tek.no

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:42:0c:21:a9:42:f5:49:e2:15:56:a1:5c:34:d9:f5:7e:4a was issued on by Let's Encrypt.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tek.no

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:42:0c:21:a9:42:f5:49:e2:15:56:a1:5c:34:d9:f5:7e:4a
Serial Number (int): 283811619526840624057954268253251905617482
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 5d:32:c3:3e:a0:17:f0:1e:16:da:a9:9e:56:e6:13:97:cf:ca:bb:61
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a3:6a:c3:39:06:ec:a3:bf:5b:db:88:cc:03:61:a8:e6:eb:ff:c3:83
Fingerprint (sha256): 90:03:ad:78:a1:b8:8c:95:0e:eb:3d:5e:b2:84:46:22:66:75:0d:2b:30:11:57:0b:7f:3e:d6:d8:ce:32:dd:ed

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate tek.no

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tek.no

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

auth.tek.no
min.tek.no
neo.tek.no
search.tek.no
static.tek.no
tek.no
www.tek.no

Other certificates including the domain name tek.no

(limited to 100 certificates)
cmp.aftenbladet.no
*.tek.no
id.aboutme.schibsted.com
cmp.aftenbladet.no
cmp.aftenbladet.no
tek.no
cmp.aftenbladet.no
tek.no
cmp.aftenbladet.no
id.tek.no
*.new.tek.no
cmp.aftenbladet.no
tek.no
cmp.aftenbladet.no
tek.no
cdn.tek.no
cmp.aftenbladet.no
auth.tek.no
ish.tek.no
id.tek.no
cmp.aftenbladet.no
cmp.aftenbladet.no
tek.no
cmp.aftenbladet.no
id.aboutme.schibsted.com
id.aboutme.schibsted.com
cmp.aftenbladet.no
tek.no
tek.no
tek.no
*.new.tek.no
cmp.aftenbladet.no
cdn-yams.new.tek.no
tek.no
id.aboutme.schibsted.com
new.tek.no
tek.no
cmp.aftenbladet.no
cmp.aftenbladet.no
cdn-yams.tek.no
cmp.aftenbladet.no
cmp.aftenbladet.no
tek.no
mail.tek.no
4.session-service.identity-pre.schibsted.com
tek.no
cmp.aftenbladet.no
*.tek.no
cmp.aftenbladet.no
cmp.aftenbladet.no
*.new.tek.no
tek.no
id.aboutme.schibsted.com
cmp.aftenbladet.no
cmp.aftenbladet.no
cmp.aftenbladet.no
cmp.aftenbladet.no
prisguide.tek.no
cmp.aftenbladet.no
tek.no
cmp.aftenbladet.no
id.aboutme.schibsted.com
cmp.aftenbladet.no
tek.no
cmp.aftenbladet.no
cmp.aftenbladet.no
tek.no
cmp.aftenbladet.no
cmp.aftenbladet.no
id.aboutme.schibsted.com
new.tek.no
tek.no
tek.no
tek.no
cmp.aftenbladet.no
cmp.aftenbladet.no
id.aboutme.schibsted.com
tek.no
cmp.aftenbladet.no
cmp.aftenbladet.no
new.tek.no
tek.no
tek.no
id.aboutme.schibsted.com
id.aboutme.schibsted.com
ish.tek.no
cmp.aftenbladet.no
cmp.aftenbladet.no
ish.tek.no
tek.no
id.aboutme.schibsted.com
tek.no
cmp.aftenbladet.no
tek.no
cmp.aftenbladet.no
cmp.aftenbladet.no
tek.no
new.tek.no
ish.tek.no
tek.no

Certificate

The complete raw certificate details for tek.no in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 283811619526840624057954268253251905617482
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-11 08:06:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-10 08:06:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tek.no'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 799358178038582238283508594230187579917291122585886374375212828624051473022943813070067057834395619622564729927493592966748261140120480265067882511407367155434398330444198108824276103848441323530851796258878465158610294356367902827482154446734881062410996994254384901439726671032716465227416429624994225427195271514460514101981769710346116766689350022858599120167408876110804248163827638063486182627813414167586747319658333212828894710664957167923807999308007301907363565307604230731837406837018001186147773856643882488845648564262572591210081051360399392615392452667000063932355481220764300509459050836112716683411861171608104541618188897383166790524341844123885056572923308557220416046992515763046774082878038937637312428306975487819439009348847408771447735537803044489683731418654059711407135979590859630462964811535561200894763228894947957733437726532170848491037267038749109478250774563779927838033248712707774035219722573722927445484776482041572399355564751057809692362843204802174949829756338858534442289095812831353080872510081497736749138070792353587130340727755047330087024463107042315091820819584756727429004001018334325338194916316372045751497598338239794514848272532184672349728781826242079853082665286895933670195814331
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5d32c33ea017f01e16daa99e56e61397cfcabb61
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (89 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.tek.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'min.tek.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neo.tek.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'search.tek.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.tek.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tek.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tek.no'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf6400000162b3f4ae87000004030047304502202ba7f3b625a67ede707ed0ba4490b884733751d242e2aede09200e38b9310ace022100cd1e3fef335bce7ec162244090e909e25f849f8e03be672f8b78ca5543debe12007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000162b3f4af250000040300473045022100cbffa322a0b047fa8a943357371d158724c5957022453e07a3277914b3aaf88d022011586e49690b2dd125e5018be6880364a7cf9baaa6844d5b6f25a7a7425a039c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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