beta.rutebanken.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:93:04:f5:80:f7:d1:29:4a:74:6a:cf:59:62:ec:80:25:cd was issued on by Let's Encrypt.

With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=beta.rutebanken.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:93:04:f5:80:f7:d1:29:4a:74:6a:cf:59:62:ec:80:25:cd
Serial Number (int): 311364957373154692458299380483396519077325
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ae:92:1a:cc:96:26:3a:c4:14:96:93:19:a8:85:d0:fb:27:e5:af:67
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): eb:78:9d:a7:df:94:9f:07:0c:10:e7:ec:ce:c9:ea:8f:6e:41:a3:96
Fingerprint (sha256): 8f:e4:31:9a:38:34:df:fb:ec:fe:4b:01:0b:ca:04:5a:04:ec:e5:6d:ce:d7:a8:32:c8:d5:14:b3:69:81:47:6d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate beta.rutebanken.org

12

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for beta.rutebanken.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api.entur.org
api.rutebanken.org
beta.rutebanken.org
dit.no
otpdebug.entur.org
otpdebug.rutebanken.org
rt.rutebanken.org
rutedb.entur.org
rutedb.rutebanken.org
stoppested.entur.org
stoppested.rutebanken.org
www.dit.no

Other certificates including the domain name rutebanken.org

(limited to 100 certificates)
carbon.rutebanken.org
beta.rutebanken.org
dr.rutebanken.org
operator-test.rutebanken.org
dr.rutebanken.org
operator.rutebanken.org
carbon.rutebanken.org
carbon.rutebanken.org
operator.rutebanken.org
carbon.rutebanken.org
operator-test.rutebanken.org
beta.rutebanken.org
operator.rutebanken.org
carbon.rutebanken.org
dr.rutebanken.org
dr.rutebanken.org
nexus.rutebanken.org
beta.rutebanken.org
beta.rutebanken.org
jump.rutebanken.org
rutebanken.org
beta.rutebanken.org
carbon.rutebanken.org
carbon.rutebanken.org
operator.rutebanken.org
beta.rutebanken.org
carbon.rutebanken.org
carbon.rutebanken.org
carbon.rutebanken.org
beta.rutebanken.org
beta.rutebanken.org
operator.rutebanken.org
beta.rutebanken.org
dr.rutebanken.org
operator-test.rutebanken.org
nexus.rutebanken.org
carbon.rutebanken.org
beta.rutebanken.org
carbon.rutebanken.org
beta.rutebanken.org
carbon.rutebanken.org
dr.rutebanken.org
carbon.rutebanken.org
carbon.rutebanken.org
operator-test.rutebanken.org
beta.rutebanken.org
beta.rutebanken.org
carbon.rutebanken.org
dr.rutebanken.org
operator-test.rutebanken.org
dr.rutebanken.org
beta.rutebanken.org
beta.rutebanken.org
carbon.rutebanken.org
beta.rutebanken.org
dr.rutebanken.org
beta.rutebanken.org
beta.rutebanken.org
beta.rutebanken.org
dr.rutebanken.org
beta.rutebanken.org
beta.rutebanken.org
operator.rutebanken.org
operator.rutebanken.org
operator-test.rutebanken.org
carbon.rutebanken.org
operator.rutebanken.org
beta.rutebanken.org
beta.rutebanken.org
operator.rutebanken.org
carbon.rutebanken.org
beta.rutebanken.org
beta.rutebanken.org
carbon.rutebanken.org
operator.rutebanken.org
dr.rutebanken.org
dr.rutebanken.org
carbon.rutebanken.org
beta.rutebanken.org
operator.rutebanken.org
carbon.rutebanken.org
dr.rutebanken.org
beta.rutebanken.org
operator.rutebanken.org
carbon.rutebanken.org

Certificate

The complete raw certificate details for beta.rutebanken.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 311364957373154692458299380483396519077325
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-08-06 09:18:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-04 09:18:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'beta.rutebanken.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 789863762088128338060803959802266833771540242334681798499192022677739225710059834677808863201312395855150053555836771579847933755945135868209719753134830331108076957057731427026021045162074225147361359287719352951837816864580074201395582619711592477544694842490249507637337378137299027612949020473556778204065268430006825191058064840038663766279167520979735952166409357348290282432399627100738735845249629648161309443206115228812650802082380541378450067761322138052316933922314622992994616615249937350532153254640083283497279644136048808855831299088597603545745077323492815415236880982516679066350770379892679878223976198224017915097408083151573256200560478870429539489293698957518061717881718395619249080603282013823429012557024997419125334343716383714524798185042509679910875301329663611317347006733999250999276496814387223105730082484314456330231148303985725704449907089239792759339729800880393890785991127872247508536189092437898515708400402531889591241647200571572302452484981168265112075458982461718770173690566788680792877545824901305657175876706772630777395699362126598331664820305058566784878403676186009223804838335662207340756734377045863223774061256695535828918207845126090876602731612578816188128128798219097210056712943
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ae921acc96263ac414969319a885d0fb27e5af67
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (233 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.entur.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.rutebanken.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.rutebanken.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dit.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otpdebug.entur.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otpdebug.rutebanken.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rt.rutebanken.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rutedb.entur.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rutedb.rutebanken.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stoppested.entur.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stoppested.rutebanken.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dit.no'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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