rainpower.no
Issued by R3
About this certificate
This digital certificate with serial number 03:f2:53:d6:7a:ab:83:9a:e5:db:99:2f:d9:fe:ec:1d:f1:c6 was issued on by Let's Encrypt.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=rainpower.no
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 03:f2:53:d6:7a:ab:83:9a:e5:db:99:2f:d9:fe:ec:1d:f1:c6Serial Number (int): 343796630153368439800350485135451899163078
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: bf:f7:36:d4:de:87:cc:ee:7a:80:55:69:a1:14:5b:fe:c6:46:fd:ff
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 7a:8d:22:ac:0a:ac:93:07:ac:66:87:2f:05:08:cb:35:54:a5:d5:1d
Fingerprint (sha256): 5e:5c:a1:1b:88:8e:21:4f:c2:fb:be:06:c7:08:41:4a:f9:7d:0b:e5:9c:cf:6b:71:5a:16:1b:f6:21:ac:14:ff
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate rainpower.no
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for rainpower.no
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
rainpower.no
Other certificates including the domain name rainpower.no
(limited to 100 certificates)
mail.nli.no
lsrp.nli.no
rainpower.no
sip.nli.no
rainpower.no
rainpower.no
rainpower.no
vpn.rainpower.no
rainpower.no
mail.nli.no
sip.nli.no
mail.nli.no
rainpower.no
mail.nli.no
rainpower.no
mail.nli.no
rainpower.no
kronos.rainpower.no
mail.nli.no
rainpower.no
lsrp.nli.no
mail.rainpower.no
lsrp.nli.no
rainpower.no
rainpower.no
kronos.rainpower.no
rainpower.no
rainpower.no
lsrp.nli.no
rainpower.no
sip.nli.no
rainpower.no
rainpower.no
rainpower.no
vpn.rainpower.no
rainpower.no
mail.nli.no
sip.nli.no
mail.nli.no
rainpower.no
mail.nli.no
rainpower.no
mail.nli.no
rainpower.no
kronos.rainpower.no
mail.nli.no
rainpower.no
lsrp.nli.no
mail.rainpower.no
lsrp.nli.no
rainpower.no
rainpower.no
kronos.rainpower.no
rainpower.no
rainpower.no
Certificate
The complete raw certificate details for rainpower.no in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIE5jCCA86gAwIBAgISA/JT1nqrg5rl25kv2f7sHfHGMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDAyMTgxMDIwMTJaFw0yNDA1MTgxMDIwMTFaMBcxFTATBgNVBAMT DHJhaW5wb3dlci5ubzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALSd ndWn4mhuo+hMv68sD+lZ4m0UTEncDHQPZ4lFNMNA3jJWqJ2rJKeMZO2kHs9mZKtP 43SnjNHSa5KyroRDsciyTNtxOu3geXo8D4WvPXEL5tL6MVdYRIne393cB0Gcouim DwJG98yIukES4ZKBZc7LbpodilmppiO6NBzdkjDlql1NTH5I56tveNerZx08v9QJ Xr7MfcWqdyhAUJCR6IQpiQFdJIetuPLYbChX13ndnIlLnq2Ykv4UFiUOrxPeo0oN HdExp7xfTAm9FivPh1MYkdgIB/0DlkStV/+txv1mKPhI7+RF7iZ6KNtRIJQa6i/h tdvQpWIkhAQZys1AQUUCAwEAAaOCAg8wggILMA4GA1UdDwEB/wQEAwIFoDAdBgNV HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4E FgQUv/c21N6HzO56gFVpoRRb/sZG/f8wHwYDVR0jBBgwFoAUFC6zF7dYVsuuUAlA 5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8vcjMu by5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9yZy8w FwYDVR0RBBAwDoIMcmFpbnBvd2VyLm5vMBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIB BQYKKwYBBAHWeQIEAgSB9gSB8wDxAHcASLDja9qmRzQP5WoC+p0w6xxSActW3SyB 2bu/qznYhHMAAAGNu/HzDgAABAMASDBGAiEA3bvc7hOv9+McDqYDhH28h1IaTC3C /rAnmHkXfHVp/o0CIQD4w/36szQ4Vdora+02e65DcFydJ5T8ujrptPO/aLus1wB2 AO7N0GTV2xrOxVy3nbTNE6Iyh0Z8vOzew1FIWUZxH7WbAAABjbvx8w0AAAQDAEcw RQIgUqB/3tvJsKyGef4aMs1qDWSWifj7QDgY3lly86tFFBsCIQDkvjmC46sc3vDD MqYH/PIuwmL0okKDfBGU1fKpQPoOvzANBgkqhkiG9w0BAQsFAAOCAQEABiyKTP28 4foIXlB8GVf/EA+UA5G5w9UtgTfw2kj6KkPh/Ws2tQIUZCHPket2icRcl2KOWaUW l0BpkUi2YnKX9xS+lKJuT7Cxkllx6U4VLvmS7137v6H6MQoRko7f4YHd33pCbc17 SVDMZHaY3VPBOQw7+0n+46kamMnPEvW8g0ITCWILx2eSIlk+xp3ExsT0tG7BXsjG A41FbjpwdEEi9xIsPP/mnQqoBFToS8TrcDTFmEbVuPoUXaQpUI1kFPisvcyloZih ogi8QwPwK17CDJVlU+BYewRyDECGPoi9ULOJ1KlzFPsgbii1RR+LkoM+Ebk8YHdB TAFpx8C+Ry9r4w== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJ2d1afiaG6j6Ey/rywP 6VnibRRMSdwMdA9niUU0w0DeMlaonaskp4xk7aQez2Zkq0/jdKeM0dJrkrKuhEOx yLJM23E67eB5ejwPha89cQvm0voxV1hEid7f3dwHQZyi6KYPAkb3zIi6QRLhkoFl zstumh2KWammI7o0HN2SMOWqXU1Mfkjnq29416tnHTy/1Alevsx9xap3KEBQkJHo hCmJAV0kh6248thsKFfXed2ciUuerZiS/hQWJQ6vE96jSg0d0TGnvF9MCb0WK8+H UxiR2AgH/QOWRK1X/63G/WYo+Ejv5EXuJnoo21EglBrqL+G129ClYiSEBBnKzUBB RQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 343796630153368439800350485135451899163078 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-18 10:20:12 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-18 10:20:11 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'rainpower.no' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22800618507243159003210547761528071502208419127369945284518138388632217915353961887905166211901506663221821786995810438132581290495291353539944597036031246705399909740232462070646912266188999778546293481211390434253209314042715604334929684102498396216801652572844338931041585042653363532680157630742909971853285078479352922884415826354951703365128812690587320830962646063044775068945031607361885125344852755092061166336342134496576890278808772369950103736165070389608374695069106714321602383532519140064915224631341065569317428692585582756926719103588996025490794152559856721461973459202395071221457231598164348256581 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) bff736d4de87ccee7a805569a1145bfec646fdff . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rainpower.no' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f100770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018dbbf1f30e0000040300483046022100ddbbdcee13aff7e31c0ea603847dbc87521a4c2dc2feb0279879177c7569fe8d022100f8c3fdfab3343855da2b6bed367bae43705c9d2794fcba3ae9b4f3bf68bbacd7007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018dbbf1f30d0000040300473045022052a07fdedbc9b0ac8679fe1a32cd6a0d649689f8fb403818de5972f3ab45141b022100e4be3982e3ab1cdef0c332a607fcf22ec262f4a242837c1194d5f2a940fa0ebf . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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