demo-nvdb-client.geoikt.no

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 03:a0:0e:d7:50:10:7f:d4:f9:3e:4a:e3:4d:c1:3c:85 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=demo-nvdb-client.geoikt.no

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a0:0e:d7:50:10:7f:d4:f9:3e:4a:e3:4d:c1:3c:85
Serial Number (int): 4818752497288458997529200807251098757
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 32:2b:f2:fa:d3:da:7e:21:a0:00:23:82:a5:fa:c9:78:1c:57:0c:a3
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 8b:66:7e:4a:54:80:29:8e:dd:a4:3e:77:2a:6c:b9:34:ef:bf:e3:b5
Fingerprint (sha256): 61:75:b5:2e:c3:27:59:0e:19:73:0c:71:eb:f7:f8:02:34:09:df:7e:27:22:62:56:85:c4:64:b8:c7:51:66:56

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate demo-nvdb-client.geoikt.no

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for demo-nvdb-client.geoikt.no

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

demo-nvdb-client.geoikt.no

Other certificates including the domain name geoikt.no

(limited to 100 certificates)
braveg.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
arkiv.status.geoikt.no
arkiv.status.geoikt.no
test-nvdb-client.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
status.cayuse.com
arkiv.status.geoikt.no
arkiv.status.geoikt.no
demo-georeg-api.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
arkiv.status.geoikt.no
arkiv.status.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
arkiv.status.geoikt.no
demo-nvdb-client.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
arkiv.status.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
*.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no

Certificate

The complete raw certificate details for demo-nvdb-client.geoikt.no in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkdUYz+ZU1qB4hmjPd8z
BSQ42K6jmw988pRRSt94+r0K3pcDIQ0WTvO0b5xRP+SeNGKXBitYDecF49sqBehM
bH1rBbKZPsgVLWD2Ag0xIL1bWEpYR+TOZhHTTht/XM0eMLHZVonm5IF8pIKymyZa
ssed/n51JjkhMTaUlzz+mj1hCI3Z6VLKfHPAgDpdlBNNFnRxsaBRuFmbY6P6I3O6
DZuIqaF3W9UDGVnq4lSgS5QN6fQB2kzI/6hcecBeXuMjzZ52XW81FMmKGLVqap75
wJ3XsMzHLl1xoeXfNw4bL4kPH//y4obP98xULHetq618fzHuweeXO7kFvjkakU2t
TwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4818752497288458997529200807251098757
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-20 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'demo-nvdb-client.geoikt.no'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19980826140782079847220401184880866787039877604285984422950901436855566861086751918195587833341040682938468528045644526883194214873554795057223037462516624312687015885643146681246242150208700833661863001864529551548092615260578629965791572140988045121349775082269422761434496951844432961363517600611535480701600552518310974491638887284600843773777019938938865348156149402525075915822672967966547183229497707889781731790584332354688981673711407930591053216819102414743612336567780972444930849224812401417999651579257212912315189749620825389798122573146681275479253039600094267753099726330284759401277861068961385131343
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							322bf2fad3da7e21a0002382a5fac9781c570ca3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo-nvdb-client.geoikt.no'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00a6fc48643b1770d5ad2c5c9f3dc153c00dec8ec396a0fb53c398fc44ec34f452ff874dd67f0aa25fdd53ad92b14dec821606e358b657baf504f9c7823dc00e7bf718a4b7a797d911c55c4352151b658ecf0cb06d2ccaefc95202805aa095165534d17af6fcfa693ea4516d73c3ac1c4db5ff3b18a2986d808e393b1930684083db3402ad70fe752f948bfd2cd2b1353d93a80e09eae4b48fa38b9891ce548457a49d98df53c82874c48b354989c407e0f01ae634862918b9b90989be2404e33ce502599995350b526e9b1ed9d11e1ee7c3342e5b7e87499475f87a46b70a9507871ff221f6e424a29a9c471d805dcb16f636b608775dc054b4f3bc876e9dbfd8