novonordiskfonden.dk

Issued by Thawte RSA CA 2018

About this certificate

This digital certificate with serial number 0a:f5:fb:b2:f1:ac:57:6b:7e:26:38:d2:7e:87:0d:9b was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=novonordiskfonden.dk

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:f5:fb:b2:f1:ac:57:6b:7e:26:38:d2:7e:87:0d:9b
Serial Number (int): 14569497750407871043050063315746622875
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: fe:41:d4:93:71:26:28:f2:bc:1b:b5:41:d7:1b:75:3a:0f:70:ea:24
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a

Fingerprint (sha1): c4:ec:d9:59:bd:66:60:06:cd:c1:09:b3:b6:79:a9:7c:b3:4b:18:1d
Fingerprint (sha256): 45:9d:63:b8:14:a1:3e:56:b8:4f:03:3a:26:1b:3d:98:32:81:22:3e:3a:0f:cb:f7:b3:39:18:03:48:7b:b5:cb

Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl

Check the revocation status for certificate novonordiskfonden.dk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for novonordiskfonden.dk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

novonordiskfonden.dk
www.novonordiskfonden.dk

Other certificates including the domain name novonordiskfonden.dk

(limited to 100 certificates)
novonordiskfonden.dk
novonordiskfonden.dk
novonordiskfonden.dk
*.novonordiskfonden.dk
ansogning.novonordiskfonden.dk
novonordiskfonden.dk
novonordiskfonden.dk
novonordiskfonden.dk
novonordiskfonden.dk
novonordiskfonden.dk
*.novonordiskfonden.dk
norma.novonordiskfonden.dk
budgets.novonordiskfonden.dk
ansogning.novonordiskfonden.dk
fond.novonordiskfonden.dk
novonordiskfonden.dk
application.novonordiskfonden.dk
impact.novonordiskfonden.dk
novonordiskfonden.dk
steno.novonordiskfonden.dk
steno.novonordiskfonden.dk
*.novonordiskfonden.dk
impact.novonordiskfonden.dk
novonordiskfonden.dk
norma.novonordiskfonden.dk
nnf-gpt.novonordiskfonden.dk
*.novonordiskfonden.dk
cbc.novonordiskfonden.dk
novonordiskfonden.dk
application.novonordiskfonden.dk
application.novonordiskfonden.dk
impact.novonordiskfonden.dk
norma.novonordiskfonden.dk
survey.novonordiskfonden.dk
application.novonordiskfonden.dk
nnf-gpt-test.novonordiskfonden.dk
impact.novonordiskfonden.dk
novonordiskfonden.dk

Certificate

The complete raw certificate details for novonordiskfonden.dk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5hLP7l5g33FNfne83Fl0
CJ5+xaNh6CbALNnt5/UEt6Alr5FiNuMvGakgicjEMC0ihviTcQyunEORDFvaSx+u
VyQRuvkMA3mxuhQ4PcFgSHT1cHCfvcP0PQScqMxFj1mwPhxyFcpv9PPzihFST59C
c2Cm2kmw/5kRFmd61Kx5snXGtqIQhnBkDhPc/9oHhWMQbrsQrnQxwG7y5QsXIV1N
Wd6fno03NIhVHOeyklSC6H5It8rFRASN9omjfv79dTDCXcwJj8VRflRUYk0smbHx
8FoFEF+OgY0W72HvuNnHZasgZ+gq4nzHezGPHbOUWHRBfnPQs8DLzgTrpOtjAYiF
uwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14569497750407871043050063315746622875
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-11 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'novonordiskfonden.dk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29044086799029138851977499084698284462078783750297005947506514354098418710041544802157319325590669187527417236605242148931060311578402088731278924428968448419446296051093094364962392579884103260698892242782935795844560983037669687832817218133367415718610004040590286883320891915492795647641881066662603600858048125084136870282543400695619240797099152312251151581248378793851978765072667830990470985915007610944358349572332706706433484470776424019392911883041802271964266591847049822337015929745559058640796311055094744314635390980917865683130070945748038071172649167684802781257527982913206932962481958012091248444859
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fe41d493712628f2bc1bb541d71b753a0f70ea24
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'novonordiskfonden.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.novonordiskfonden.dk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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