sikt.no

- Uninett AS -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number 45:c2:ad:94:38:44:f5:6e:2c:7d:8e:a5:7c:f3:97:fc was issued on by GEANT Vereniging.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Uninett AS

Organization: Uninett AS
State / Province: Trøndelag
Country: NO

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 45:c2:ad:94:38:44:f5:6e:2c:7d:8e:a5:7c:f3:97:fc
Serial Number (int): 92727557899758962158268055320960145404
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: d7:54:12:86:6f:4b:95:e6:23:e0:18:2a:91:68:8d:3e:a4:77:a3:0e
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): 72:7d:8a:c4:f2:4e:a7:e3:0d:e2:80:93:43:d0:cb:67:d1:fc:a3:6a
Fingerprint (sha256): 48:a4:4f:d7:13:8e:2c:a9:ef:42:e5:8d:48:9b:ba:fe:16:a3:d6:e9:df:e6:83:6b:06:08:7d:a0:08:3e:b8:e3

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate sikt.no

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sikt.no

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sikt.no
www.sikt.no

Other certificates including the domain name sikt.no

(limited to 100 certificates)
surveybanken.nsd.no
sikt.no
sikt.no
sikt.no
feidehotell1.sikt.no
polsys.sikt.no
sikt.no
matomo.sikt.no
sikt.no
skolevalg.sikt.no
*.nva.sikt.no
ess.nsd.no
rdakatalogisering.sikt.no
www.sikt.no
sikt.no
gitlab.sikt.no
sikt.no
sikt.no
matomo.sikt.no
skolevalg.sikt.no
filesender.sikt.no
sikt.no
gitlab.sikt.no
sikt.no
sikt.no
skolevalg.nsd.no
sikt.no
old.sikt.no

Certificate

The complete raw certificate details for sikt.no in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAwh4CCq+DRlFxEJzyh8xw
UW36O1mHpCn7COPQf21FJlmybvNFGHTIomYw2vlQStl+Gz9PRtqdtDT1ZlijO5w9
uD4LhWx05keqUQMayd2rDiXuXGOevP9+kK9ATzDSF2Ca+gFTH+OHlfcq3uKHKr7b
6NRo7j5Rg8ll64a8YTrgFhzMkDm9I8idjSylpkmm2cakHAp3KbTKRsB6049S72zn
mKEdO1eDOAsRilMyDyXneYM/3Kv4FhAgQx7uRJ9zTjsdyv9HHF9my8dqEOcG143t
Y3VnD2tEmIR2YzxVdd+nd+GTldC3Frihwaua9OI1P5cHfJnBm217YeZ4NlD9ZVfP
jjoKWzwHeUBa5JN5dPVSZYOObnoeczuBqp/Z8y+vFJk2/peg1S3BwZMqWHYZVv4/
DbC105q5NUJZijmOcXyjC1RYhAHYRGoF4wuNw/tDaBa13wD1k7+pd0FgCCA4ga5m
m+Qmwe3u4635J5l0ogmNVNoKahNR8S4N7MxxQCoNUA9oWdnVPGjbcXZr3iwew86D
eTECrhNdm1xuUUlpTx6S412LVzk3QmNujQhrRBUgZ0ouxClkPj+fXhgJTFPUh+j/
OGNlsBBs3G43D2UvYcbA5cTvDM8uquGIQ+S67pC4jU1XC+hM6qxM/W86CcYB7eZm
/wGFBd+un900FIOiamJKuBMCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 92727557899758962158268055320960145404
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-11-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-23 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Trøndelag'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Uninett AS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sikt.no'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 791929159584353325938285008614205776439953676981399118923641457159789225089977192635281792704714214005814502360847205243952761787419886003243204607524177281753143127715973324665133095184723514977716871596683885632872883296267596969896171004105657007891224824627053355962115882146902194604425914548784408890341874300177833038310232550688053836826852084679407598370258063953645660187899417406882800493605432443168895059834209424844867168353692764608997574827594450560759430357521316272574136479478402657073598180045928856627583644923843060258892491892806020940311212148220095802628273569161211067085106659107358993135919952437253294845316369919047318599856022468720785402234918835289809114238451532582265866434754855652003977056263380667434561189551174261298728871633714353711395586267774751386065692086159478174148350617586474298867223972586868684465853994412742583418761791939123025122226973056040972335865242439246194605484677862490255958142625753403472395358434451596963921353285748442465185023591497285271417779218472543970259950992844219201298162488000062613897804998102189503292064767449072628868423144108683096454978226635814906236064374568106962643052020531347397273477719913055703463675234273972201565579360251101814048077843
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d75412866f4b95e623e0182a91688d3ea477a30e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sikt.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sikt.no'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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