a2hudklinikk.no

Issued by R3

About this certificate

This digital certificate with serial number 03:78:d5:d4:d2:de:9d:e5:df:76:fd:8b:f0:34:6f:b8:89:d0 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=a2hudklinikk.no

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:78:d5:d4:d2:de:9d:e5:df:76:fd:8b:f0:34:6f:b8:89:d0
Serial Number (int): 302454972432773087910717237110081976830416
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: dc:31:81:c4:d8:39:a8:f9:57:ad:c6:cf:10:c3:fe:c7:29:ab:cf:55
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): c4:36:a5:2a:d8:fa:40:bb:9e:c0:f0:da:42:ac:61:00:30:f6:77:cc
Fingerprint (sha256): 37:df:81:1b:ca:27:3f:75:2b:46:1e:3e:20:82:40:b8:b8:c5:d6:fb:54:da:9d:bd:a5:1c:6f:77:a5:7b:f9:32

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate a2hudklinikk.no

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for a2hudklinikk.no

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

a2hudklinikk.no
www.a2hudklinikk.no

Other certificates including the domain name a2hudklinikk.no

(limited to 100 certificates)

Certificate

The complete raw certificate details for a2hudklinikk.no in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA3JzSBVtsN1E2O8+cElCX
BjNlCt5JimD9GI73nIXdVNmdEkl6D/uecn8fj/UoJ4snX92HMUvtcsjCljlSnjpa
q+/K1j7RoaMpr24AQFrwMMDVi7Apt1gijz7ORFm8x9ivZH/SSiVenGw/S2MebFOp
oQ9eCtnbIIsd/IHnUpJC7REOHKCqgR/cJep0oJGHiJDEJqU0x9xXMtpvEk9X2eb5
c7WOBWKixNGpydCbJSaFEHTszIOmGsor1L9Ku93yvNfCf2GVMBfOHgH2Yf6RcurT
WVT6KR2jth77AKxaAaSQNOyzslSSCoG3f4NtCVkOs2mzUlTqXDHuNxc4zBCAiD5B
j+BFqFHGe1Dd1SAcUWWxgLz67rszFtO8Lo2fgCH1AgCA8j98VvDDBXahkW+q3FtW
vWTqko83/4XwBeI9U7OBMXDDhah1Wtj88V5yXyvgqTeHTs8UutruS+673bEOgDGX
Rz4MIn23PqkApRJ/jUNNkGcq7LezJk6HopPlGg00PR4smZQNzJktkP6rX5Xs7K+Q
gGcQfyrvkLLzza5mE/cla8jwahOIhvTVdqNFYZsgBLeWB2yTTqYjKHPTOMVkQom7
H4fryVHGItfH6KWi4usfb7kzPd+Xt8CLWgoX9bUnH7ZX6Exs3LGqefU7EzL60qpC
7EE7i0LurgY61y3sRa1N4H0CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 302454972432773087910717237110081976830416
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-28 07:42:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-26 07:42:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'a2hudklinikk.no'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 900020801960985364003776193254227666047971453740080110049517046618630318553462584294922909448192991300216175959118566217720187771865669493597217163763153493041177222017452749851601305219479301971565728683727911421795215889922594220349383565592513231641695620858325058278973096345901587074530898561107952572003568139325135854285591931201941369865630916633068926645689511570694880716749563970307160788078866080507570080757332898966761620636784694296895464420944857946622030226732840202639415948693389270452109214352415801882186722554357193825085854232830744562029694851253297743440026469314047236807439908855033765116964597001982349167646495727792163880152427033859170143037241138374520776928147157601341422300201296764259822431325933020604135566485390222456455767027996518722267297234094767112786452313586026765368463733853067953639729138084259732180988433435350478002076646514454603692456481135621802437855314237110563353562446314145449332356611320426544974416391048230823115423968127178138320834008493864034584027183913851291904854285242241945481370065108518163803291970257280804900413375788365922338066774455535362528455690020099166204382776611630764642852072371947684931567798396102452451718566744976313411272576211479325056032893
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dc3181c4d839a8f957adc6cf10c3fec729abcf55
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a2hudklinikk.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.a2hudklinikk.no'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018b75728b7e0000040300473045022100f8888b2aa401f16c5d09503e148c65b3adb909645b1b36d65983329c41c2917702205a13bab52855232528dce1c8952c598d191b200a4d5783e903a2d2fb7449ca24007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b75728b8c0000040300473045022004a60edeca8ef293a066e25304c045f82911023311f3772120137beed5d34082022100e1072e60c9e07cf6d9026d80a091a7ee6f0059fc4ed97a005752f0342c33603d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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