liveblog-embed.schibsted.tech

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:b9:66:f8:c8:35:ee:ce:d6:1e:bd:ca:4e:72:ab:78:9b:8f was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=liveblog-embed.schibsted.tech

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b9:66:f8:c8:35:ee:ce:d6:1e:bd:ca:4e:72:ab:78:9b:8f
Serial Number (int): 324425968681600254562683985673376157440911
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f6:42:bf:46:9c:1d:d8:85:38:f0:04:4d:75:13:57:f0:46:a4:11:89
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ae:c5:c0:01:a6:17:17:28:8b:f2:e9:dc:1a:92:7f:95:42:bb:2a:43
Fingerprint (sha256): 92:cb:02:35:62:04:77:61:0f:98:c5:8f:d0:1f:14:fb:67:e0:6f:87:08:fe:12:df:a5:93:04:e6:46:2d:99:42

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate liveblog-embed.schibsted.tech

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for liveblog-embed.schibsted.tech

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

liveblog-embed.schibsted.tech

Other certificates including the domain name schibsted.tech

(limited to 100 certificates)
live-api-prod.schibsted.tech
vip.schibsted.tech
schibsted.tech
*.schibsted.tech
*.schibsted.tech
static.prod.schibsted.tech
folk.schibsted.tech
*.dev.convox.schibsted.tech
vip.schibsted.tech
folk.schibsted.tech
fallback-frontpage.live.schibsted.tech
schibsted.tech
eventhub.primary.live.schibsted.tech
*.schibsted.tech
*.sls.sa.schibsted.tech
ap.no
schibsted.tech
*.fallback.live.schibsted.tech
*.primary.live.schibsted.tech
*.schibsted.tech
*.pre.convox.schibsted.tech
*.schibsted.tech
*.pre.convox.schibsted.tech
liveblog-users-images.schibsted.tech
fallback-frontpage.live.schibsted.tech
*.schibsted.tech
schibsted.tech
*.schibsted.tech
schibsted.tech
vip.schibsted.tech
redirect.schibsted.tech
schibsted.tech
liveblog-static-assets.schibsted.tech
ap.no
live-api-prod.schibsted.tech
*.pro.convox.schibsted.tech
static.prod.schibsted.tech
folk.schibsted.tech
*.schibsted.tech
ap.no
schibsted.tech
*.dev.schibsted.tech
*.live.schibsted.tech
ap.no
schibsted.tech
*.schibsted.tech
vip.schibsted.tech
ap.no
static.prod.schibsted.tech
liveblog-embed.schibsted.tech
*.pro.se.convox.schibsted.tech
ap.no
*.pro.de.convox.schibsted.tech
live-api-prod.schibsted.tech
*.pro.convox.schibsted.tech
schibsted.tech
ap.no
*.pre.convox.schibsted.tech
ap.no
ap.no
*.dev.convox.schibsted.tech
*.schibsted.tech
live-api-prod.schibsted.tech
liveblog-static-assets.schibsted.tech
*.schibsted.tech
core-header.schibsted.tech
*.dev.convox.schibsted.tech
*.schibsted.tech
*.bord4.convox.schibsted.tech
*.pro.se.convox.schibsted.tech
liveblog-users-images.schibsted.tech
*.pro.de.convox.schibsted.tech
folk.schibsted.tech
fallback-frontpage.live.schibsted.tech
*.sa.schibsted.tech
liveblog-avatars.schibsted.tech
*.pre.convox.schibsted.tech
*.pre.se.convox.schibsted.tech
primary.live.schibsted.tech
schibsted.tech
most-read.schibsted.tech
ap.no
*.live.schibsted.tech
live-timeline-addon.schibsted.tech
schibsted.tech
schibsted.tech
ap.no
*.pro.convox.schibsted.tech
live-api-prod.schibsted.tech
liveblog-embed.schibsted.tech
schibsted.tech
schibsted.tech
schibsted.tech
*.pro.convox.schibsted.tech
schibsted.tech
liveblog-static-assets.schibsted.tech
ap.no
ap.no
schibsted.tech
vip.schibsted.tech

Certificate

The complete raw certificate details for liveblog-embed.schibsted.tech in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5E+BulrrhQSv9EUZEHv
RQ8mgwz+kuG8uzjom/fqP64eSX1LqLFUpqZZXbC07TV2oBNVR/9/FNiaP3UkrwcS
cW+YrUTG4T5+boD7vn++bFvD6yNJC9ypsQNb4s15C+mfNJpZOQCx5L682c3K3Csx
k6EjU3CgPuHRthqkZt3FZBNPBvnjt43IZTxIJJmk1gp6/37uy3/SNqpO8LeSTIFj
3tXMI5c9kacQVySLcZhCq4T+s7Rxj/ISH6XIcPesr3ONKCGQHiLh1oZzNHpqFYVz
Lwht5sb/NvJU5Cd1JdWBrmGw6Ac0uiCvsc0B6voWJzcDrqFrO/3Uv6HcVCsaY2Li
ywIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 324425968681600254562683985673376157440911
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-12 05:35:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-11 05:35:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'liveblog-embed.schibsted.tech'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23678184672689572242149227445677143254885706062341864489963363142383625572947237269319496653561341599888493284044787604649130387059513545680963341711067418844640118816522481332569342638694826438124289648067139827814708778503199455954110165200478070412353392936222350099965505332622800027492962198611302653822685219890055445228908621965583750011093331580069233546414225051934722891003182682979524582370357040269335395678517203568908116144426980291216487732751422424454883654577338872144046273024385545849152875643045266710609808922439972225891212117930029595002803138737760594959363960016664986795478762682432369124043
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f642bf469c1dd88538f0044d751357f046a41189
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liveblog-embed.schibsted.tech'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016d242f420e0000040300483046022100c672cc3a6e387ac7f4ba7f8262da9b033be737d8be7a15abd0e68d1b634742a2022100caee8deabb11312ca207f4f0aa2aa4e91cf631478309a59bf07fd4332ee13c0200760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016d242f422b0000040300473045022033cb0cb6ad444a972c0353321b071c595361680edaaa386b81c582234d3e99f5022100ee6a0d5bd4e26f90be9ffabd2d2018aa6d6da67b0d7f4b9d1e3abf8beba3206f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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