klikk.abonnement.aftenposten.no

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 05:47:d5:ed:82:39:80:e3:96:e9:31:f3:66:65:ae:7d was issued on by Amazon.

With 21 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=klikk.abonnement.aftenposten.no

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:47:d5:ed:82:39:80:e3:96:e9:31:f3:66:65:ae:7d
Serial Number (int): 7019132026503214522280893515779387005
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 0d:92:d2:1d:ed:94:fe:50:a4:86:2b:07:20:8a:c0:03:cb:0a:90:df
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): 8f:7e:39:fd:b8:55:71:9a:37:89:b4:d9:3b:a6:89:71:11:44:a5:b1
Fingerprint (sha256): 3e:4c:c7:9c:d1:a9:4d:b7:b7:e3:2e:de:3f:19:10:e0:50:91:50:3e:d1:e4:fc:67:77:9b:4b:a0:64:41:47:d0

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate klikk.abonnement.aftenposten.no

21

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for klikk.abonnement.aftenposten.no

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

klikk.abonnement.aftenposten.no
klikk.informasjon.av-avis.no
klikk.informasjon.aftenposten.no
klikk.informasjon.oyposten.no
klikk.abonnement.bt.no
klikk.informasjon.bygdanytt.no
klikk.abonnement.av-avis.no
klikk.abonnement.aftenbladet.no
klikk.abonnement.bygdanytt.no
klikk.informasjon.strilen.no
klikk.informasjon.randaberg24.no
klikk.abonnement.vestnytt.no
klikk.abonnement.oyposten.no
klikk.informasjon.bt.no
klikk.bedrifter.schibsted.no
klikk.nyhetsbrev.aftenposten.no
klikk.informasjon.vestnytt.no
klikk.abonnement.randaberg24.no
klikk.abonnement.strilen.no
klikk.informasjon.aftenbladet.no
klikk.studenter.schibsted.no

Other certificates including the domain name aftenposten.no

(limited to 100 certificates)
bedrift.schibsted.no
cis.schibsted.com
ap.no
aftenposten.no
cmp.aftenbladet.no
www.av-avis.no
*.i.bt.no
poweredby.aftenposten.no
rabattkoder.aftenposten.no
poweredby.aftenposten.no
id.aboutme.schibsted.com
kundeweb-ssl.snd.no
eavis.aftenposten.no
id.adressa.no
kundeweb.aftenposten.no
www.av-avis.no
id.morgenlevering.no
ap.no
www.event.aftenposten.no
eavis.aftenposten.no
cmp.aftenbladet.no
poweredby.aftenposten.no
cmp.aftenbladet.no
aftenposten.no
eavis.aftenposten.no
kundeweb-ssl.snd.no
vink.aftenposten.no
adb.aftenposten.no
bedrift.schibsted.no
bedrift.schibsted.no
cmp.aftenbladet.no
magasiner.snd.no
kundeportal.aftenposten.no
www.osloby.no
ap.no
rabattkoder.aftenposten.no
aftenposten.no
bedrift.schibsted.no
bedrift.schibsted.no
sip.schibsted.no
ap.no
magasiner.snd.no
www.event.aftenposten.no
cmp.aftenbladet.no
kundeweb-ssl.snd.no
id.tek.no
www.osloby.no
klikk.abonnement.aftenposten.no
poweredby.aftenposten.no
deflector.k8s.e8.no
api.snd.no
e-avis.aftenposten.no
eavis.aftenposten.no
kundeweb-ssl.snd.no
cmp.aftenbladet.no
helios.aftenposten.no
bedrift.schibsted.no
sch-lyfe-03.schibsted.no
bedrift.schibsted.no
id-pre.magasinpluss.no
www.av-avis.no
id.dolen.no
id.magasinpluss.no
test-bestilling.aftenposten.no
www.aftenposten.no
event.aftenposten.no
cmp.aftenbladet.no
kundeservice.aftenposten.no
kundeweb.aftenposten.no
ap.no
bedrift.schibsted.no
www.av-avis.no
poweredby.aftenposten.no
sch-lyfe-04.schibsted.no
cmp.aftenbladet.no
ap.no
test-cm.aftenposten.no
ap.no
event.aftenposten.no
cmp.aftenbladet.no
bedrift.schibsted.no
ap.no
aftenposten.no
cis.schibsted.com
cmp.aftenbladet.no
bedrift.schibsted.no
*.i.bt.no
bestilling.aftenposten.no
cmp.aftenbladet.no
id.aboutme.schibsted.com
aftenposten.no
api.snd.no
id.aboutme.schibsted.com
eavis.aftenposten.no
*.ap.oasfile.aftenposten.no
magasiner.snd.no
cmp.aftenbladet.no
annprod.aftenposten.no
kundeweb.aftenposten.no
klikk.abonnement.aftenposten.no

Certificate

The complete raw certificate details for klikk.abonnement.aftenposten.no in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopOfruNxO7jVNdiwgik3
zElUtvgnjVC668uZ/0bLhGN6fnTa2IQ0ky9Ljws81RSiQI6MPq5OMjs2D6UGEATj
Bjtc6K+V4ST/dThA2ZCWWCQ6fNqSmAF29QXbvjNZpmDjwPQAvSXLi0UbsuHnmkcs
OMcoUubos8C1jU8UP8zXwSmk/KR0KTtx4+sKDd+kCoDsgZGcjfIbXo1LoX2cJyDd
3GRn85lRivCdBTctVa42ubdBt1d+3GdRXuBpcna7MWF0O1cVXIjPv5a2ohgKAHuz
oulLjtOqGzF2ktqvGSkX1YGbEnwu7T5a28tGkf8eGNJW7PVA+hYqK2VfaIDWRUWc
cQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7019132026503214522280893515779387005
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-30 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'klikk.abonnement.aftenposten.no'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20523401394853052468369727299126921402302345062539407636155229564359593508961011614079300742133809468562301673336920338191133609748840779254837493359296481120078202950481948620299384488831626950645476248166810327088979715400663986008575919317606976285003209389487116445010186504932918183526237906989612933486937679725797873636783013232134857563406816580079748161713546326728363297245580135646777533532745029588003453340572408154927302139901182946074612966945099698796282220968179085146541731957001870048554020473327135208292445125896447683535701020238846194711880564763799326754288517908016232212168095088920880323697
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0d92d21ded94fe50a4862b07208ac003cb0a90df
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (650 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klikk.abonnement.aftenposten.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klikk.informasjon.av-avis.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klikk.informasjon.aftenposten.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klikk.informasjon.oyposten.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klikk.abonnement.bt.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klikk.informasjon.bygdanytt.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klikk.abonnement.av-avis.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klikk.abonnement.aftenbladet.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klikk.abonnement.bygdanytt.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klikk.informasjon.strilen.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klikk.informasjon.randaberg24.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klikk.abonnement.vestnytt.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klikk.abonnement.oyposten.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klikk.informasjon.bt.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klikk.bedrifter.schibsted.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klikk.nyhetsbrev.aftenposten.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klikk.informasjon.vestnytt.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klikk.abonnement.randaberg24.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klikk.abonnement.strilen.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klikk.informasjon.aftenbladet.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klikk.studenter.schibsted.no'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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