gitlab.sikt.no

- Sikt - Kunnskapssektorens tjenesteleverandør -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number 33:5c:08:ad:2a:a0:9b:84:19:18:e2:f7:92:2d:88:23 was issued on by GEANT Vereniging.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Sikt - Kunnskapssektorens tjenesteleverandør

Organization: Sikt - Kunnskapssektorens tjenesteleverandør
State / Province: Trøndelag
Country: NO

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 33:5c:08:ad:2a:a0:9b:84:19:18:e2:f7:92:2d:88:23
Serial Number (int): 68268495074957390788231101880088758307
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: c9:0d:7b:f0:87:ab:18:3d:92:cc:b8:b8:d1:ff:b5:4a:40:6f:02:4c
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): db:8a:10:01:0e:ae:01:fb:0c:26:14:10:ba:bf:33:20:8c:d5:d6:bf
Fingerprint (sha256): 81:56:3e:01:c5:ee:19:35:19:78:43:02:e8:1b:6a:62:a2:51:63:4c:cb:87:5b:f6:24:1c:6e:69:03:ac:96:58

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate gitlab.sikt.no

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gitlab.sikt.no

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gitlab.sikt.no
scm.uninett.no

Other certificates including the domain name sikt.no

(limited to 100 certificates)
surveybanken.nsd.no
sikt.no
sikt.no
sikt.no
feidehotell1.sikt.no
polsys.sikt.no
sikt.no
matomo.sikt.no
sikt.no
skolevalg.sikt.no
*.nva.sikt.no
ess.nsd.no
rdakatalogisering.sikt.no
www.sikt.no
sikt.no
gitlab.sikt.no
sikt.no
sikt.no
matomo.sikt.no
skolevalg.sikt.no
filesender.sikt.no
sikt.no
gitlab.sikt.no
sikt.no
sikt.no
skolevalg.nsd.no
sikt.no
old.sikt.no

Certificate

The complete raw certificate details for gitlab.sikt.no in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGNSkndoDTv/hJKrFSd3
fNg+caOw3miXrp8un8nlpurpo5ekGAgRWCnFf68XZhoIlPQs4sac7pI1OpmtelTP
wGcu9WmD0U3eoshlJivIKXbp2qNzgNMrys3utu5BkZ0HNrkuhNECrrxMyMdgyls5
8kd/6D2NG7QbpZ537TOeixe0u48CsFnARi+p9+0P+jykEWrWKaF4CMdUK37ebFco
d60tY+zEztjjmzhGGO72eS+mX7xHCAabTnxIyclWA8sT2hUPvzacPw/tyZu6jbkk
rZv1pHkrxIvAK8F9Qqf1oKw5mhpDV6PW4BkWWPORIOkVr/8xbRi7y5bhO4Mm2rNE
EwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 68268495074957390788231101880088758307
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-09 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Trøndelag'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Sikt - Kunnskapssektorens tjenesteleverandør'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gitlab.sikt.no'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23781779107168768138323949791969988807250148150129673876400644320000999661896024033766475477767521556232693868277349942007769756250574519830110335357985721575055717146516713564731848849484883058197648646613736629166122578823685114688927240415389660569029010707868349143212694379883959754188827132961811614731892174166334268405568258481764759994257952072139671671780750392299484866216262590076153798470825997907550605333832069904934546520649839908398833125384976737095246271406153683802158625943436946668519016460532255656995477903625337202397765722775179047868412896939039740243303106276293235631796113772899040707603
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c90d7bf087ab183d92ccb8b8d1ffb54a406f024c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gitlab.sikt.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scm.uninett.no'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		008054b140eedf17f7b8cc147c42a2b422fd083f37df20b6b16e12bf74220bad72b1564ba4116e829e20207021882529e8eef09922858fdc9b3967444ba329b3886f127c1363414e73827964f96681ae9b1a05a098073cd032be62aca0a67c790ca8ba9d80e475276d3c08b0bffb739e2fae0c3f3951b3b8e9a855216b29d041b8b53d1b1b22b65389dde8bdff9d59402506f7ac8ad23323b3c8b848a070489bc67debbef0692d433e1fad8e2c9512e96dc11bbb66062e1c0d5b0e55e36fb3a4581aa67c5bb7061bd33521ea5b4afcc62c7a574d6b537275c9a06a3a11ad14d4922a3411d0ba49c0487f5329b3c5ac4089b48eb1366973a3cb4d44c30198db8272235416b496f1bb9d149e056641aa07d50a45c2ae53886a1ffbda34507f9f67653c7e79910bcecd065cc35abf5c5093a76c225e607707d592385ef3a30bae462765fdcc1347b37ab5f945106eda4f1b9be1af4ca8ad7adc5cf50d83299ae9fc0f7b56fd86646d03e0cc7fef4a1032e5476b763f3b73d3813f4d127b5a66239baa510b1bcb8b1caa2da56e59008f0ecf47f1ec010bc0d05d7ff4fea4120da47e962925bd9fc9406ed90f6cc2f9651b2ae93b3fdf16ca5b17b9bc24097b53f08f874af79cec90f9ccc9a49f024416b7d0f7eba6e9f602e44f0414b525330c333e1d6c48db0f3ffa7e81e6022f8c151783ce0eb1944a23e92a33ddf12a9d9818d26e