tek.no

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:b8:50:42:0f:f3:9f:81:ef:3d:b6:e7:80:eb:ee:98:59:41 was issued on by Let's Encrypt.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tek.no

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b8:50:42:0f:f3:9f:81:ef:3d:b6:e7:80:eb:ee:98:59:41
Serial Number (int): 324055494563526826529106048839081040304449
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d6:10:40:b1:70:fa:88:7e:7d:94:46:22:65:92:d3:d8:35:ba:4d:e6
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 6c:94:b3:dc:a8:45:e2:9c:2b:0b:66:0b:f8:20:0f:ca:29:25:14:22
Fingerprint (sha256): 49:87:9c:b4:57:bf:77:7a:00:c0:af:2d:a5:36:c3:84:58:1f:64:07:b7:7d:b2:e7:fb:ed:b0:87:b4:a7:f7:49

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate tek.no

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tek.no

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

auth.tek.no
min.tek.no
neo.tek.no
search.tek.no
static.tek.no
tek.no
www.tek.no

Other certificates including the domain name tek.no

(limited to 100 certificates)
cmp.aftenbladet.no
*.tek.no
id.aboutme.schibsted.com
cmp.aftenbladet.no
cmp.aftenbladet.no
tek.no
cmp.aftenbladet.no
tek.no
cmp.aftenbladet.no
id.tek.no
*.new.tek.no
cmp.aftenbladet.no
tek.no
cmp.aftenbladet.no
tek.no
cdn.tek.no
cmp.aftenbladet.no
auth.tek.no
ish.tek.no
id.tek.no
cmp.aftenbladet.no
cmp.aftenbladet.no
tek.no
cmp.aftenbladet.no
id.aboutme.schibsted.com
id.aboutme.schibsted.com
cmp.aftenbladet.no
tek.no
tek.no
tek.no
*.new.tek.no
cmp.aftenbladet.no
cdn-yams.new.tek.no
tek.no
id.aboutme.schibsted.com
new.tek.no
tek.no
cmp.aftenbladet.no
cmp.aftenbladet.no
cdn-yams.tek.no
cmp.aftenbladet.no
cmp.aftenbladet.no
tek.no
mail.tek.no
4.session-service.identity-pre.schibsted.com
tek.no
cmp.aftenbladet.no
*.tek.no
cmp.aftenbladet.no
cmp.aftenbladet.no
*.new.tek.no
tek.no
id.aboutme.schibsted.com
cmp.aftenbladet.no
cmp.aftenbladet.no
cmp.aftenbladet.no
cmp.aftenbladet.no
prisguide.tek.no
cmp.aftenbladet.no
tek.no
cmp.aftenbladet.no
id.aboutme.schibsted.com
cmp.aftenbladet.no
tek.no
cmp.aftenbladet.no
cmp.aftenbladet.no
tek.no
cmp.aftenbladet.no
cmp.aftenbladet.no
id.aboutme.schibsted.com
new.tek.no
tek.no
tek.no
tek.no
cmp.aftenbladet.no
cmp.aftenbladet.no
id.aboutme.schibsted.com
tek.no
cmp.aftenbladet.no
cmp.aftenbladet.no
new.tek.no
tek.no
tek.no
id.aboutme.schibsted.com
id.aboutme.schibsted.com
ish.tek.no
cmp.aftenbladet.no
cmp.aftenbladet.no
ish.tek.no
tek.no
id.aboutme.schibsted.com
tek.no
cmp.aftenbladet.no
tek.no
cmp.aftenbladet.no
cmp.aftenbladet.no
tek.no
new.tek.no
ish.tek.no
tek.no

Certificate

The complete raw certificate details for tek.no in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 324055494563526826529106048839081040304449
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-10 09:05:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-10 09:05:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tek.no'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 706238003954572696359920249798682915036649913059575841992635600539909212485854635057651436631416379096005325867669103535448044985211471266236369492590752985699899609416929979781497869163406800453030426409022279653131490578912899026239219641880991214955902654727980700846074971991703325827659318645821006442451599065654710516184870611192051996602271605217809848260215670494891284943384170637985801620640420730154348101123615692453104909388157981313054715881980572686864510562145201037329925461042391055244503435105130330880882317683487585893328548830334318898935064904328113241424319230367092604847844124577093046712965914899344915758948932560222109770275562951435204151526214387206793051751774341634737190668168884276557317372561197198617171267190268015837795694969389138922069837064664886385119810894361292062327155803956975551676914338844953953979466171935169272263169572077454684161863034364885141429562004076320141718860939396783930002696953029647885190811400676618831283121768362713673059613680073753653351048443371498463425157049417168578702422566704631818495953089982633273445317790976720816157900701917078834276015310560223742266606387520090063336665097630643540221116023035994377301436924166587592004134640080890245742051061
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d61040b170fa887e7d9446226592d3d835ba4de6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (89 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.tek.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'min.tek.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neo.tek.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'search.tek.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.tek.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tek.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tek.no'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016797943bf90000040300463044022016861aa0062f47fe06a565dd83bb352ff78d206d2a66c986821985dfbe27f727022066aafa3790799513886c5e7309b655c39f54ffbb1ae2403dc32efaa6fec5e97f00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016797943df90000040300473045022033ba004a818fb8e18b587ad7fde127e6bc073ff0e88b9a37a71fb2448d27cacb022100c07ff22d3c9f6e1885b9e6c642df22d778128156a5b5fd17315893d9f04a61d5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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