ipt-test.gbif.no

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:6a:56:26:18:fa:26:57:e0:ad:ce:a2:4f:42:ab:74:27:95 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ipt-test.gbif.no

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:6a:56:26:18:fa:26:57:e0:ad:ce:a2:4f:42:ab:74:27:95
Serial Number (int): 297521300110415081939650979057897879906197
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3d:d6:a9:bc:e8:3e:bb:57:58:cf:67:5b:b2:44:1a:c2:d4:f1:06:b2
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 44:ea:1d:b0:52:1c:c9:4a:ad:34:36:6e:a2:48:67:6d:77:29:cb:16
Fingerprint (sha256): 80:0d:38:d8:75:d8:d0:6c:37:6d:59:f9:a6:fe:26:c4:55:57:03:af:fd:15:41:a4:0a:93:f2:b4:33:c8:24:f3

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate ipt-test.gbif.no

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ipt-test.gbif.no

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ipt-test.gbif.no

Other certificates including the domain name gbif.no

(limited to 100 certificates)
www-adm.1700-tallet.no
ipt.gbif.no
www-adm.gbif.no
data.gbif.no
dugnad.gbif.no
gbif.no
data.gbif.no
data.gbif.no
www-adm.1700-tallet.no
dugnad.gbif.no
data.gbif.no
data.gbif.no
ipt.gbif.no
1700-tallet.no
www.uhit.no
data.gbif.no
1700-tallet.no
www-adm.1700-tallet.no
data.gbif.no
1700-tallet.no
data.gbif.no
data.gbif.no
ipt.gbif.no
dugnad.gbif.no
dugnad.gbif.no
1700-tallet.no
data.gbif.no
gbif.no
data.gbif.no
www-adm.gbif.no
gbif.no
www-adm.1700-tallet.no
gbif.no
www-adm.gbif.no
ipt-biodata.gbif.no
www-adm.gbif.no
ipt-test.gbif.no
dugnad.gbif.no
www-adm.1700-tallet.no
www.1700-tallet.no
ipt-test.gbif.no
ipt-biodata.gbif.no
data.gbif.no
www-adm.1700-tallet.no
www.fsat.no
dugnad.gbif.no
www-adm.1700-tallet.no
www-adm.1700-tallet.no
dugnad.gbif.no
ipt-biodata.gbif.no
ipt-test.gbif.no
1700-tallet.no
1700-tallet.no
www.fsat.no
resolver.gbif.no
www-adm.1700-tallet.no
www-adm.1700-tallet.no
data.gbif.no
data.gbif.no
data.gbif.no
1700-tallet.no
data.gbif.no
1700-tallet.no
data.gbif.no
www-dav.gbif.no
1700-tallet.no
data.gbif.no
ipt.gbif.no
dugnad.gbif.no
data.gbif.no
www-dav.sensorportalen.uio.no
www-dav.gbif.no
data.gbif.no
data.gbif.no

Certificate

The complete raw certificate details for ipt-test.gbif.no in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 297521300110415081939650979057897879906197
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-25 03:43:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-25 03:43:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ipt-test.gbif.no'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 724351072236887352173991344561570865682733401821097017102129074755867017181028076373047751577949238887887215176470231266778261746507003857834154620661755803295625904893614338659364453294887343139708816266964268275010336731685641445319063000034960490402863591587104716947828213462080629002999865060565140161878820691333617626705424219084153521977748695395498354288412497538129227359391024930905001161093752819039071117936000634892045614494307716300208328881763936827786612729042823906404149021438430272354643426003741941364291225349139389655583394568036513071303400585023990031504640692726805405991748220596582577317751418555405626237156126288709030078733528090352122340108875162841374230441976797035048151942340989931049868965910443373325348578925663109390452652561025803682336995150381538719679350904895995931007326785877445586568902789338376724379947890252070870282427033705031677404164353511895038202455988316632047595445430209524296876229039682552720213166156534765735776648541695267953247240146700399014007662509387966286770631065081569328642471538265451675626261204508536731652342157493890209172767526958799491313627233110767895718740283845069144577857689128383843672379632361163876567607560193438719068975478209765984531036953
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3dd6a9bce83ebb5758cf675bb2441ac2d4f106b2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipt-test.gbif.no'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e000001707aa85aea000004030046304402200730770277b5ea48909d22a37a80edf367bacdbf3bad2e5d44d0b94f2c76d2cf0220710b92af9856b278a020750080a92d9384579a1439126b166ce68c7de8d5044f007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001707aa85adf0000040300473045022100ed5e711f5b15aaae19027d7de3d2fff559305e43ef1e1a2892f9354a00257c3a02201aa9c0965e26a71c73d9a9001a75e7fe0e7039a6d4d7e0cc1a302596ce02c6c9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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