www.fjellsprenger.no

Issued by R3

About this certificate

This digital certificate with serial number 04:5c:f4:1f:ab:24:d7:93:44:95:87:2f:24:96:4b:82:ce:07 was issued on by Let's Encrypt.

With 34 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.fjellsprenger.no

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:5c:f4:1f:ab:24:d7:93:44:95:87:2f:24:96:4b:82:ce:07
Serial Number (int): 380079617547152432665806533197425549692423
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: ae:d0:08:e5:04:ef:0d:f6:dc:e7:3c:98:42:cf:47:e5:95:f9:df:cd
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): c6:a4:1a:d7:f3:25:9f:a8:7b:a1:b6:db:73:c4:36:59:40:4b:8d:6b
Fingerprint (sha256): 3b:78:45:61:d8:5c:1d:cd:18:2f:b9:df:75:60:a6:36:b6:26:a6:0b:a6:9b:91:e2:65:a8:e4:a2:c1:2f:b2:9b

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.fjellsprenger.no

34

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.fjellsprenger.no

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

advokater.co
brandbay.brandvillage.se
dekleijne-janssen.nl
design.tristargroup.org
edesign.no
encap.no
frogleapstudios.com
jobs.tristargroup.nl
linsoteket.no
productiehuisbeat.nl
saldo.mestergull.no
shop.tristargroup.nl
shop.tristargroup.org
signicat.be
staging-nbd-se.brandvillage.se
support.tristargroup.nl
tristargroep.nl
tristargroup.dev
tristargroup.fr
tristargroup.org
wearepalmreader.com
www.advokater.co
www.elivi.no
www.encap.no
www.fjellsprenger.no
www.frogleapstudios.com
www.linkit.eu
www.nijkleaster.frl
www.productiehuisbeat.nl
www.signicat.be
www.sydowogmo.no
www.tristargroup.nl
www.tristargroup.org
www.visinor.no

Other certificates including the domain name fjellsprenger.no

(limited to 100 certificates)
productiehuisbeat.nl
staging-nbd-se.brandvillage.se
*.fjellsprenger.no
*.fjellsprenger.no
www.fjellsprenger.no
www.fjellsprenger.no
www.visinor.no
fjellsprenger.no
*.fjellsprenger.no
*.fjellsprenger.no
*.fjellsprenger.no
fjellsprenger.no
www.linkit.eu
*.fjellsprenger.no
*.fjellsprenger.no
*.fjellsprenger.no
*.fjellsprenger.no
www.santarosalia-resort.no
fjellsprenger.no

Certificate

The complete raw certificate details for www.fjellsprenger.no in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEWFM2BdyHrhkYB2kGVSfK5gM70VUU
Yldgu8B/T08wP4ptZL7zxXo0sQWLz16Kbt0V3s0EfaLGuwzsnrl2VPW25w==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 380079617547152432665806533197425549692423
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-09 20:46:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-07 20:46:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.fjellsprenger.no'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				000458533605dc87ae19180769065527cae6033bd15514625760bbc07f4f4f303f8a6d64bef3c57a34b1058bcf5e8a6edd15decd047da2c6bb0cec9eb97654f5b6e7
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							aed008e504ef0df6dce73c9842cf47e595f9dfcd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (669 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advokater.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brandbay.brandvillage.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dekleijne-janssen.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'design.tristargroup.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edesign.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'encap.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frogleapstudios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.tristargroup.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'linsoteket.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'productiehuisbeat.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saldo.mestergull.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.tristargroup.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.tristargroup.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signicat.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-nbd-se.brandvillage.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.tristargroup.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tristargroep.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tristargroup.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tristargroup.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tristargroup.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wearepalmreader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.advokater.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elivi.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.encap.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fjellsprenger.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.frogleapstudios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.linkit.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nijkleaster.frl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.productiehuisbeat.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.signicat.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sydowogmo.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tristargroup.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tristargroup.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visinor.no'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f200770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e252eef9600000403004830460221009bc0105f8035fa1c01fc940a04fa2222f8ce905eea84fd27a615ea65fbc25cb60221008cf710bf1e7c77a76eb3a4bb0684d3e5bbb693f4459436cfdad9f581b1767fd5007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018e252eef980000040300483046022100d3c4759f9c24290eb8b2c17659dceadb29d9e53c8c8ce3ca734ba80103603d12022100c39c5d6b080a372c4287308ae6f224a047e6a2e90bc4aad6284e81d02bfffe58
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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