krampefix.no
Issued by R3
About this certificate
This digital certificate with serial number 03:e0:2b:e3:9d:10:25:7e:b5:c3:48:8b:19:de:38:f0:6a:cc was issued on by Let's Encrypt.
With 17 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=krampefix.no
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:e0:2b:e3:9d:10:25:7e:b5:c3:48:8b:19:de:38:f0:6a:ccSerial Number (int): 337618446626394157045981973664620707080908
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 6f:16:f7:f8:67:d3:26:90:dd:5d:f3:1d:34:f1:b9:d1:e1:d0:89:16
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): e4:85:b0:83:b8:48:30:cb:dc:7f:85:57:db:9b:fc:04:b6:40:1e:43
Fingerprint (sha256): 75:fa:27:8c:14:12:e7:1b:d7:f6:70:18:50:81:40:57:4b:b6:15:b8:65:d0:f2:39:91:d9:a9:2b:94:c1:f8:af
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate krampefix.no
17
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for krampefix.no
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.krampefix.no
*.nett.chat
*.no.nett.pro
*.organicherb.shop
*.petcare.help
krampefix.no
nett.chat
nett.chat.nett.pro
organicherb.shop
organicherb.shop.nett.pro
petcare.help
petcare.help.nett.pro
www.krampefix.no.nett.pro
www.m8mbyggogutleie.no.nett.pro
www.nett.chat.nett.pro
www.organicherb.shop.nett.pro
www.petcare.help.nett.pro
*.nett.chat
*.no.nett.pro
*.organicherb.shop
*.petcare.help
krampefix.no
nett.chat
nett.chat.nett.pro
organicherb.shop
organicherb.shop.nett.pro
petcare.help
petcare.help.nett.pro
www.krampefix.no.nett.pro
www.m8mbyggogutleie.no.nett.pro
www.nett.chat.nett.pro
www.organicherb.shop.nett.pro
www.petcare.help.nett.pro
Other certificates including the domain name krampefix.no
(limited to 100 certificates)
Certificate
The complete raw certificate details for krampefix.no in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGPDCCBSSgAwIBAgISA+Ar450QJX61w0iLGd448GrMMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzA5MjkxMTU3MTJaFw0yMzEyMjgxMTU3MTFaMBcxFTATBgNVBAMT DGtyYW1wZWZpeC5ubzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANvy WUoSDbzhs7oXy5SqGcLM7+VXZv3XJPc49pmswLxYVckirnG/jcuZkBbh6/cde6Nd 22J/3IdStKcaOJLSCxS7UuWfCxFYnk431CCULIKgT8xp4pbdgY/n7uYWzkxCTjcr fJA6fuXvTq+AkDWNa21v6Gf3MaDKHPnYluZ9dwnziZrcbtCKxWlAmuqst9ZG0v3+ zzpksaEvpX87QN0XLYm9L3yq3iJP9bcY+GORAWCPo2J0FM2+NMVgGi5iWlpFQDuA jpX11gAVeddjcLa3hxf9QfWhf9m4AzoiVm2zsq4x2zQud3mX3hZm65vSuQORiZl0 4B3gJqZzSqbbV4AtNh8CAwEAAaOCA2UwggNhMA4GA1UdDwEB/wQEAwIFoDAdBgNV HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4E FgQUbxb3+GfTJpDdXfMdNPG50eHQiRYwHwYDVR0jBBgwFoAUFC6zF7dYVsuuUAlA 5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8vcjMu by5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9yZy8w ggFqBgNVHREEggFhMIIBXYIOKi5rcmFtcGVmaXgubm+CCyoubmV0dC5jaGF0gg0q Lm5vLm5ldHQucHJvghIqLm9yZ2FuaWNoZXJiLnNob3CCDioucGV0Y2FyZS5oZWxw ggxrcmFtcGVmaXgubm+CCW5ldHQuY2hhdIISbmV0dC5jaGF0Lm5ldHQucHJvghBv cmdhbmljaGVyYi5zaG9wghlvcmdhbmljaGVyYi5zaG9wLm5ldHQucHJvggxwZXRj YXJlLmhlbHCCFXBldGNhcmUuaGVscC5uZXR0LnByb4IZd3d3LmtyYW1wZWZpeC5u by5uZXR0LnByb4Ifd3d3Lm04bWJ5Z2dvZ3V0bGVpZS5uby5uZXR0LnByb4IWd3d3 Lm5ldHQuY2hhdC5uZXR0LnByb4Idd3d3Lm9yZ2FuaWNoZXJiLnNob3AubmV0dC5w cm+CGXd3dy5wZXRjYXJlLmhlbHAubmV0dC5wcm8wEwYDVR0gBAwwCjAIBgZngQwB AgEwggEGBgorBgEEAdZ5AgQCBIH3BIH0APIAdwB6MoxU2LcttiDqOOBSHumEFnAy E4VNO9IrwTpXo1LrUgAAAYrhA7uAAAAEAwBIMEYCIQCZYSkZdthPIIBFSMG3O/bh 88SHKgJkt6gxYti1a3lLUwIhAPb/7KK3FoY/+BK3RjPgkWCaxj4HLuxJXcKAwMIp fGDRAHcA6D7Q2j71BjUy51covIlryQPTy9ERa+zraeF3fW0GvW4AAAGK4QO7hwAA BAMASDBGAiEA7v5BRelAFuWvoMqYfHqAQ+MfJLm/3zBz9k/XZ0mXTWgCIQDe8lzu hxwnnxjh7lURR2GE5+voOhAZ02Guq6YmUG73ojANBgkqhkiG9w0BAQsFAAOCAQEA M7bSfG01sUKQQl1Zavqh7o6On/7r5KZPHqVY3+yla97sGUGAhPsyeyQRwWNtFHv7 39T8FAo0Q3r6KxvdiN/4GutFsUFgpswEnKxkp1RxJBHemDQ555hxGE9wVC/V4F12 gYpCGyh1jfvZ6nYhDco7raW07hkppLGPTsqHxHWxq69hQvD507fdGwdjAyLW9hPE Dnk1Dgs/8KvkrQ14S6CoQcIk4D/ZsTgQC0/emVSAY4V9bR2NlGcjLyt/a3xyx3nE 9xiEA2/PkHlMiDRCJJ08pW8QW7S7GnuRRcTHTfrDpUwnHEN9l5jcA8wqmXcWA4XI MTN9qQr2eHpQnAgh+vTwyA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2/JZShINvOGzuhfLlKoZ wszv5Vdm/dck9zj2mazAvFhVySKucb+Ny5mQFuHr9x17o13bYn/ch1K0pxo4ktIL FLtS5Z8LEVieTjfUIJQsgqBPzGnilt2Bj+fu5hbOTEJONyt8kDp+5e9Or4CQNY1r bW/oZ/cxoMoc+diW5n13CfOJmtxu0IrFaUCa6qy31kbS/f7POmSxoS+lfztA3Rct ib0vfKreIk/1txj4Y5EBYI+jYnQUzb40xWAaLmJaWkVAO4COlfXWABV512NwtreH F/1B9aF/2bgDOiJWbbOyrjHbNC53eZfeFmbrm9K5A5GJmXTgHeAmpnNKpttXgC02 HwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 337618446626394157045981973664620707080908 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-29 11:57:12 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-28 11:57:11 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'krampefix.no' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27765695428251882022834062663763143888315816591809469732030307008806650560505289119142716817047069386008597853500223951695062786373397228776838176045266727747804823304206437438254781544096680081542081283616459128974038317978467479908481666053952712691897853853312066173422588392801458146748324194745458663760432519510248857505873196706243150618305483530288032000937080886774834183216835227265707211744208082368401750981230798894511561283686512733193457801296446163261437171825330048748393136460896706355377289729557537934303178674744634334271600642585148817159914594409483464550913291912942695417735982267449442383391 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 6f16f7f867d32690dd5df31d34f1b9d1e1d08916 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (353 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.krampefix.no' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nett.chat' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.no.nett.pro' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.organicherb.shop' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.petcare.help' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'krampefix.no' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nett.chat' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nett.chat.nett.pro' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'organicherb.shop' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'organicherb.shop.nett.pro' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'petcare.help' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'petcare.help.nett.pro' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.krampefix.no.nett.pro' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m8mbyggogutleie.no.nett.pro' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nett.chat.nett.pro' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.organicherb.shop.nett.pro' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.petcare.help.nett.pro' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) 00f20077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018ae103bb8000000403004830460221009961291976d84f20804548c1b73bf6e1f3c4872a0264b7a83162d8b56b794b53022100f6ffeca2b716863ff812b74633e091609ac63e072eec495dc280c0c2297c60d1007700e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018ae103bb870000040300483046022100eefe4145e94016e5afa0ca987c7a8043e31f24b9bfdf3073f64fd76749974d68022100def25cee871c279f18e1ee5511476184e7ebe83a1019d361aeaba626506ef7a2 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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