altia.no

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:80:7d:ed:66:73:7e:e3:11:64:3f:87:d3:7f:ed:d0:d8:db was issued on by Let's Encrypt.

With 19 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=altia.no

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:80:7d:ed:66:73:7e:e3:11:64:3f:87:d3:7f:ed:d0:d8:db
Serial Number (int): 305060386912945738382583392410636125264091
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 0c:35:34:6d:44:f8:1a:ab:cb:5a:d5:e8:20:08:4d:27:5d:74:6c:16
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 98:f5:dc:32:27:78:89:63:7f:c0:79:a8:8d:43:55:c0:fd:b6:21:d7
Fingerprint (sha256): 36:d5:8c:04:be:72:44:a9:e9:76:3e:81:bd:55:a3:cf:e8:6c:6e:2e:26:08:2d:d5:4e:9a:82:b8:8c:ee:70:8e

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate altia.no

19

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for altia.no

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

altia.no
altiadenmark.com
altiadenmark.dk
altianorway.prod.wunder.io
bibendum.no
citagarsa.lv
interbev.no
joogikultuur.ee
premiumwines.no
strom.no
www.altia.no
www.altiadenmark.com
www.altiadenmark.dk
www.bibendum.no
www.citagarsa.lv
www.interbev.no
www.joogikultuur.ee
www.premiumwines.no
www.strom.no

Other certificates including the domain name altia.no

(limited to 100 certificates)
reg.altia.no
altia.no
altia.no
altia.no
reg.altia.no
altiadenmark.com
altia.no
reg.altia.no
reg.altia.no
altia.no
altiadenmark.com
reg.altia.no
altia.no
altia.no
altia.no
altiadenmark.com
altia.no
altiadenmark.com
reg.altia.no

Certificate

The complete raw certificate details for altia.no in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6SKfFfJmuky44hX0fKV7
kdizq6XzYILa9/YbpwloHKOSxcgzeWPvB6e8Q1zAFsk9j+m6JBol2mltHDJBs0qU
QlwLBkSiiuDE9MYcR2ERcic06GzdCj6MNR/8BGBa0tVJGBCTW4iIf79FOWaeuSjX
vWTS+33u1xGkgxRu8Uq38Lpp2ON+fqyImVSgEBW8agU1xvhdCTa0Bi3I8tXoQfaz
dCHClcIJOyZYbEovh8HYlM0VuO3Py9DuQXxIT/fHaACUr+DD4P1zqpBtCcIMbClz
CUdShxKeQsDuP0ddf5GQ54PlPUae5xm7JnGiQ0XVBOq0lJGiqDmzM6up+70rMSGg
XQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 305060386912945738382583392410636125264091
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-05 08:52:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-03 08:52:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'altia.no'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29430597519849899691507229998104226098282799017053770613755422974197290204324826774526370117269371148166951132339304732275849920584843003333074819735614830221208014945817299252372327354448148700342677385804855181801527254429283912029428995018943240667250284306071347166491381812016717550698170606111977601157516634971396456034305639284098198239908273620405150247623829323698738810577226625609921148332749024701506070483628514498929310765443997215200146803059835082901607878781435183463273134332063710201853649355373989900311535737409252960342307076682325593616475236255790110618062481372509800815854610471033378021469
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0c35346d44f81aabcb5ad5e820084d275d746c16
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (326 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'altia.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'altiadenmark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'altiadenmark.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'altianorway.prod.wunder.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bibendum.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citagarsa.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'interbev.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joogikultuur.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'premiumwines.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'strom.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.altia.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.altiadenmark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.altiadenmark.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bibendum.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.citagarsa.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.interbev.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.joogikultuur.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.premiumwines.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.strom.no'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000170aa1c78bc000004030046304402202e36b84ed86286c847cbcc7c301df15aa1c426877c715b911cc1fc7338991f860220302a0ea3acc18899fc695afe0d007ecbc66e91cf778df41f60d1079b44b964d200760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c00000170aa1c78dc0000040300473045022100bb14d09e5ac046b39336a504c297903639df5df17dc618c26a828ddf44cf905502202bac66a09910596eede4c90767c9c7c46710ced088c2e0a00fa000186c99c663
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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