chemikalen.no

Issued by StartCom Class 1 DV Server CA

About this certificate

This digital certificate with serial number 62:66:95:1e:98:bf:e4:bf:89:36:8d:e0:aa:fd:22:24 was issued on by StartCom Ltd..

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=chemikalen.no,C=NO

StartCom Ltd.

Organization: StartCom Ltd.
Organization unit: StartCom Certification Authority
Country: IL

This certificate has expire since

Certificate Details

Serial Number (hex): 62:66:95:1e:98:bf:e4:bf:89:36:8d:e0:aa:fd:22:24
Serial Number (int): 130796982369641834046670801484002435620
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 16:e7:4b:23:81:1f:4e:8c:80:d5:73:60:d5:bc:04:2f:7b:3a:c5:4b
AuthorityKeyId: d7:91:4e:01:c4:b0:bf:f8:c8:67:93:44:9c:e7:33:fa:ad:93:0c:af

Fingerprint (sha1): a2:ae:53:02:77:25:d3:15:20:fb:28:19:55:98:02:d1:40:89:3b:99
Fingerprint (sha256): 89:2d:fa:5c:33:a4:7f:d3:c3:89:fd:3e:de:b9:48:d9:a1:84:d5:16:1a:6f:a9:5a:bf:92:70:33:2f:dc:e1:6a

Issuing Certificate URL: http://aia.startssl.com/certs/sca.server1.crt

Revocation information

OCSP Server: http://ocsp.startssl.com
CRL Distribution Point: http://crl.startssl.com/sca-server1.crl

Check the revocation status for certificate chemikalen.no

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for chemikalen.no

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

11 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

chemikalen.no
chit.no
ac.chemie.no
protokoll.chemie.no
register.chemie.no

Other certificates including the domain name chemikalen.no

(limited to 100 certificates)
chemikalen.no
chemikalen.no
chemikalen.no

Certificate

The complete raw certificate details for chemikalen.no in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 130796982369641834046670801484002435620
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Ltd.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Certification Authority'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Class 1 DV Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-08-25 00:59:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-08-25 00:59:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'chemikalen.no'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 695388672405170176944946236183815366195979413211708121185879745146250390450722264467276145482282559187571590084821828483352804844621312455753518877409645879077015701072841356852980436819730351061209745957040329391157923076493316257988958846418657503704237004094144558191340543680405784759102426665582674168149474213015324387005296612320638742867406091943006693144181061255670832884264926363606732525986825166176102884727298187521233934093776460510817676134424230830718832507553887357560285738387368613893797774304230884059725391185525116338405892663032133017056711547420683117339309794987003126172979438433106938551046611405637019049431582997999773542439398237465063359957685210413189760199941319553501684035076280384876137447321244671045697198649518495656746163566887949570209489661075881444873889469065187239412652659879519793758689281585578596122748469214022163593688557259825705465603832349027946311124198842305984572341011966992059905917248355598997502944797403833778583029953118054772069640128393314075379068488528754579419589256322739387877066323123387105261612413320975539815551348166989593715260316477710670318829155617503677229178223207417951452847011009560012426882029587308757181563014538843749069871561882475935308820103
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							16e74b23811f4e8c80d57360d5bc042f7b3ac54b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d7914e01c4b0bff8c86793449ce733faad930caf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.startssl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.startssl.com/certs/sca.server1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.startssl.com/sca-server1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (81 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chemikalen.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chit.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ac.chemie.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'protokoll.chemie.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'register.chemie.no'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.18 (issuerAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.startssl.com/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.23223.1.2.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.startssl.com/policy'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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