dugnad.gbif.no

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:d8:bd:dd:f4:b3:23:c1:f0:e1:2f:ef:0a:0d:3b:6f:2b:c3 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=dugnad.gbif.no

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:d8:bd:dd:f4:b3:23:c1:f0:e1:2f:ef:0a:0d:3b:6f:2b:c3
Serial Number (int): 422202511533873630808078997858474756352963
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 52:4e:f9:c9:10:88:d9:e8:1a:65:17:a9:9b:3b:c5:94:f8:5c:e8:e9
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 95:25:32:10:4e:a3:f8:85:77:a8:46:92:55:88:dc:e4:b8:12:bb:fc
Fingerprint (sha256): 60:15:96:65:81:cd:ed:cd:67:a6:55:09:af:7f:ad:14:00:09:56:3d:1a:0d:5c:1c:1f:3e:f8:05:1e:12:77:0e

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate dugnad.gbif.no

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dugnad.gbif.no

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dugnad.gbif.no

Other certificates including the domain name gbif.no

(limited to 100 certificates)
www-adm.1700-tallet.no
ipt.gbif.no
www-adm.gbif.no
data.gbif.no
dugnad.gbif.no
gbif.no
data.gbif.no
data.gbif.no
www-adm.1700-tallet.no
dugnad.gbif.no
data.gbif.no
data.gbif.no
ipt.gbif.no
1700-tallet.no
www.uhit.no
data.gbif.no
1700-tallet.no
www-adm.1700-tallet.no
data.gbif.no
1700-tallet.no
data.gbif.no
data.gbif.no
ipt.gbif.no
dugnad.gbif.no
dugnad.gbif.no
1700-tallet.no
data.gbif.no
gbif.no
data.gbif.no
www-adm.gbif.no
gbif.no
www-adm.1700-tallet.no
gbif.no
www-adm.gbif.no
ipt-biodata.gbif.no
www-adm.gbif.no
ipt-test.gbif.no
dugnad.gbif.no
www-adm.1700-tallet.no
www.1700-tallet.no
ipt-test.gbif.no
ipt-biodata.gbif.no
data.gbif.no
www-adm.1700-tallet.no
www.fsat.no
dugnad.gbif.no
www-adm.1700-tallet.no
www-adm.1700-tallet.no
dugnad.gbif.no
ipt-biodata.gbif.no
ipt-test.gbif.no
1700-tallet.no
1700-tallet.no
www.fsat.no
resolver.gbif.no
www-adm.1700-tallet.no
www-adm.1700-tallet.no
data.gbif.no
data.gbif.no
data.gbif.no
1700-tallet.no
data.gbif.no
1700-tallet.no
data.gbif.no
www-dav.gbif.no
1700-tallet.no
data.gbif.no
ipt.gbif.no
dugnad.gbif.no
data.gbif.no
www-dav.sensorportalen.uio.no
www-dav.gbif.no
data.gbif.no
data.gbif.no

Certificate

The complete raw certificate details for dugnad.gbif.no in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgISBNi93fSzI8Hw4S/vCg07byvDMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA3MjcyMTU0MTBaFw0x
OTEwMjUyMTU0MTBaMBkxFzAVBgNVBAMTDmR1Z25hZC5nYmlmLm5vMIICIjANBgkq
hkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAx4OZr6ZF7cy5pxoPG7DSYsbsIEx/hAX4
1IJLMXsqBTZ4zU4KdNHsmeobd3YUsYnhXAAP1WGDtzSSJz9gvIPa08VY8YfDRdaJ
Ac7qCBvnS0WtkpO47vRQLoknyJp59GJqHaumTOeRynQJg3NLaxFDOEyXMnyRr417
XRHTrX75KANX9MYVGZdHAk/irCTaHpbDxIY5NAodADY458DtBdf0G1vdOPk0bhI8
AUswB/8rd1jn5EC78d93EcL1ir30cxdyRN34cR3PQvj+Exqn33YajH/ijklHWDIU
jAHiohLLFhDL/Ac78WkfpBG5rgtgWL6yQOWs0wNoly5Nm5RH9xm0AznvTOIFDaUb
KCletVazgPpSak4JCMp2mprc8Ke51pHY4eSKf1OiXVoaRqsw9ZisC6oPRaZNe0QX
7JF+Wvk9EJ4CA9FgTFl+TrQIRETLsvLoC/ubfptHRtXLFs3s1mVcVTDswQE9T5bQ
YfsOSyMah9aCUUKd8nYrobzA7jJbPczEDk1X2BVyLawk4ymsPdpfcZPVfMv3lrlh
zZvD0IUtbiRloUgaMALcNR5j3tKID/n0gTqvBNtMckdF3D/8M0X203hdiiLRBHVc
KFpuc7NTtC3kg8xgFgumlWA8lpgxz23d0zr91XWVVr0eIp34ouN1frhmvOAbRyb9
d58wqvmoePcCAwEAAaOCAmMwggJfMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAU
BggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUUk75
yRCI2egaZRepmzvFlPhc6OkwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo
7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQt
eDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQt
eDMubGV0c2VuY3J5cHQub3JnLzAZBgNVHREEEjAQgg5kdWduYWQuZ2JpZi5ubzBM
BgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIB
FhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQQGCisGAQQB1nkCBAIEgfUE
gfIA8AB2AG9Tdqwx8DEZ2JkApFEV/3cVHBHZAsEAKQaNsgiaN9kTAAABbDWkOQMA
AAQDAEcwRQIhAKpFzW/lDiSo5bTAcHt3m4jQADhYQx/E3GYaGXAwY8uSAiAqgODd
OvMf7mFnwkyuoOP848m4nt1YTHcOxsePS6o+HgB2ACk8UZZUyDlluqpQ/FgH1Ldv
v1h6KXLcpMMM9OVFR/R4AAABbDWkOM8AAAQDAEcwRQIgQXVALXk4uAB3A2XmtEen
H8HqCQHY24Q2GDV86eXncxYCIQCdyszF6ptlh9B41+Xe+bsnSop5aN+KpRdXK/7b
bT8sajANBgkqhkiG9w0BAQsFAAOCAQEALE6GBdJ2rSpwJd8BLBibAZuPaa48V6cU
90dPx67x71IRpWCmOWSWxOLlFQon7A4Ey0/igW2u7IPkitkymK+bi2ke/EYXmmEQ
qR+OSztDjX1i7In0NsuCw7wQRjAeoynlJ5oxJ1F1IXKWgAmJPXfaevuu90eE8FeO
GiuwIkFtHy9CcWMSq4e5d9SgyaG2pL/5Ed/WtMeP2pN8Wc5qe6OEfVO0i0/pUrRa
nibw/8ki/RXim5fgpVKZs0BC6nLWalDx0Madr2FHde0XjthxDPyUz01aEOjF0bvE
ENffhJxhsioOXdAyup5u9la/RJ7jPL7STLBHAnKGAy6ngb52D7LqYA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 422202511533873630808078997858474756352963
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-27 21:54:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-25 21:54:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dugnad.gbif.no'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 813946366926405851602613994623926536952706180728615588632527818531515846221003361707880419574390574437690961413430320766214091362913961314149301931338228869029000768477094877430367516842982083498761497227176931147151939949383465301315760306647657235290690126188400169898839993920227946086221896521240641955957096685693986877451319271094269029470905319841989210532840240714339595801583904300962009910784625620936624137951427913822956856875734603314469306453991687016479844132271105680151180124848434766775632836187549478203516784066921231699394381282001567055370770498313372753074421005097277580194027568874233137811648383589281788573479151391455660689468993727848788988048986809909354700729685410844848407854710623970796859883388181377479225576899774808636658679790217333666494240062170544494690318130663365963720285923354595127715508024156044972715638367543437788070096994375527419526893023262406203413495067869638696622191254451192840261135738340998023866945987925716466490053266387630862459027748692421848389277032443725596250244590163678910839769765716065842007291651782691931653098324678344214458334052203191882149540769643225180432094140268204028943107493177301619945111531508337044342935027598032032639847121848124234470553847
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							524ef9c91088d9e81a6517a99b3bc594f85ce8e9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dugnad.gbif.no'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016c35a439030000040300473045022100aa45cd6fe50e24a8e5b4c0707b779b88d0003858431fc4dc661a19703063cb9202202a80e0dd3af31fee6167c24caea0e3fce3c9b89edd584c770ec6c78f4baa3e1e007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c35a438cf000004030047304502204175402d7938b800770365e6b447a71fc1ea0901d8db843618357ce9e5e773160221009dcaccc5ea9b6587d078d7e5def9bb274a8a7968df8aa517572bfedb6d3f2c6a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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