personal.sticos.no

- Sticos AS -

Issued by thawte Extended Validation SSL CA

About this certificate

This digital certificate with serial number 24:39:c0:c8:65:94:73:4f:7a:fd:ef:7d:49:a2:85:f7 was issued on by thawte, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Sticos AS

Company registration number: 934 228 391
Organization: Sticos AS
Organization unit: Sticos
State / Province: Trondheim
Locality: Trondheim
Country: NO

thawte, Inc.

Organization: thawte, Inc.
Organization unit: Terms of use at https://www.thawte.com/cps (c)06
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 24:39:c0:c8:65:94:73:4f:7a:fd:ef:7d:49:a2:85:f7
Serial Number (int): 48152078868907312124511840896328828407
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: cd:32:e2:f2:5d:25:47:02:aa:8f:79:4b:32:ee:03:99:fd:30:49:d1

Fingerprint (sha1): 92:aa:ae:30:c6:7c:80:06:63:7b:a2:0a:0a:85:69:9d:53:62:e2:6b
Fingerprint (sha256): 73:98:9c:a5:0f:07:31:9a:04:23:48:3a:20:48:a5:22:71:25:ec:51:8d:34:c8:cd:66:50:79:e1:47:23:3d:15

Issuing Certificate URL: http://crl.thawte.com/ThawteEVCA2006.cer

Revocation information

OCSP Server: http://ocsp.thawte.com
CRL Distribution Point: http://crl.thawte.com/ThawteEVCA2006.crl

Check the revocation status for certificate personal.sticos.no

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for personal.sticos.no

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

personal.sticos.no

Other certificates including the domain name sticos.no

(limited to 100 certificates)
*.sticos.no
support-test.sticos.no
kampanje.sticos.no
accountancymanagerstatus.co.uk
accountancymanagerstatus.co.uk
accountancymanagerstatus.co.uk
accountancymanagerstatus.co.uk
accountancymanagerstatus.co.uk
accountancymanagerstatus.co.uk
kampanje.sticos.no
kampanje.sticos.no
accountancymanagerstatus.co.uk
accountancymanagerstatus.co.uk
accountancymanagerstatus.co.uk
accountancymanagerstatus.co.uk
accountancymanagerstatus.co.uk
status.320east.de
accountancymanagerstatus.co.uk
personal.sticos.no
accountancymanagerstatus.co.uk
accountancymanagerstatus.co.uk
accountancymanagerstatus.co.uk
status.320east.de
accountancymanagerstatus.co.uk
accountancymanagerstatus.co.uk
accountancymanagerstatus.co.uk
accountancymanagerstatus.co.uk
accountancymanagerstatus.co.uk
access.okonomibistand.no
accountancymanagerstatus.co.uk
status.320east.de
sip.sticos.no
status.320east.de
accountancymanagerstatus.co.uk
accountancymanagerstatus.co.uk
accountancymanagerstatus.co.uk
kampanje.sticos.no
accountancymanagerstatus.co.uk
accountancymanagerstatus.co.uk
cdn.sticos.no
accountancymanagerstatus.co.uk
access.sirakvina.no
accountancymanagerstatus.co.uk
accountancymanagerstatus.co.uk
accountancymanagerstatus.co.uk
accountancymanagerstatus.co.uk
kampanje.sticos.no
e-post.sticos.no
kampanje.sticos.no
accountancymanagerstatus.co.uk
kampanje.sticos.no
accountancymanagerstatus.co.uk
accountancymanagerstatus.co.uk
e-post.sticos.no
accountancymanagerstatus.co.uk
accountancymanagerstatus.co.uk
accountancymanagerstatus.co.uk
accountancymanagerstatus.co.uk
accountancymanagerstatus.co.uk
accountancymanagerstatus.co.uk
accountancymanagerstatus.co.uk
accountancymanagerstatus.co.uk
foundation.sticos.no
accountancymanagerstatus.co.uk
accountancymanagerstatus.co.uk
accountancymanagerstatus.co.uk
access.sea-cargo.no
accountancymanagerstatus.co.uk
accountancymanagerstatus.co.uk
accountancymanagerstatus.co.uk
accountancymanagerstatus.co.uk
accountancymanagerstatus.co.uk
accountancymanagerstatus.co.uk
kampanje.sticos.no
accountancymanagerstatus.co.uk
accountancymanagerstatus.co.uk
vpn.sticos.no
sip.sticos.no
accountancymanagerstatus.co.uk
accountancymanagerstatus.co.uk
status.320east.de
accountancymanagerstatus.co.uk
accountancymanagerstatus.co.uk
*.sticos.no
accountancymanagerstatus.co.uk
accountancymanagerstatus.co.uk
kampanje.sticos.no
personal.sticos.no
personal.sticos.no
accountancymanagerstatus.co.uk
accountancymanagerstatus.co.uk
kampanje.sticos.no
e-post.sticos.no
accountancymanagerstatus.co.uk
accountancymanagerstatus.co.uk
accountancymanagerstatus.co.uk
accountancymanagerstatus.co.uk
accountancymanagerstatus.co.uk
e-post.sticos.no
accountancymanagerstatus.co.uk

Certificate

The complete raw certificate details for personal.sticos.no in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnq7xzhyZKSy0jW09RLfL
3i6JjOCaQUD++2/JB1Yuxyjx8yD6Uyk5dtuSV7JPOaXBdXmzwHl1ONoD9icEDD43
YTWhrDw9pEZqUqBSx7ut9W1zZIXvR7Wu//R3dhADF/gNtXHlcR6mEmTNypBuxKDD
wwswXst5LG9YfIl5AE3t3yrRrHAmY6vt1P+3CeAwqrI9qfxI3WGR8NiwrtzoHvLy
/QVDnBvJ9JlKN/Ida8lS0hVoaUtLJeMgxg/pspKaiRP2XsyJ4+otAT6PPivssOFt
3nFqCmdHIvif/vlddrTDBRUnkQOyRrBDmh4/mxqVgXHRDq5Y+KXMJ87pn7TwcypX
wwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 48152078868907312124511840896328828407
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Terms of use at https://www.thawte.com/cps (c)06'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte Extended Validation SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-01-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-01-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Sticos AS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '934 228 391'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trondheim'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Trondheim'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Sticos'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'personal.sticos.no'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20031920558132413490732702106267313062949982964510964329164558580672786009554640476619413627363544349791313325722364391183289069991361576734004682130038387163953295228937313963533670379646182139207524624947116866084012421978393032257412536425729440334099902821984404190776885061590896443787243765335281934580493693674033557005457869555299051140595719229887807982727718859213097243477706423125350372823772016792668813925594505971396343627163549724820081816921250884777100239065243561435302204367950470768085710670059621133477461199767340749634194998067529186035614011936081663532176876069577510388848111173715142268867
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'personal.sticos.no'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.thawte.com/ThawteEVCA2006.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.48.1 (Thawte EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName cd32e2f25d254702aa8f794b32ee0399fd3049d1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.thawte.com/ThawteEVCA2006.cer'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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