ryfylketurer.no

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:62:2f:69:39:6c:42:3e:fd:1b:49:11:bb:b2:41:da:38:cd was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ryfylketurer.no

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:62:2f:69:39:6c:42:3e:fd:1b:49:11:bb:b2:41:da:38:cd
Serial Number (int): 294747549825179237681206719628323805870285
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 0e:bb:89:fd:a9:af:64:c8:67:70:4e:c7:fb:53:1d:87:cd:78:c8:dd
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): d7:d4:fa:7f:2c:5c:1a:1e:1e:00:8a:ef:a9:25:83:c4:2d:14:19:0c
Fingerprint (sha256): 71:75:a0:c0:cb:18:cd:b0:f6:e5:4c:f5:b4:10:86:8f:33:35:d7:ef:41:6e:e1:e3:0f:e9:49:c7:cb:78:c6:a7

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate ryfylketurer.no

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ryfylketurer.no

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ryfylketurer.no
www.ryfylketurer.no

Other certificates including the domain name ryfylketurer.no

(limited to 100 certificates)

Certificate

The complete raw certificate details for ryfylketurer.no in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 294747549825179237681206719628323805870285
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-16 21:05:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-15 21:05:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ryfylketurer.no'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 851520133991054792546024562352048804479154081223375320107473877933674221455952752576681072716663415898682308229979437103127276692505200792226110105523371015232630102145219485083677663945914427476091078075754165667593602009981716996867659792887978578517838318715511505769046920848438219467015141875197760959840488443763061415995847132892871343228940492543507178759217727950567907578600971352745212439082711632736841278874668611767392669348456862140791882175175913944233667181880071353146912897088155404548499168733694026000437846403900162131412962358650088539552725650813998337651886966439588642903848019688874226433879444344288579320062217767301119859109047835108638524789369573240372747853863300621477765326145925917709205318722225402644943754764440777059957868899856056398563187262107269889868182486148829676138582048727965435407527946215883159296710819313533662679595062812246602750091662883245381080329096878458410802310349096859405373578124387893763928328802624446685623196217770186217051561353830752637720265251964119569417222779282170508967334721201246441083813783515799742869709383691819143581119231468863691753436625990643317624113537498694875131310805580608896516242101437642997134878141428903650027660752978345484255223969
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0ebb89fda9af64c867704ec7fb531d87cd78c8dd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ryfylketurer.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ryfylketurer.no'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016fb063e2cc0000040300473045022100a27bc8772ac7015cb63fb521f34692ba89c2737e786d0986ea6514b6ae2db2ec02207304835501fd5cbf2ecf2c14e168d2199ce9dfff6d007134b8dc02709b3c064d0077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016fb063e3040000040300483046022100a603fd86a1f48bf53e789ed914936333757b192e6cdbdf77a3719919a8b10da802210092e79bcdac3da3dfa80c11022733b6f79656a640651fcfe0cb2f628cf849356a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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