534769505599182850336911829365677094718194647994867649562980646063053872967014237158986919038415365132977605304281230004293000370687499249199162709064959640410189003051809186573203474696979715368217246116053446082443364996454976728580702544908568882952268887436452950184504620178561555113969073890313694190288242240469665364061021784837217113581618368786278370451177690282957270498691247316740420322135891212237075966069552462295651722418768684031212867049933377026029286322424530767526659021328809131758647741705697573190629180064903888063692912695660088039103899748573657891500739915282860429341040560041295883127548666974003442362669729003070409634696356047317195861019006662153630485550700092273439431625928404548931421017600879970441277414100457953164220069986323505276088903435458632983633624728108667903303393541793184483613203409145086813704662091837836114646577957287873975101880396214197564326523409784141774662853158083820744936404771639520285291560054425504572791905213193825926122943808372503205976740295446078226415561388692587727800601054637694245023023746763695847217558411
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b6a2d8826d81cc7777c2fd3e600a6adfa18e6acf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'registrering.adressa.no'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016ed2fd8d66000004030046304402203b738eb0b671fa77092a9195984948b439bfe22bfd184991247abad0de05e8270220654287e2daea08ccbf2f1107c26dfc6a5909be74a2699775a8de71fb6dcd2c14007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016ed2fd8d5b0000040300473045022100a0eda4b65ca0e71324c8bbaaff5bdca4cc0642e64d91d21ee8553e33e58954980220265f00699ede0e8eabc896355010e39b5c16a41decaa27d2d83f8a3815198ef7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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