*.klikk.no

- Egmont Hjemmet Mortensen AS -

Issued by GeoTrust SSL CA - G2

About this certificate

This digital certificate with serial number 38:d0:2f:17:88:e3:4e:a3:b6:3b:10:02:3c:16:5c:ad was issued on by GeoTrust Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Egmont Hjemmet Mortensen AS

Organization: Egmont Hjemmet Mortensen AS
State / Province: Oslo
Locality: Oslo
Country: NO

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 38:d0:2f:17:88:e3:4e:a3:b6:3b:10:02:3c:16:5c:ad
Serial Number (int): 75517720648394401347228733541023374509
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 11:4a:d0:73:39:d5:5b:69:08:5c:ba:3d:bf:64:9a:a8:8b:1c:55:bc

Fingerprint (sha1): f8:ee:30:be:d7:56:e3:8b:f5:18:9a:2e:58:1e:ab:f7:23:52:58:48
Fingerprint (sha256): 51:0c:c0:24:6e:55:be:f0:69:68:b1:30:eb:0f:a7:94:b8:3b:a9:5d:a1:74:81:20:5d:83:1a:5a:44:14:b9:c1

Issuing Certificate URL: http://gtssl2-aia.geotrust.com/gtssl2.cer

Revocation information

OCSP Server: http://gtssl2-ocsp.geotrust.com
CRL Distribution Point: http://gtssl2-crl.geotrust.com/gtssl2.crl

Check the revocation status for certificate *.klikk.no

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.klikk.no

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.klikk.no
klikk.no

Other certificates including the domain name klikk.no

(limited to 100 certificates)
sni173375.cloudflaressl.com
sni173375.cloudflaressl.com
sni173375.cloudflaressl.com
sni173375.cloudflaressl.com
sni173375.cloudflaressl.com
sni173375.cloudflaressl.com
sni173375.cloudflaressl.com
sni173375.cloudflaressl.com
sni173375.cloudflaressl.com
sni173375.cloudflaressl.com
sni173375.cloudflaressl.com
sni173375.cloudflaressl.com
sni173375.cloudflaressl.com
sni173375.cloudflaressl.com
sni173375.cloudflaressl.com
sni173375.cloudflaressl.com
sni.cloudflaressl.com
sni173375.cloudflaressl.com
sni173375.cloudflaressl.com
sni173375.cloudflaressl.com
sni173375.cloudflaressl.com
sni173375.cloudflaressl.com
labrador.klikk.no
sni173375.cloudflaressl.com
sni.cloudflaressl.com
sni173375.cloudflaressl.com
sni173375.cloudflaressl.com
sni173375.cloudflaressl.com
sni173375.cloudflaressl.com
sni173375.cloudflaressl.com
sni173375.cloudflaressl.com
app.inspectortoolbelt.com
sni173375.cloudflaressl.com
sni173375.cloudflaressl.com
sni173375.cloudflaressl.com
sni173375.cloudflaressl.com
sni173375.cloudflaressl.com
sni.cloudflaressl.com
sni173375.cloudflaressl.com
sni173375.cloudflaressl.com
sni173375.cloudflaressl.com
sni173375.cloudflaressl.com
sni173375.cloudflaressl.com
sni173375.cloudflaressl.com
sni173375.cloudflaressl.com
junto.klikk.no
forum.klikk.no
sni173375.cloudflaressl.com
sni173375.cloudflaressl.com
sni173375.cloudflaressl.com
sni173375.cloudflaressl.com
klikk.no
sni173375.cloudflaressl.com
sni173375.cloudflaressl.com
junto.klikk.no
sni173375.cloudflaressl.com
sni173375.cloudflaressl.com
sni173375.cloudflaressl.com
sni173375.cloudflaressl.com
sni173375.cloudflaressl.com
sni173375.cloudflaressl.com
sni173375.cloudflaressl.com
sni173375.cloudflaressl.com
sni173375.cloudflaressl.com
sni173375.cloudflaressl.com
sni173375.cloudflaressl.com
sni173375.cloudflaressl.com
sni173375.cloudflaressl.com
sni173375.cloudflaressl.com
*.klikk.no
sni173375.cloudflaressl.com
sni173375.cloudflaressl.com
sni173375.cloudflaressl.com
sni173375.cloudflaressl.com
admp-tc.m.klikk.no
sni173375.cloudflaressl.com
sni173375.cloudflaressl.com
sni173375.cloudflaressl.com
sni173375.cloudflaressl.com
sni173375.cloudflaressl.com
sni173375.cloudflaressl.com
sni173375.cloudflaressl.com
sni173375.cloudflaressl.com
sni173375.cloudflaressl.com
sni.cloudflaressl.com
sni173375.cloudflaressl.com
sni173375.cloudflaressl.com
klikk.no
sni173375.cloudflaressl.com
sni173375.cloudflaressl.com
sni173375.cloudflaressl.com
www.chaishop.io
sni173375.cloudflaressl.com
sni173375.cloudflaressl.com
sni173375.cloudflaressl.com
sni173375.cloudflaressl.com
klikk.no
sni173375.cloudflaressl.com
sni173375.cloudflaressl.com
sni173375.cloudflaressl.com

Certificate

The complete raw certificate details for *.klikk.no in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwoL9gOuOvg5B25lsBojk
MHFP/DJiXu4gYwF9KNetJRgk+T0xTJ3a7na6mfosryIWetvqC+2CXw9DaDJTJsgl
TRI/2dA2p8HM9QaEwP+/rslTzpAuW4nYTn2+Y7ABvGaL8NZ0z7kxe4pjGNKTQQJv
fWDAE+9VFFSjJE5AJ7RIzY9mBQO5fmXBxi9B3n6+MvPEsMiQWUg+h5e0KcV4pmm6
gw4rDUHHWsz+JY4y5bwklMMAZS25i1BfHZCEhM3spBg8tWKxzAkil9EDRmt34rV3
dhWR5X1tLUlHSC4+EPB8jw8f1gd76gkJ08XKpcKggeX1WUKB0p89GinUD+hLckT8
EQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 75517720648394401347228733541023374509
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-02-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-02-07 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Oslo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Oslo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Egmont Hjemmet Mortensen AS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String '*.klikk.no'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24554824862349098275545319318761315958250830384759244434840294888363653812644479916064996983794143337922778100389200182074288214689685136756064658315378914471470512116530261121447726550666254029087541884355949465692873098203927480516477129719252682142867997183911447615298628898642947962626840562712334303663643516859529640069263364749758806377220149999361021514304209551419124208529524244052929812865378216200094269777207599582477614532768145555161249249416754071404033808039602780307836373886994629850222054222787081254019180196298698116314555239966745764385892859248528887102632445928876763997890987848975299968017
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.klikk.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klikk.no'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl2-crl.geotrust.com/gtssl2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.geotrust.com/resources/cps'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 114ad07339d55b69085cba3dbf649aa88b1c55bc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (102 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl2-ocsp.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl2-aia.geotrust.com/gtssl2.cer'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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