nettkompetanse.no

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:6a:bd:70:73:61:6c:52:c3:fa:34:c0:02:78:05:d4:aa:08 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=nettkompetanse.no

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:6a:bd:70:73:61:6c:52:c3:fa:34:c0:02:78:05:d4:aa:08
Serial Number (int): 297658596657547482689943226231677760350728
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 25:94:b1:7d:aa:f9:06:89:b8:cb:8b:e6:d4:ac:b7:0e:90:89:6d:93
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c9:40:28:29:5f:c4:f7:96:46:db:7a:73:79:43:bf:8c:62:71:51:0b
Fingerprint (sha256): 3c:4e:57:51:65:8b:63:70:4c:91:39:3b:b1:4f:5b:11:75:b2:3f:20:e7:4a:e7:cc:95:94:2c:3a:e9:dd:d8:97

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate nettkompetanse.no

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nettkompetanse.no

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

nettkompetanse.no
www.nettkompetanse.no

Other certificates including the domain name nettkompetanse.no

(limited to 100 certificates)
nettkompetanse.no
nettkompetanse.no
nettkompetanse.no
nettkompetanse.no
nettkompetanse.no
nettkompetanse.no
nettkompetanse.no
nettkompetanse.no
nettkompetanse.no
nettkompetanse.no
nettkompetanse.no
nettkompetanse.no
nettkompetanse.no
nettkompetanse.no
nettkompetanse.no
nettkompetanse.no
nettkompetanse.no
nettkompetanse.no
nettkompetanse.no

Certificate

The complete raw certificate details for nettkompetanse.no in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 297658596657547482689943226231677760350728
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-23 23:14:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-22 23:14:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nettkompetanse.no'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 844140642304237911972956783922299273870960019844121726397658759974129865540321736649263098102947195898490931454389406621242673004431151310481839363708419180894525087159480577342742881020786761309123898921271461754949331674874821823898114808740910307229593867764777337475500488831097379034197675024996754245666689212358676710410327616823160789515169957968337988182015885093898242350589715093031059711219150794285478176552345642161177058959854445084205564555769762013914714481377153955262145415285304857664508950353068685077366997747131698224001884518958366469640534341913450260258415380781972521961577552123019604509568354485655962688564248960690200831329768470923962181917692466212086439486702140488173046347724316931903372352613584816032530772228766649212901329921098736062104805345249691294487343588520024493380086392912413741561201934763398995128803794736501777125634904689777009585247006894198860059584944905459603195233560040229311606324142813165137561183087810943324226600970822859456926359851560267562244572082005150503879115472661035338546770386134868564405122752932870114317378092575664102591892915743929269176558886419764183140902067198023314807615157743042331581025702799533557408731838082342903707956907282447998520981451
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2594b17daaf90689b8cb8be6d4acb70e90896d93
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nettkompetanse.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nettkompetanse.no'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf6400000162f500374c000004030046304402201637994fba72fa5989b2acf09d5621d9b754473ba741c73747f3a744ef00252e02203bee93b26b18ea90ff75ce1d7d34aa5c7800dc162b889eb12c98271cb56f9dbb007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000162f500375d0000040300473045022100fbe3ac4feefd4ab0cba4645ec812b76f6c7097b5b2e2537d36a6a407b75a481d02204cd41b20541d9ba05b92eaccb4537b7c9f54877dc5d7c3235d0f96804b1d2ff8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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