studentersamfundet.no

Issued by R3

About this certificate

This digital certificate with serial number 04:9e:31:c5:1d:32:2e:29:ce:01:0a:30:34:b8:de:8f:ca:8f was issued on by Let's Encrypt.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=studentersamfundet.no

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:9e:31:c5:1d:32:2e:29:ce:01:0a:30:34:b8:de:8f:ca:8f
Serial Number (int): 402279913346989429533372614645114104433295
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 68:11:f9:2b:f7:b9:0c:ba:cd:30:fd:0b:d5:cc:d0:93:2c:94:e1:d6
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 7e:7c:10:f6:71:45:cc:ae:9b:53:ce:7b:56:40:eb:65:ce:de:ab:1d
Fingerprint (sha256): 73:61:0d:2f:1a:73:4a:29:bb:27:23:5c:ab:78:3a:c8:a8:30:6d:cc:35:54:3d:5a:01:ad:bb:1e:58:fb:4d:ba

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate studentersamfundet.no

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for studentersamfundet.no

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

1813.no
neuf.no
studentersamfundet.no
www.1813.no
www.neuf.no
www.studentersamfundet.no

Other certificates including the domain name studentersamfundet.no

(limited to 100 certificates)
tls-everywhere-1.studentersamfundet.no
studentersamfundet.no
studentersamfundet.no
tls-everywhere-2.studentersamfundet.no
studentersamfundet.no
booking.studentersamfundet.no
studentersamfundet.no
viteboka.studentersamfundet.no
tls-everywhere.studentersamfundet.no
viteboka.studentersamfundet.no
booking.studentersamfundet.no
viteboka.studentersamfundet.no
misc-domains.studentersamfundet.no
booking.studentersamfundet.no
beta.studentersamfundet.no
tls-everywhere-3.studentersamfundet.no
tls-everywhere.studentersamfundet.no
booking.studentersamfundet.no
misc-domains.studentersamfundet.no
misc-domains.studentersamfundet.no
misc-domains.studentersamfundet.no
studentersamfundet.no
viteboka.studentersamfundet.no
booking.studentersamfundet.no
inside.studentersamfundet.no
viteboka.studentersamfundet.no
beta.studentersamfundet.no
studentersamfundet.no
studentersamfundet.no
tls-everywhere-2.studentersamfundet.no
booking.studentersamfundet.no
bestilling.studentersamfundet.no
studentersamfundet.no
studentersamfundet.no
tls-everywhere.studentersamfundet.no
booking.studentersamfundet.no
*.studentersamfundet.no
viteboka.studentersamfundet.no
beta.studentersamfundet.no
tls-everywhere-1.studentersamfundet.no
misc-domains.studentersamfundet.no
studentersamfundet.no
tls-everywhere-3.studentersamfundet.no
misc-domains.studentersamfundet.no
booking.studentersamfundet.no
inside.studentersamfundet.no
*.studentersamfundet.no
inside.studentersamfundet.no
studentersamfundet.no
viteboka.studentersamfundet.no
studentersamfundet.no
tls-everywhere-1.studentersamfundet.no
viteboka.studentersamfundet.no
misc-domains.studentersamfundet.no
studentersamfundet.no
www.studentersamfundet.no
studentersamfundet.no
www.studentersamfundet.no
inside.studentersamfundet.no
bestilling.studentersamfundet.no
bestilling.studentersamfundet.no
misc-domains.studentersamfundet.no
tls-everywhere-1.studentersamfundet.no
studentersamfundet.no
viteboka.studentersamfundet.no
viteboka.studentersamfundet.no
misc-domains.studentersamfundet.no
booking.studentersamfundet.no
studentersamfundet.no
bestilling.studentersamfundet.no
studentersamfundet.no
booking.studentersamfundet.no
tls-everywhere-1.studentersamfundet.no
viteboka.studentersamfundet.no
beta.studentersamfundet.no
studentersamfundet.no
tls-everywhere-3.studentersamfundet.no
studentersamfundet.no
viteboka.studentersamfundet.no
tls-everywhere-3.studentersamfundet.no
viteboka.studentersamfundet.no
inside.studentersamfundet.no
beta.studentersamfundet.no
tls-everywhere-2.studentersamfundet.no
beta.studentersamfundet.no
booking.studentersamfundet.no
studentersamfundet.no
misc-domains.studentersamfundet.no
booking.studentersamfundet.no
viteboka.studentersamfundet.no
studentersamfundet.no
studentersamfundet.no
viteboka.studentersamfundet.no
tls-everywhere.studentersamfundet.no
bestilling.studentersamfundet.no
studentersamfundet.no
misc-domains.studentersamfundet.no
misc-domains.studentersamfundet.no
studentersamfundet.no
booking.studentersamfundet.no

Certificate

The complete raw certificate details for studentersamfundet.no in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqK3VWKY4rHYXKPOvXTfo
B9Nv4LEAHQm8ARf1rDxn0ZZ8Jr0KWPc/rFpnrlLZmhOwI2dlWQMpLE8syUDn2E7v
BkQfejony1uCA7GvB9ZIuz+36EAtIH2dz2Tx87tUy0jkE8boXbxurjS0SKWRC4Ba
qT74LxG9wDIXMZTlGHnGgA0t3Hxmv4LvLLxBEuCiAdL2xpU473QRxPsyD72xkdZN
fhrGMli2NwQHUk9jH79rsca9am0y7XChBwcWSQj8FbRM4Gf2wHerdEnwCJ4fN1z3
bzemsKdmm/p+SQyIzB7oNWwICdRqzWBf2siFKy9g06WpOZQP9eojpUU2Ef63+Uag
KQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 402279913346989429533372614645114104433295
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-28 15:11:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-28 15:11:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'studentersamfundet.no'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21293755670758645513412390366535062574086438724911021590530962208081078614489727868515973324593656391107590198167634879874017663732866517260212323693708529681177069996910354601902326452948185122420179839548133922620914692660535943215375770018729709511584680824115102877954110723274238708052560882174712882170779576139478897752359622409987321878755473209544982257339023882912201784140593872603930925821740958068683005114711690805860328645043836402325426541884712735265140891456957557162396347710592995913051637783329918836359290240824379856960052018387926531997531717972060854151978229437413426283201262109050758668329
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6811f92bf7b90cbacd30fd0bd5ccd0932c94e1d6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1813.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neuf.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studentersamfundet.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.1813.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.neuf.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.studentersamfundet.no'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018df07bd7b2000004030048304602210080db7df76dc3e456f6072f8b61886c3d01bde46d3af62c308100eae121269195022100d1755006b0cbefa63cdc5497340336be32e976560906b037c586e0482eb4847300760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018df07bd94c0000040300473045022100ec159bc63c90b3565c18c35c842d48c356965c92b7702c60038053a0327a481a02207f7419835ce9b2f2e0d665068c590d3874beaa2cf45e26520a84464ea2a431be
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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