www.visinor.no

Issued by R3

About this certificate

This digital certificate with serial number 03:77:2c:df:35:3f:e9:e9:a4:3d:e1:c9:7e:66:15:e9:c7:14 was issued on by Let's Encrypt.

With 40 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.visinor.no

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:77:2c:df:35:3f:e9:e9:a4:3d:e1:c9:7e:66:15:e9:c7:14
Serial Number (int): 301890104452917882351533360203744192087828
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 46:75:dc:fe:4c:ce:e2:e0:31:e6:8a:e4:99:c0:6d:1e:5c:80:e7:0e
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 06:1a:26:48:ae:69:4d:e1:8b:46:e3:e2:48:6a:65:d7:c3:ef:9d:cc
Fingerprint (sha256): 40:d3:fe:9c:b1:f0:9a:42:0e:25:39:34:c8:f3:da:20:0f:85:5e:ec:7e:aa:60:ef:76:b1:a8:c8:e0:b2:c4:b5

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.visinor.no

40

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.visinor.no

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

advokater.co
brandbay.brandvillage.se
dekleijne-janssen.nl
design.tristargroup.org
edesign.no
encap.no
frogleapstudios.com
jobs.tristargroup.nl
layback.no
linsoteket.no
mobilmarked.no
productiehuisbeat.nl
saldo.mestergull.no
shop.tristargroup.nl
shop.tristargroup.org
signicat.be
staging-nbd-se.brandvillage.se
staging-www.noisolation.com
support.tristargroup.nl
tristargroep.nl
tristargroup.dev
tristargroup.fr
tristargroup.org
wearepalmreader.com
www.advokater.co
www.elivi.no
www.encap.no
www.fjellsprenger.no
www.frogleapstudios.com
www.lekegiganten.no
www.linkit.eu
www.nijkleaster.frl
www.pinkavenue.com
www.productiehuisbeat.nl
www.rkc.no
www.signicat.be
www.sydowogmo.no
www.tristargroup.nl
www.tristargroup.org
www.visinor.no

Other certificates including the domain name visinor.no

(limited to 100 certificates)
meshbox.no
productiehuisbeat.nl
staging-nbd-se.brandvillage.se
visinor.no
visinor.no
www.fjellsprenger.no
www.visinor.no
visinor.no
visinor.no
visinor.no
visinor.no
www.linkit.eu
visinor.no
www.santarosalia-resort.no
visinor.no

Certificate

The complete raw certificate details for www.visinor.no in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEmecZSjU3oaDMOzeNZ3OHfGaswJ1x
wBwNpUnml8soflhujhjBMBi30/k3XGQDRTEpLOWCnbZXMJlp6yAhks1zTA==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 301890104452917882351533360203744192087828
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-10 22:42:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-09 22:42:50 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.visinor.no'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				000499e7194a3537a1a0cc3b378d6773877c66acc09d71c01c0da549e697cb287e586e8e18c13018b7d3f9375c64034531292ce5829db657309969eb202192cd734c
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4675dcfe4ccee2e031e68ae499c06d1e5c80e70e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (779 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advokater.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brandbay.brandvillage.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dekleijne-janssen.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'design.tristargroup.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edesign.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'encap.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frogleapstudios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.tristargroup.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'layback.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'linsoteket.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobilmarked.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'productiehuisbeat.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saldo.mestergull.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.tristargroup.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.tristargroup.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signicat.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-nbd-se.brandvillage.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-www.noisolation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.tristargroup.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tristargroep.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tristargroup.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tristargroup.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tristargroup.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wearepalmreader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.advokater.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elivi.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.encap.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fjellsprenger.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.frogleapstudios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lekegiganten.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.linkit.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nijkleaster.frl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pinkavenue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.productiehuisbeat.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rkc.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.signicat.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sydowogmo.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tristargroup.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tristargroup.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visinor.no'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018cf5c1d9aa0000040300463044022048a7c7993892c847ac5f18d73ebff202e79ac0400109d5e9ccb61d09c195afd1022046680d6a44248a5accdd1e3480e6dc298dfbe7fdbd32670584da2b064e6f4e3e007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018cf5c1d9ae0000040300483046022100a86e30f7c6d318bfe54a70ea91e708dfbbd5cb09a6a8aa4f7b14de1cd87c6c80022100f8f3a52ed3433d6fc3685094175649e3fff283be3c1acb82f8596906fe52b973
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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