torg.dolen.no
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:0f:f5:df:12:15:29:31:3c:a1:b2:36:25:1f:41:db:cf:33 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=torg.dolen.no
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:0f:f5:df:12:15:29:31:3c:a1:b2:36:25:1f:41:db:cf:33Serial Number (int): 266767912407021487234867123894936456122163
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 22:71:d5:05:59:0d:83:8c:b8:cc:16:10:ef:61:c8:57:ec:ed:a7:3a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 83:4e:48:6e:40:40:16:e6:57:49:fb:ee:39:9b:68:77:03:9f:d2:d3
Fingerprint (sha256): 72:c8:23:c6:63:15:9b:ff:c1:a1:69:03:2d:a9:79:e2:18:13:87:bc:75:ef:9b:b3:f8:21:06:16:49:09:8d:1a
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate torg.dolen.no
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for torg.dolen.no
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
torg.dolen.no
Other certificates including the domain name dolen.no
(limited to 100 certificates)
folk.dolen.no
id.tek.no
polarismedia.no
polarismedia.no
polarismedia.no
id.dolen.no
*.adressa.no
arlingtonmoments.dallasnews.com
arlingtonmoments.dallasnews.com
polarismedia.no
polarismedia.no
folk.dolen.no
polarismedia.no
torg.dolen.no
id.dolen.no
torg.dolen.no
polarismedia.no
polarismedia.no
id.tv.nu
torg.dolen.no
folk.dolen.no
torg.dolen.no
folk.dolen.no
id-pre.tv.nu
arlingtonmoments.dallasnews.com
torg.dolen.no
torg.dolen.no
id.schibsted.no
polarismedia.no
torg.dolen.no
torg.dolen.no
id-pre.bsnett.no
id-pre.tv.nu
id.dolen.no
folk.dolen.no
*.dolen.no
id.schibsted.no
folk.dolen.no
id-pre.byas.no
id.tv.nu
polarismedia.no
id.dolen.no
polarismedia.no
torg.dolen.no
torg.dolen.no
folk.dolen.no
folk.dolen.no
folk.dolen.no
id-pre.byas.no
id-pre.dolen.no
torg.dolen.no
folk.dolen.no
id.bsnett.no
id-pre.tek.no
polarismedia.no
session-service.payment.schibsted.no
id.tek.no
folk.dolen.no
torg.dolen.no
session-service.payment.schibsted.no
folk.dolen.no
arlingtonmoments.dallasnews.com
id-pre.tek.no
id-pre.bsnett.no
id-pre.dolen.no
id.tek.no
polarismedia.no
polarismedia.no
polarismedia.no
id.dolen.no
*.adressa.no
arlingtonmoments.dallasnews.com
arlingtonmoments.dallasnews.com
polarismedia.no
polarismedia.no
folk.dolen.no
polarismedia.no
torg.dolen.no
id.dolen.no
torg.dolen.no
polarismedia.no
polarismedia.no
id.tv.nu
torg.dolen.no
folk.dolen.no
torg.dolen.no
folk.dolen.no
id-pre.tv.nu
arlingtonmoments.dallasnews.com
torg.dolen.no
torg.dolen.no
id.schibsted.no
polarismedia.no
torg.dolen.no
torg.dolen.no
id-pre.bsnett.no
id-pre.tv.nu
id.dolen.no
folk.dolen.no
*.dolen.no
id.schibsted.no
folk.dolen.no
id-pre.byas.no
id.tv.nu
polarismedia.no
id.dolen.no
polarismedia.no
torg.dolen.no
torg.dolen.no
folk.dolen.no
folk.dolen.no
folk.dolen.no
id-pre.byas.no
id-pre.dolen.no
torg.dolen.no
folk.dolen.no
id.bsnett.no
id-pre.tek.no
polarismedia.no
session-service.payment.schibsted.no
id.tek.no
folk.dolen.no
torg.dolen.no
session-service.payment.schibsted.no
folk.dolen.no
arlingtonmoments.dallasnews.com
id-pre.tek.no
id-pre.bsnett.no
id-pre.dolen.no
Certificate
The complete raw certificate details for torg.dolen.no in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgISAw/13xIVKTE8obI2JR9B288zMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODEyMTEwMDAxNDNaFw0x OTAzMTEwMDAxNDNaMBgxFjAUBgNVBAMTDXRvcmcuZG9sZW4ubm8wggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYBzwh2gCU/GbKJ4fy7exeQBk5Oeb/xdnH ZO4p68Wimg082fNeLWBjaUDd/Bd1sxAiPzxhmL0ni3aUO/8o8jVMk24syjspgVoV S2FhprZF+zpJJdErNffYb9bDyxHhPkaJf2BoCxHMoJt3M/74bb7nxhO8B9EzLg8H UIT8s+ziWu+4REWsj0/ME4BcyNOsT6Yw7NAL1rxKpJHxDsfUHTzr/QuyLJwEBiiv hZnWTe+eK44gEDxCnZcdQ3u26plUc7xMcqlUgo+7foR8iIPeBD6ehD23biteKr2C R5sjP382+PlwTNVrBSoKdV8s/iVizdTc8ObthAB1oASqQwNK2UC1AgMBAAGjggJh MIICXTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUF BwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFCJx1QVZDYOMuMwWEO9hyFfs7ac6 MB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMw YTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0Lm9y ZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0Lm9y Zy8wGAYDVR0RBBEwD4INdG9yZy5kb2xlbi5ubzBMBgNVHSAERTBDMAgGBmeBDAEC ATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNl bmNyeXB0Lm9yZzCCAQMGCisGAQQB1nkCBAIEgfQEgfEA7wB1AOJpS64m6OlACeiG G7Y7g9Q+5/50iPukjyiTAZ3d8dv+AAABZ5rIshYAAAQDAEYwRAIgLAPU2LvLbGKk te5YkCsPXdPb9lSASMHAPvsWsTlgK0kCIBbJDw38D7f9ZM9pGogWvaGpRkl/lKUN QahLoLgJ4rBrAHYAY/Lbzeg7zCzPC3KEJ1drM6SNYXePvXWmOLHHaFRL2I0AAAFn msiyYAAABAMARzBFAiBXqRqg9v55b/r0/Un5SobB45vhS7LC5D1w4NHKo1Pl7AIh AN5MwXKqi40vzOmUs2OEJPZ/HoCRe0NidtEeLLpuzXa7MA0GCSqGSIb3DQEBCwUA A4IBAQAVCSkoB+UPazLHMgiNffFar/9fkb4TdJSgdxBII8SlupmjfG5xWzHDCh9v xjX++ELLPJ+yZoSi8rfUrjPNS/dsJon/Ib9jUpjUtwMca9p+B5oJD3S63kH7NjwR gf+M862EoKYWfDafQG2rlDHeiHSifa4hL02u1PCj5QhSSrpnh/0f1XhZjF7wEt8t bHlfwe/vQYuoAmRpFcMOOrl2P3TUguTyih/6PLkoKZa+j8Qn3GuiLNfL3m2KEnLV 8V0/rJC+paXXFSlCdB5H5w7wmeeCXl5MtP7z4JgCgeve6ff8mXbM9+z1BLKP+gVA MKz5jMHOACDDMbTR/Z04VJZN/rAh -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Ac8IdoAlPxmyieH8u3s XkAZOTnm/8XZx2TuKevFopoNPNnzXi1gY2lA3fwXdbMQIj88YZi9J4t2lDv/KPI1 TJNuLMo7KYFaFUthYaa2Rfs6SSXRKzX32G/Ww8sR4T5GiX9gaAsRzKCbdzP++G2+ 58YTvAfRMy4PB1CE/LPs4lrvuERFrI9PzBOAXMjTrE+mMOzQC9a8SqSR8Q7H1B08 6/0LsiycBAYor4WZ1k3vniuOIBA8Qp2XHUN7tuqZVHO8THKpVIKPu36EfIiD3gQ+ noQ9t24rXiq9gkebIz9/Nvj5cEzVawUqCnVfLP4lYs3U3PDm7YQAdaAEqkMDStlA tQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 266767912407021487234867123894936456122163 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-11 00:01:43 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-11 00:01:43 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'torg.dolen.no' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27271041530652505466320607680038691392967029002198819710899076897030305558764019018644840681089447227969260616513926469109244440449003467784437722563018296002484163384964410867735582740680101808140979231629200808938709384095483228055864766975147458946805086838038199611727982474355519393003046018030078213311597790464782150838374313886060296222622264879934814596998460180390075549951998964291325596697023335917365251776149616710407159820529387358914450909397852701057435961661216246301241604377222907163395644640450327649989784492122997462130992267946361977583651177682897344947793575324097631838600809864468509573301 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 2271d505590d838cb8cc1610ef61c857eceda73a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'torg.dolen.no' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe000001679ac8b216000004030046304402202c03d4d8bbcb6c62a4b5ee58902b0f5dd3dbf6548048c1c03efb16b139602b49022016c90f0dfc0fb7fd64cf691a8816bda1a946497f94a50d41a84ba0b809e2b06b00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d000001679ac8b2600000040300473045022057a91aa0f6fe796ffaf4fd49f94a86c1e39be14bb2c2e43d70e0d1caa353e5ec022100de4cc172aa8b8d2fcce994b3638424f67f1e80917b436276d11e2cba6ecd76bb . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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