lesertur.adressa.no

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ea:c2:c9:c0:a7:56:c9:d4:a9:b8:0a:b6:01:a4:ba:32:9e was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=lesertur.adressa.no

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ea:c2:c9:c0:a7:56:c9:d4:a9:b8:0a:b6:01:a4:ba:32:9e
Serial Number (int): 341221849445111786320207729567449461961374
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 30:84:72:c8:89:7a:1c:5c:40:30:e4:a9:79:f3:09:bb:a8:3f:f4:aa
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 67:49:55:bc:37:57:87:42:fc:05:0b:e0:d9:63:c3:1c:6a:9a:da:78
Fingerprint (sha256): 76:e4:f7:c8:8f:68:5b:b3:d7:db:46:e3:37:2d:8c:ae:f8:2c:df:72:ae:16:00:0d:92:0f:ea:40:cc:6c:78:c9

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate lesertur.adressa.no

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lesertur.adressa.no

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lesertur.adressa.no

Other certificates including the domain name adressa.no

(limited to 100 certificates)
id.adressa.no
registrering.adressa.no
pmftp.polarismedia.no
lesertur.adressa.no
registrering.adressa.no
torg.adressa.no
gratis.adressa.no
registrering.adressa.no
id.tek.no
polarismedia.no
polarismedia.no
alogin.adressa.no
*.adressa.no
polarismedia.no
id.dolen.no
info.adressa.no
*.adressa.no
arlingtonmoments.dallasnews.com
arlingtonmoments.dallasnews.com
polarismedia.no
registrering.adressa.no
info.adressa.no
polarismedia.no
folk.adressa.no
registrering.adressa.no
polarismedia.no
alogin.adressa.no
id.dolen.no
id-pre.adressa.no
polarismedia.no
id-pre.adressa.no
info.adressa.no
registrering.adressa.no
folk.adressa.no
info.adressa.no
polarismedia.no
id.tv.nu
alogin.adressa.no
gw.adressa.no
info.adressa.no
alogin.adressa.no
studio.adressa.no
id-pre.tv.nu
info.adressa.no
arlingtonmoments.dallasnews.com
info.adressa.no
gratis.adressa.no
godmorgen.adressa.no
folk.adressa.no
studio.adressa.no
godmorgen.adressa.no
torg.adressa.no
info.adressa.no
gratis.adressa.no
alogin.adressa.no
id.schibsted.no
lesertur.adressa.no
gratis.adressa.no
polarismedia.no
gratis.adressa.no
gratis.adressa.no
info.adressa.no
gratis.adressa.no
gratis.adressa.no
folk.adressa.no
torg.adressa.no
alogin.adressa.no
folk.adressa.no
id-pre.bsnett.no
id-pre.tv.nu
id.dolen.no
torg.adressa.no
lesertur.adressa.no
studio.adressa.no
gratis.adressa.no
id.schibsted.no
gratis.adressa.no
registrering.adressa.no
karriere.adressa.no
info.adressa.no
folk.adressa.no
gratis.adressa.no
info.adressa.no
id-pre.byas.no
info.adressa.no
id.tv.nu
registrering.adressa.no
studio.adressa.no
polarismedia.no
gratis.adressa.no
id.dolen.no
lesertur.adressa.no
polarismedia.no
gratis.adressa.no
alogin.adressa.no
folk.adressa.no
id-pre.adressa.no
id.adressa.no
*.adressa.no
id-pre.byas.no

Certificate

The complete raw certificate details for lesertur.adressa.no in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 341221849445111786320207729567449461961374
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-22 09:27:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-22 09:27:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lesertur.adressa.no'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 624286354660497194772949844543720132608007964108091576749071311269017090508646557010835237446673615740409998709690402857221240590448586985018352806456940112637756533477448331614327487837390627215642377934114591117991003518704296363775643020183611404055269907616204922933282723576122557049949672491471330615353950669136384391621044730455005374093344617597775143095196039630989235108701347316229692464818645915118406455412113789316613638548289489372991260704151838904432745192899129807079094832410742546707724390682674352450102912196327558060877208655715601093173133260559298104748299953056489855693963103470104975714697984719616801878849820414480678439644658436539866228225413521836149800185367139084735154639018552794023340144797805098790165765691704275474623467117793199748923966026660618931864681453600047098911532517838074762047400518925277214630246342082054213983581155523819186474601029709138034049864865184151665874397590663311188805924590002318148355798927980156547743735251265365265767566352904122112282876265510655179362252499796357024949645161401704640516067715112825354909496780371477845664394530791025339837853001514259602687040597815657853461053255319613513155381813878801955246144269750216439473838455475512129019930623
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							308472c8897a1c5c4030e4a979f309bba83ff4aa
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lesertur.adressa.no'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000168751a264c0000040300483046022100f4f6ceff358851a394a4af5dad2c95427560ac60bf0871c974ea883a39ddf2d1022100fbb11b18008ec44751e20f95d637dd512835bce9cae20221b71d0ed26adb4ae300760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000168751a26a80000040300473045022100fa93d8a763de1c0491cad24532594f006ad57c3fc24fc4ce6bda8549c72399ff02206c17ea7c32c50e53b11045bf74565ccfdde9280ac9c4326c45e9d04f5a3ebec3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		001ab9fd57c7c703294d220edfb52f305bd21ca6e4f454d882afc41e5ed283f57544dc24ef11616275305e5cbeee2a729e10a84828dff9aaac3bcb7542c193a0da1578f263bc54b27d54775ce5a7f876abbc10661d24a39ddc546dceb64f0fbd9219acd2f94e4496ef59e7e5f9e5ac3bdc7f54e5f6d9fc2517e14edbd4026f2c7c4dadd4fec2989af4c7108df0ab8de9e46580a482f7ff39545b3c9aabb0e0642a00e0060c1b08c42ebc036c29e1ec0270f61474731de8eec9cd5c3304ec43e3dd78153e9c9093b94e90f75067cd5000da3505973679bef5f3ed3a46b9b14bbdd4762d6e01e46e2a8c4ab27a9adeb1069f589378dee30beff10b41b95397144376