sikt.no

- Sikt - Kunnskapssektorens tjenesteleverandør -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number d7:0f:94:89:8f:d9:6e:2f:65:c7:05:17:49:9a:c5:98 was issued on by GEANT Vereniging.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Sikt - Kunnskapssektorens tjenesteleverandør

Organization: Sikt - Kunnskapssektorens tjenesteleverandør
State / Province: Trøndelag
Country: NO

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): d7:0f:94:89:8f:d9:6e:2f:65:c7:05:17:49:9a:c5:98
Serial Number (int): 285864916242033753632136112513574684056
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 48:37:ef:30:56:88:0e:53:e4:a3:b5:6e:52:58:01:cb:c8:98:a6:3c
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): 35:e3:c0:f2:86:8d:97:35:74:9f:12:95:7b:b4:36:28:a2:cc:91:8c
Fingerprint (sha256): 82:91:7f:51:ac:78:6a:39:7e:2b:49:29:40:df:7a:0d:f1:f1:e9:ed:60:d1:2d:53:88:26:4a:7e:82:9a:46:ff

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate sikt.no

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sikt.no

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sikt.no
www.sikt.no

Other certificates including the domain name sikt.no

(limited to 100 certificates)
surveybanken.nsd.no
sikt.no
sikt.no
sikt.no
feidehotell1.sikt.no
polsys.sikt.no
sikt.no
matomo.sikt.no
sikt.no
skolevalg.sikt.no
*.nva.sikt.no
ess.nsd.no
rdakatalogisering.sikt.no
www.sikt.no
sikt.no
gitlab.sikt.no
sikt.no
sikt.no
matomo.sikt.no
skolevalg.sikt.no
filesender.sikt.no
sikt.no
gitlab.sikt.no
sikt.no
sikt.no
skolevalg.nsd.no
sikt.no
old.sikt.no

Certificate

The complete raw certificate details for sikt.no in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsL4VU6dBUrP3JsD0CVCW
qpiMUl82oMh6kdqaAeshkcC0w/bMF+U+mLq+58y4R6Lq4L8k/y0KyiB0a2UHhy2r
rHasQaEjhWpaFJdlXcnX4q5pXJn1b2xG/tN3CYQVhLM3Oe7niUkJ3UVHBGFvjToC
tpMEJUszun3ggm+Y6uwEEsoYlIg9KbDZJyFYslEyWtKIC3QIBH/BPLsT8IQfXmUr
vrDkN3D6a26lsF9YZbzcYQyi047hCzimXBkMmUDiESPnR41KD0a1ycr0Ry8lCVHI
4cydQ09lJL/u5QAnspuolf9uAf/GnaslwtDda1pDJjNUfOZKqL2P1GdemfmlTZJI
7QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 285864916242033753632136112513574684056
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-16 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Trøndelag'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Sikt - Kunnskapssektorens tjenesteleverandør'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sikt.no'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22311675246550625157182329195373584188888350892106710486156182080641084278022572179384847875405983086892420122834282087425266599046238486058531730981486845228683216076153153949510383909656869621156573215551199126023349412009914754845092411713883487044081700920120211091096029271203897038222933984950641880078069254349784062255019768053637714617002958834345744829234096533766511989813770131871097015569162855367881935071037390240736921055400214034686849490535249936972604738658401837943590898689335350275988369090685917449225479782404568415334305284209518596896877606621316629553593166002548455920657623172277058291949
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4837ef3056880e53e4a3b56e525801cbc898a63c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sikt.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sikt.no'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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