norma.novonordiskfonden.dk

- Novo Holdings A/S -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0a:09:98:b6:ed:1b:0f:41:fb:6a:85:91:cc:0a:75:f7 was issued on by DigiCert Inc.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Novo Holdings A/S

Organization: Novo Holdings A/S
Locality: Hellerup
Country: DK

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0a:09:98:b6:ed:1b:0f:41:fb:6a:85:91:cc:0a:75:f7
Serial Number (int): 13342108048741965205149150500541330935
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 86:d0:a4:ab:56:be:cb:60:ec:99:7f:59:da:8d:27:b4:95:ac:4c:ed
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): ff:6b:94:f5:37:a0:05:2f:b2:d2:e5:76:35:4e:fd:29:b8:6f:16:80
Fingerprint (sha256): 7a:58:db:a3:5d:5d:53:26:2a:41:35:8e:70:0f:28:21:3e:ad:ae:fe:b6:d0:89:31:63:6f:ab:2d:2b:48:ce:5a

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate norma.novonordiskfonden.dk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for norma.novonordiskfonden.dk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

norma.novonordiskfonden.dk

Other certificates including the domain name novonordiskfonden.dk

(limited to 100 certificates)
novonordiskfonden.dk
novonordiskfonden.dk
novonordiskfonden.dk
*.novonordiskfonden.dk
ansogning.novonordiskfonden.dk
novonordiskfonden.dk
novonordiskfonden.dk
novonordiskfonden.dk
novonordiskfonden.dk
novonordiskfonden.dk
*.novonordiskfonden.dk
norma.novonordiskfonden.dk
budgets.novonordiskfonden.dk
ansogning.novonordiskfonden.dk
fond.novonordiskfonden.dk
novonordiskfonden.dk
application.novonordiskfonden.dk
impact.novonordiskfonden.dk
novonordiskfonden.dk
steno.novonordiskfonden.dk
steno.novonordiskfonden.dk
*.novonordiskfonden.dk
impact.novonordiskfonden.dk
novonordiskfonden.dk
norma.novonordiskfonden.dk
nnf-gpt.novonordiskfonden.dk
*.novonordiskfonden.dk
cbc.novonordiskfonden.dk
novonordiskfonden.dk
application.novonordiskfonden.dk
application.novonordiskfonden.dk
impact.novonordiskfonden.dk
norma.novonordiskfonden.dk
survey.novonordiskfonden.dk
application.novonordiskfonden.dk
nnf-gpt-test.novonordiskfonden.dk
impact.novonordiskfonden.dk
novonordiskfonden.dk

Certificate

The complete raw certificate details for norma.novonordiskfonden.dk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvE/RqUExKImT0cpMldVV
M6SpHwCpcE4GvAVz9rp2IqqQxNUrePlwBBO86vGv7jwSNfZdf1s7nxSCB/6vHIOw
Zl9L1uqgG4e93FtC/zYB77zdRVZA+jG2btHJcrUGroW4lxwcU3llj1H9TIvCnGcN
MoFWlepJS7sPMid5Iw5pDOPpFpUclExItHGQCgH8+rhOdCxzFqXHTDr9uTwsy9lL
wVGGGdUVl+ZHqUBDdVLq7p15TRkhQW8kVlbsHENFjx7+XhQTV0n5E0dDm1ZQMu+S
t0K9xe8gPu2N8YFj2mDGbIP6CQFBBr7Y31aylpNYme1/ga0L5rFdcij5F5W28250
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13342108048741965205149150500541330935
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-21 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DK'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hellerup'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Novo Holdings A/S'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'norma.novonordiskfonden.dk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23772161544006490674837883449073297382627898132059697637247006388454842585902788762212939300794835747474952592265867553008421048775522458104173691229084277737813361113793360266683763209033166093252102312010641163517627408121451306369399231623081927706729466873382531462193885910776317894221236143719402978744860102356689043943268107193089581294382829561492893279397304984651009572839341143069331937115753392386891872136908660589752387305423647483283588126337470154266204063136355292570111461480209347703216820839611783396732893076564117985859253581427085434349063007917824554103425994206472173352407812348605396579413
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							86d0a4ab56becb60ec997f59da8d27b495ac4ced
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'norma.novonordiskfonden.dk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00837b0a5b5116ac3d3db4787b7b07dd22ca2701fbb02d4bc1cd266e9eafbe71634f784b1385340793f774fca48d0f6b77dd93e90cb4d0d8d78d9cc1c1ada104d24d9d604e7dc1a8bd60c230735f8cf33b8d4007e6cd45f31b90e0cf48b095fed210179e9af86b2e3fb11a078b005bb1a7c7e8f257dfa632ea53b44787080764b095dfe9215a9c327b5f5d519efaf0b9c6a212180fe92afa79865d55d75212bf25f1986c8e3e14ee79fac4da7659f2a0769594f0755bc94fe764d464c478d3afc1b5fdf10df7dc5a7cb9a9475e3a57ae972342ed39a544ecc00707026d85919be7f233e34e81d4b60462b3b37d968ea5750d89fd006e1f99ffc0e54ebd99a3d2d3