afgruppen.no

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 09:b5:3d:1a:5f:88:67:1c:61:bf:70:a9:5d:51:2f:3b was issued on by DigiCert, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=afgruppen.no

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:b5:3d:1a:5f:88:67:1c:61:bf:70:a9:5d:51:2f:3b
Serial Number (int): 12904097009943071551462334541469921083
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: e5:d9:40:4a:07:bc:e6:37:61:09:64:bc:c6:93:ea:d7:ea:f2:f3:a9
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): 40:15:61:70:89:4d:72:70:a3:51:f3:4f:3d:45:8b:cf:66:f3:d7:2d
Fingerprint (sha256): 87:00:3e:03:30:67:b2:04:13:25:a2:39:6c:e5:74:d9:98:88:86:95:f6:e1:ed:0e:6b:eb:54:61:8f:ad:24:af

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate afgruppen.no

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for afgruppen.no

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

afgruppen.no

Other certificates including the domain name afgruppen.no

(limited to 100 certificates)
wrk-mal.videonor.net
wrk-mal.videonor.net
wrk-osl.videonor.net
mail.afgruppen.no
wrk-osl.videonor.net
wrk-mal.videonor.net
afgruppen.no
wrk-osl.videonor.net
wrk-mal.videonor.net
wrk-osl.videonor.net
collab.afgruppen.no
wrk-osl.videonor.net
wrk-mal.videonor.net
wrk-mal.videonor.net
wrk-mal.videonor.net
wrk-mal.videonor.net
afgruppen.no
wrk-mal.videonor.net
wrk-mal.videonor.net
wrk-mal.videonor.net
wrk-mal.videonor.net
*.afgruppen.no
wrk-mal.videonor.net
wrk-osl.videonor.net
wrk-mal.videonor.net
wrk-mal.videonor.net
wrk-mal.videonor.net
wrk-mal.videonor.net
wrk-mal.videonor.net
wrk-osl.videonor.net
mail.afgruppen.no
wrk-osl.videonor.net
wrk-mal.videonor.net
wrk-osl.videonor.net
wrk-mal.videonor.net
wrk-mal.videonor.net
mail.afgruppen.no
wrk-osl.videonor.net
citrix.afgruppen.no
wrk-osl.videonor.net
wrk-mal.videonor.net
wrk-osl.videonor.net
wrk-mal.videonor.net
wrk-mal.videonor.net
wrk-mal.videonor.net
wrk-mal.videonor.net
wrk-osl.videonor.net
wrk-mal.videonor.net
wrk-mal.videonor.net
adfs.afgruppen.no
wrk-osl.videonor.net
wrk-mal.videonor.net
wrk-mal.videonor.net
afgruppen.no
collab.afgruppen.no
afgruppen.no
wrk-osl.videonor.net
wrk-mal.videonor.net
wrk-mal.videonor.net
wrk-mal.videonor.net
wrk-mal.videonor.net
wrk-osl.videonor.net
wrk-mal.videonor.net
wrk-osl.videonor.net
www.afgruppen.no
wrk-osl.videonor.net
afgruppen.no
wrk-osl.videonor.net
wrk-mal.videonor.net
wrk-mal.videonor.net
afgruppen.no
wrk-mal.videonor.net
citrix.afgruppen.no
wrk-osl.videonor.net
collab.afgruppen.no
*.afgruppen.no
wrk-mal.videonor.net
app.afgruppen.no
wrk-mal.videonor.net
*.afgruppen.no
wrk-osl.videonor.net
*.afgruppen.no
citrix.afgruppen.no
afgruppen.no
wrk-osl.videonor.net
wrk-mal.videonor.net
wrk-osl.videonor.net
wrk-mal.videonor.net
sip.afgruppen.no
wrk-mal.videonor.net
citrix.afgruppen.no
wrk-osl.videonor.net
wrk-osl.videonor.net
app.afgruppen.no
wrk-osl.videonor.net
wrk-osl.videonor.net
wrk-mal.videonor.net
wrk-mal.videonor.net
afgruppen.no
afgruppen.no

Certificate

The complete raw certificate details for afgruppen.no in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuppkS2jzxIRTk1TkDJZL
0r3yoYdir+cIz9ooIJOgZ11LCDi3qg5WxvFxS7iDNIKqc02Kb62J+YAFrth/O026
4yuoGmuwDICGw4CPqE3APOvmneE42hZlNMZnXZRHj5PB4mG72faBvOE8G54aOVJd
+QJNZyAqcP5WGGcRyoY3E4q94b7DEWH0ag7PlA0VkI7nYUyN10oTIVz3DPqmsXT8
r35XzrO92CKDSBw+SF28kfkwXIMeYY93xwSyBzUzfrY9S9/cl3zXDM0FyhnLO3RV
A6v4X0HEdAroHK2eZABADigfqH55FArfZb5hOIDjX4fQGk682j2NJUkcnv9z4ENF
MQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12904097009943071551462334541469921083
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-15 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-15 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'afgruppen.no'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23556458145798727061133048201877609489722275444933531988898144683188806876424002180183417629652961164524600956115116762515241100475238006504065395399695445901719086627305918416678188898595869003190555766873899733795994578219432767059894926333699525661223728096085925821935847612712702411990959636165510745341647771920578924570765730216330184393450281372223523741745334584211605935202535613965622106664105201449852303280481673803341816092413467119367706454671928737154123185553787819727314202883951554740078404931512249594909796865461893943054648941749768774965279239699001314012730073416602042839726676859506542200113
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e5d9404a07bce637610964bcc693ead7eaf2f3a9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afgruppen.no'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		002d84857efe47e6bbfc75ac5c75f8c8ed6f7b1195c62bedd8e6cf64901d66aaec941f100c174edaea1828afe547b88b944717d09c62ab3cc885841058a129303e1d34aef91c819ef854865329c5f79c3d1093450d1c0de9969df123ef38c3ae6b6bf2125076713c33a8d2ba260799c5a1f080a678eaf3bdf47ab6bf0ff9222dccb9f77c6766d193899fac29b0b2166c6f27c5bb65a4a3f3229239b124ed6d86ee3c9bb66c2bcaa9fb3325b4b917bbb5ebf4760247fca84ac418732e259daed8426b1c3adde7146a3b5d2abf0ea24b41869015132f43f42d16df8e9cd1f2463acd9d4a0e18514fdd7063e15b348d69a03f99ed8205d78bd91d22791aad4a98663cd81da95959fd2bd1c2be90b8cf8f008d1600064e1970a6865aa58f83c5ec6a82de762ab76136d73374bea864dbf274a9c1d2f062a6ed25f3a064737fb0147cf2d9bb1eaf9f351ec6d22ed09df411e19a4257ac9cce05156ad647e19ba3b2bea772632945a7869ca12a8eca379f7809207eff4fa7bfa5c4adb1bbe43267255c7727cf0dde08131039f9e709974b6cf19150dec133e91210835e98bf82041722057a958ac6703fcca81bd2452f269bbabeed7c0404ad746ec77cfb5264ae9ad87c1e68dcbc697cdd63d63adeabf1c1d6f2ba1bf85ffa1210adee8938d233f5b8c0521846043770ab1a82db9c0628c995560cb5899114fad4356462be86a6ef65df