folk.dolen.no

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:21:70:97:e9:59:f2:e3:aa:f2:76:2a:95:57:44:4f:18:7f was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=folk.dolen.no

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:21:70:97:e9:59:f2:e3:aa:f2:76:2a:95:57:44:4f:18:7f
Serial Number (int): 272715838208953173291321676837457400633471
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 15:2b:c8:41:65:db:79:88:95:9e:f8:c6:e9:3c:c7:5d:44:ff:4e:d0
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 1b:3f:63:9b:17:70:3a:00:bb:c1:8f:2d:2c:39:e7:a4:5b:d1:32:06
Fingerprint (sha256): 94:55:2d:48:da:d1:9c:cb:e6:95:9a:8c:07:23:a2:d5:6c:72:0f:9f:e3:12:db:c1:fe:bb:00:47:06:2d:1e:b4

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate folk.dolen.no

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for folk.dolen.no

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

folk.dolen.no

Other certificates including the domain name dolen.no

(limited to 100 certificates)
folk.dolen.no
id.tek.no
polarismedia.no
polarismedia.no
polarismedia.no
id.dolen.no
*.adressa.no
arlingtonmoments.dallasnews.com
arlingtonmoments.dallasnews.com
polarismedia.no
polarismedia.no
folk.dolen.no
polarismedia.no
torg.dolen.no
id.dolen.no
torg.dolen.no
polarismedia.no
polarismedia.no
id.tv.nu
torg.dolen.no
folk.dolen.no
torg.dolen.no
folk.dolen.no
id-pre.tv.nu
arlingtonmoments.dallasnews.com
torg.dolen.no
torg.dolen.no
id.schibsted.no
polarismedia.no
torg.dolen.no
torg.dolen.no
id-pre.bsnett.no
id-pre.tv.nu
id.dolen.no
folk.dolen.no
*.dolen.no
id.schibsted.no
folk.dolen.no
id-pre.byas.no
id.tv.nu
polarismedia.no
id.dolen.no
polarismedia.no
torg.dolen.no
torg.dolen.no
folk.dolen.no
folk.dolen.no
folk.dolen.no
id-pre.byas.no
id-pre.dolen.no
torg.dolen.no
folk.dolen.no
id.bsnett.no
id-pre.tek.no
polarismedia.no
session-service.payment.schibsted.no
id.tek.no
folk.dolen.no
torg.dolen.no
session-service.payment.schibsted.no
folk.dolen.no
arlingtonmoments.dallasnews.com
id-pre.tek.no
id-pre.bsnett.no
id-pre.dolen.no

Certificate

The complete raw certificate details for folk.dolen.no in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0LNVrEdHAWTGo/FCUrj4
PAfBzCorBOOFXFYBvfY3y3itnmKnBCf4DO8sNun8/hKrwDTPEd25ZdhCsc7+EojH
hW56lUTE5nsrdniXwgtMzyRryFWgRF5SeeG096C2seMxuwquvhXbpr8WC9UAELW5
vVQHTR/WwxAy+WoQhitzkVarJaDiO6H2NW0EpDsC2ZNloGDaGb+FHREy5fLCHNqK
ZbGZlMqAWwdvcF5PtI3NnmcXgPtCnmju6jXHvWWnUW40XQPhWyx06fKIjI8FPda2
gV3EsTa7IB/ARYfxnBhfNlYWuOVYcyVfzrE6NH7jBbC8mIiL/py1pIz/oMbH55Zw
ywIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 272715838208953173291321676837457400633471
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-22 00:07:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-21 00:07:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'folk.dolen.no'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26346000649742340455267580213953453739625983444393640172632416715885939451061168771452456627142090022753711891669534524731345470072434311436092382785430269074105025687518867271327147428452872469187269553349513251571853557015865852835570491630524436592589670123022530775655675524445335144967533233615009734481868054623240154849849327565683697766984460790841139372450978299607936915934564649948457158675479623762625273765696295801003775383007847697618880832793860142067036410796303475341065093318614675382886151780933595379651678819157811668658767575137200699180288502435764812246717454356443043677805691238738008895691
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							152bc84165db7988959ef8c6e93cc75d44ff4ed0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'folk.dolen.no'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016d56824eb90000040300473045022053f0211814e0c2be5921dac4e785c2957be8ff4d4f711547cb08030383494140022100a7e25dc77946422cf76cd24bbafe9d11ed2d1f62877314ec0e7835627d18300d00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016d56824ed9000004030047304502206ad66399096efc175ddea9d9ef61534f1b3b15f1e2569fb52b1b4b4830a82196022100f3bbd28e5a49843af19d959fd599abe544596b1519a0233e7d088c6269412b9a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		001a1aed111bb309c4546998ade9f02975f0efbfbc87dbd700b93d7c49d35ed20551c438c13bd7dd572a032b40a8135c5f85533d984e111a45ec8af08de0092313efb8cac24f0a2b50ce0a49b45e7c40a4cfe1751f5b146f2f5e59681bfacaf6fdac1fdc610b92984f3a5bd4c367224881f463902f02388ff2e364d7536c5bca1ec8f257555d3d25bda4b81030486fc97ceb4d16871b5672be6a5b6975a4248a3af0e0a1a5ded0d587199b47593c294e7d0d7e4071d0d808d1b8a59a911762f8edeeb405156090c14002cbdd89075721986abafa1c2bb88ef24346f45ca03910af4c7e3368c871b424deef2da4d2657689f01400fa6027e3f1821fc59ab4aadf63