tek.no

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:95:c5:d1:57:fe:fe:53:52:39:35:1c:16:47:fb:65:50:33 was issued on by Let's Encrypt.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tek.no

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:95:c5:d1:57:fe:fe:53:52:39:35:1c:16:47:fb:65:50:33
Serial Number (int): 312301875356485931919796389139182231310387
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: cd:c1:a0:fd:72:08:df:cc:fe:be:38:1b:5d:c1:2c:88:99:89:b6:20
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): f6:10:1d:71:9a:74:55:8d:fe:63:d7:a0:31:ba:57:d3:94:ab:d7:0f
Fingerprint (sha256): 31:33:83:0d:a8:cb:bd:6b:02:f8:cc:2a:80:db:2a:c1:11:5d:1c:29:ab:07:c2:14:41:79:b6:2c:85:18:2f:cf

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate tek.no

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tek.no

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

auth.tek.no
min.tek.no
neo.tek.no
search.tek.no
static.tek.no
tek.no
www.tek.no

Other certificates including the domain name tek.no

(limited to 100 certificates)
cmp.aftenbladet.no
*.tek.no
id.aboutme.schibsted.com
cmp.aftenbladet.no
cmp.aftenbladet.no
tek.no
cmp.aftenbladet.no
tek.no
cmp.aftenbladet.no
id.tek.no
*.new.tek.no
cmp.aftenbladet.no
tek.no
cmp.aftenbladet.no
tek.no
cdn.tek.no
cmp.aftenbladet.no
auth.tek.no
ish.tek.no
id.tek.no
cmp.aftenbladet.no
cmp.aftenbladet.no
tek.no
cmp.aftenbladet.no
id.aboutme.schibsted.com
id.aboutme.schibsted.com
cmp.aftenbladet.no
tek.no
tek.no
tek.no
*.new.tek.no
cmp.aftenbladet.no
cdn-yams.new.tek.no
tek.no
id.aboutme.schibsted.com
new.tek.no
tek.no
cmp.aftenbladet.no
cmp.aftenbladet.no
cdn-yams.tek.no
cmp.aftenbladet.no
cmp.aftenbladet.no
tek.no
mail.tek.no
4.session-service.identity-pre.schibsted.com
tek.no
cmp.aftenbladet.no
*.tek.no
cmp.aftenbladet.no
cmp.aftenbladet.no
*.new.tek.no
tek.no
id.aboutme.schibsted.com
cmp.aftenbladet.no
cmp.aftenbladet.no
cmp.aftenbladet.no
cmp.aftenbladet.no
prisguide.tek.no
cmp.aftenbladet.no
tek.no
cmp.aftenbladet.no
id.aboutme.schibsted.com
cmp.aftenbladet.no
tek.no
cmp.aftenbladet.no
cmp.aftenbladet.no
tek.no
cmp.aftenbladet.no
cmp.aftenbladet.no
id.aboutme.schibsted.com
new.tek.no
tek.no
tek.no
tek.no
cmp.aftenbladet.no
cmp.aftenbladet.no
id.aboutme.schibsted.com
tek.no
cmp.aftenbladet.no
cmp.aftenbladet.no
new.tek.no
tek.no
tek.no
id.aboutme.schibsted.com
id.aboutme.schibsted.com
ish.tek.no
cmp.aftenbladet.no
cmp.aftenbladet.no
ish.tek.no
tek.no
id.aboutme.schibsted.com
tek.no
cmp.aftenbladet.no
tek.no
cmp.aftenbladet.no
cmp.aftenbladet.no
tek.no
new.tek.no
ish.tek.no
tek.no

Certificate

The complete raw certificate details for tek.no in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 312301875356485931919796389139182231310387
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-02-06 09:06:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-05-07 09:06:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tek.no'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 770666222608580087295273960562676257688888905654333718493210056470510704305744752907345666613635540847480622089821847952083497883906545848496359793058470657530315678762746474931736991722608144288345352416120389940430428971546457734108708806114740560347918816587843587835938575880939268678246538715401201794161740114503820658873841705260811498817444986815720327221011923782923256850871610751477569400210485008911555243626231928832441560606099082882322984544504699516284832350150265052697810054318203149085569453101419417984506075258165281451549265578256143564358738194206523659818500564815218495839259387025336602726737878930693906164584027701511023013308626224564564954410519829647976650024550216013300656889483439987015231481435869141127250918178000513130652735120894522634617166653610395647254407976300028459275783704968563935189603132002001197689945046268799185620865364254606405584822028706335437790428604186010779930609573522905749410099174639727984156608916496767351335984549019622471181153603013911524533582621246870695644500516471102159382845908515289870351879176519793839013927811702865213789819132871045467342772966487272349652760319848056144458830655300870820122071710040721471639331375369691843403411643407417821160996389
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cdc1a0fd7208dfccfebe381b5dc12c889989b620
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (89 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.tek.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'min.tek.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neo.tek.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'search.tek.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.tek.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tek.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tek.no'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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