digi.no

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:72:2e:1f:01:a3:09:04:8c:87:d4:3b:5d:f7:8b:8c:b7:1b was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=digi.no

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:72:2e:1f:01:a3:09:04:8c:87:d4:3b:5d:f7:8b:8c:b7:1b
Serial Number (int): 300190353106475836442411802312787366819611
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 4e:c7:a6:7c:5e:e0:e7:ec:e9:25:63:d7:aa:d2:f7:3a:0a:51:69:30
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): f8:bc:eb:9e:3e:f5:15:f9:04:2e:af:e8:5c:53:bc:e9:0b:0c:15:0d
Fingerprint (sha256): 93:b9:d7:aa:c6:de:5a:fb:34:6c:ec:c5:7e:46:1b:f0:2d:95:aa:54:14:f7:de:c7:a4:e6:b3:06:5f:6a:ee:70

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate digi.no

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for digi.no

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

digi.no
www.digi.no

Other certificates including the domain name digi.no

(limited to 100 certificates)
wallbrand.co
dcfit.turnosweb.app
erlend2.digi.no
digi.no
digi.no
www.penguinpeople.io
groupm.beaconforce.com
www.trumpcarestories.org
digi.no
www.parrify.com
cloud.workito.co.il
digi.no
digi.no
wallbrand.co
whitepaper.digi.no
f.link.mustard.love
1j2n061x3td.www.digi.no
mysomras.com
digi.no
www.waidy.it
www.couplemonitor.app
new-adventskalender.de
admin.ugyde.io
digi.no
digi.no
digi.no
erlend2.digi.no
ymd.development.fensi.in
www.crudewiser.com
whitepaper.digi.no
erickmendoza.com
employeronboarding.keeper.co.in
www.iamtheliquor.app
static.dev.getbusy.com
www.51hint.com
www.aduug.com
digi.no
digi.no
whitepaper.digi.no
www.marktompkins.me
digital.stratton-press.linkmalloc.com
whitepaper.digi.no
hueanh.com
invertecfoods.cl
trimbo.com
digi.no
digi.no
digi.no
digi.no
www.garrettspence.dev
vedur.arnigu.info
kalk.digi.no
kalkulator.digi.no
digi.no
digi.no
digi.no
admin.job.hoikushi-go.com
f.link.mustard.love
digi.no
whitepaper.digi.no
nakytec.com
www.redstonemail.app
cvmetalproducts.ca
digi.no
digi.no
whitepaper.digi.no
upliftstress.com
whitepaper.digi.no
digi.no
digi.no
dev.viviultra.app
www.matahari-amsterdam.nl
slw.ai
edificiouna.porcelanosapartners.com
whitepaper.digi.no
kolssak.afterword.com
digi.no
kalk.digi.no
digi.no
whitepaper.digi.no
app.bemoved.com.au
digi.no
digi.no
www.chen.enterprises
digi.no
digi.no
www.inthga.io
introvue.robinsoft.biz
www.ministryofpup.com
digi.no

Certificate

The complete raw certificate details for digi.no in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAyb1/RrrxjZ2t0a/RgHBq
UeHIrx5omffT9nI+RbhTizR+pJ/9H2yDF9tCUL1NXQXqh06o6Qguu4Uukm0gIlZ+
hhbCeZhMQODlcXHhwzJzxIePJpgIu8sIrV2pGMYl330ih2iHzOsvkuB0gMB0EQ8O
UycECQ0ATwIkFSwdXqrFOZKUu/PMXJVH0yCjc0MnXg5KXBOjQrjd5GDg0jtHeY7+
dp3N0YCT+izhdvfulSqHzX8VAQcC0EwYoqveGv054C69DcSMkkYaZeoeo98JSBF9
G//Xok/l4exKpvfnN0ddHdMwav77/GUl3oY4wzCnMGI1vz04RGdig9zbEY2EzGyh
E9+PL/UWkndGbjNV6Vu7fr6LMw5Z+nqRrEa9Y2TJ8l+0yjEXhZPD1ZG94DQzBHnV
lFKNDYFuPhPQtftcyjeiODdHAubpojt2WQjF3WHYDgVddvfLOAyEjorA1xXrjxbX
wYi1hhy4SsBNkcyPTEQjQv5SABrOe4H7WiHS1lMVQ3us+OINJ4zn5U3AG84yfp/w
l/HR3ebBL62cFjQ3lI2y7WnYdkbvHRWUD7wQX/Ns680g/Pt8bj6SCNuu64pXEKQu
dJBMu+gk5G83ir8pjWpVmFKcjg4W2BYn51ExjU7WZ8NV7wClCWdMWeQBeOlX731l
HTQgQ2XY2VA+A5QWxWMoyXMCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 300190353106475836442411802312787366819611
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-26 07:52:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-24 07:52:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'digi.no'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 823028305397703426097610685794228800628896620075388803406258157021803620385818164138071795797177750158236701756158322832337091188220304285132262452883945698665274567227072773951578855839362965249828639879085857883218975421939189967564370158791499250356504000943979506957858383110952647508470726652987356298768383154506339170563711861294052401328319107421051811769175136016022529574472656105774265696882967110435932346140547735819251455984886370177377458026072281384351073746221475095125572126164676169649999671154351132985759305299987669518148151105299074348392889125424524263646656505767298897979047388711884430413581430715911904521178860277302985014504299131603508521991953445820204273725214678837029457399471486476212471647615596453200370178361372794175473153463863311168851013561226603333850285011054342199096451428196289865635882392911000603653025828340545556373402859586263646627237072612955689319873422489292542560730569185388063632141197783997723022524321112554598091079208497867926612773455426321713684030458854022627259420941687363523953263787904055901780560825103908397419900103372048339465519109284003129644389041206386287415861214966630963134132570627115345825803145595331484342262228838461504367629515821793458268981619
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4ec7a67c5ee0e7ece92563d7aad2f73a0a516930
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digi.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.digi.no'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016c2d7b3cd0000004030047304502200883709b1453c1311b01773e61ccd7c41ab41ef70ec028da6619f5bd19aa4fbf02210098e05b34d5ad87d223363ffb61964a76351c9d79c9368888a6a3fa4e50de6aa300770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016c2d7b3cce000004030048304602210098396a37d7b7651a751d0ad80f6592cb68eb9850aa2a18fd90fc3ce1a4eb5c82022100f30f616fc1b178835bc16b0bba222c53a50dc2257784307bd40a870abaff9b26
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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