webstatistics.fsat.no

- Universitetet i Oslo -

Issued by TERENA SSL CA 3

About this certificate

This digital certificate with serial number 0f:79:8e:ea:3a:40:7d:28:e6:d9:87:ac:18:dd:1f:eb was issued on by TERENA.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Universitetet i Oslo

Organization: Universitetet i Oslo
Organization unit: FSAT
State / Province: Oslo
Locality: Oslo
Country: NO

TERENA

Organization: TERENA
State / Province: Noord-Holland
Locality: Amsterdam
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:79:8e:ea:3a:40:7d:28:e6:d9:87:ac:18:dd:1f:eb
Serial Number (int): 20569586516238291984072441138150973419
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 4c:55:4c:54:36:a6:87:73:8e:c0:c2:4a:d3:53:16:a2:8b:15:f2:d7
AuthorityKeyId: 67:fd:88:20:14:27:98:c7:09:d2:25:19:bb:e9:51:11:63:75:50:62

Fingerprint (sha1): b1:02:c5:74:e4:83:a4:f3:18:12:72:2a:45:22:29:13:69:c3:eb:bb
Fingerprint (sha256): 91:ad:4a:f2:d2:61:9a:f7:37:03:35:58:2c:6d:e6:72:5f:99:14:04:8b:6b:3a:26:6c:0f:19:ca:e3:c5:1a:06

Issuing Certificate URL: http://cacerts.digicert.com/TERENASSLCA3.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/TERENASSLCA3.crl
CRL Distribution Point: http://crl4.digicert.com/TERENASSLCA3.crl

Check the revocation status for certificate webstatistics.fsat.no

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for webstatistics.fsat.no

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

webstatistics.fsat.no

Other certificates including the domain name fsat.no

(limited to 100 certificates)
www.uhit.no
www-adm.gbif.no
www.uhit.no
www.uhit.no
webstatistics.fsat.no
www-adm.1700-tallet.no
1700-tallet.no
www.uhit.no
1700-tallet.no
www.uhit.no
1700-tallet.no
docker-demo.fsat.no
matomo.sikt.no
hjelp.fsat.no
www.uhit.no
docker-demo.fsat.no
hjelp.fsat.no
docker-demo.fsat.no
hjelp.fsat.no
1700-tallet.no
www-adm.gbif.no
www-adm.1700-tallet.no
www-dav.uhit.no
docker.fsat.no
www-adm.gbif.no
www-adm.gbif.no
webstatistics.fsat.no
www-adm.1700-tallet.no
webstatistics.fsat.no
matomo.sikt.no
www-adm.1700-tallet.no
docker.fsat.no
www.fsat.no
www-adm.1700-tallet.no
www.fsat.no
hjelp.fsat.no
1700-tallet.no
1700-tallet.no
www.fsat.no
www-adm.1700-tallet.no
www.uhit.no
docker.fsat.no
1700-tallet.no
docker.fsat.no
1700-tallet.no
1700-tallet.no
fsat.no
hjelp.fsat.no

Certificate

The complete raw certificate details for webstatistics.fsat.no in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20569586516238291984072441138150973419
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL CA 3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-02-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-05 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Oslo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Oslo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Universitetet i Oslo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FSAT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'webstatistics.fsat.no'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 675455510711103346104215482055912066497894975784738577396611298768346358533572048455814968992650905553544250466056075763538942014706680710012947045902777601646587206396557812917120078088516209230459006418880855980711639011480662867153484043688927137565047554287153631855855527802891245201263182311704728897323506253328117611496088110248685609321705568505867253273861522470099883745937739474276955937099978874169567151827429652539372118996900497414730717097873607286918302403693556321333302494649993430522376652204811225153271474945948501919606277818771485541221008375186346351867121230071340761806449259575812977131570160476072980218755871546025926310704093686893255968854698073501418350703550060715622872455949270672652030604456176724548112039727607859971952970676658954861524231316860807824264520587745481354437701751829114363127373289093939411462267163662045355493705894107856800023121193172647696091135337689301733217416666631215483556032319420711303189574605215706008435585065567572817550554424614935740761982780725073227789748949748520128908169510746862498852610039030624981606213711670514611035975041393350087435152223345778361771252193547525910386088894017028135446229118758329225662575866492413687436551874020759451806305669
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 67fd8820142798c709d22519bbe9511163755062
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4c554c5436a687738ec0c24ad35316a28b15f2d7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webstatistics.fsat.no'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/TERENASSLCA3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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