tek.no

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:31:83:6f:42:24:07:a3:da:a6:ed:17:37:1f:af:87:2f:5c was issued on by Let's Encrypt.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tek.no

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:31:83:6f:42:24:07:a3:da:a6:ed:17:37:1f:af:87:2f:5c
Serial Number (int): 278185400328299458168850467581805738798940
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 64:54:ae:e5:f6:db:a3:ca:d4:35:f8:29:f4:75:c1:81:c5:97:1b:eb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 63:2b:19:e4:59:8b:ec:59:02:9d:31:c0:51:00:f8:50:1b:36:c1:2f
Fingerprint (sha256): 9c:79:0e:3c:39:0b:28:19:32:c2:ff:02:a4:e9:c7:c1:37:2c:2e:9b:85:0c:7a:77:5b:f2:4d:1a:99:e6:27:b2

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate tek.no

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tek.no

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

auth.tek.no
min.tek.no
neo.tek.no
search.tek.no
static.tek.no
tek.no
www.tek.no

Other certificates including the domain name tek.no

(limited to 100 certificates)
cmp.aftenbladet.no
*.tek.no
id.aboutme.schibsted.com
cmp.aftenbladet.no
cmp.aftenbladet.no
tek.no
cmp.aftenbladet.no
tek.no
cmp.aftenbladet.no
id.tek.no
*.new.tek.no
cmp.aftenbladet.no
tek.no
cmp.aftenbladet.no
tek.no
cdn.tek.no
cmp.aftenbladet.no
auth.tek.no
ish.tek.no
id.tek.no
cmp.aftenbladet.no
cmp.aftenbladet.no
tek.no
cmp.aftenbladet.no
id.aboutme.schibsted.com
id.aboutme.schibsted.com
cmp.aftenbladet.no
tek.no
tek.no
tek.no
*.new.tek.no
cmp.aftenbladet.no
cdn-yams.new.tek.no
tek.no
id.aboutme.schibsted.com
new.tek.no
tek.no
cmp.aftenbladet.no
cmp.aftenbladet.no
cdn-yams.tek.no
cmp.aftenbladet.no
cmp.aftenbladet.no
tek.no
mail.tek.no
4.session-service.identity-pre.schibsted.com
tek.no
cmp.aftenbladet.no
*.tek.no
cmp.aftenbladet.no
cmp.aftenbladet.no
*.new.tek.no
tek.no
id.aboutme.schibsted.com
cmp.aftenbladet.no
cmp.aftenbladet.no
cmp.aftenbladet.no
cmp.aftenbladet.no
prisguide.tek.no
cmp.aftenbladet.no
tek.no
cmp.aftenbladet.no
id.aboutme.schibsted.com
cmp.aftenbladet.no
tek.no
cmp.aftenbladet.no
cmp.aftenbladet.no
tek.no
cmp.aftenbladet.no
cmp.aftenbladet.no
id.aboutme.schibsted.com
new.tek.no
tek.no
tek.no
tek.no
cmp.aftenbladet.no
cmp.aftenbladet.no
id.aboutme.schibsted.com
tek.no
cmp.aftenbladet.no
cmp.aftenbladet.no
new.tek.no
tek.no
tek.no
id.aboutme.schibsted.com
id.aboutme.schibsted.com
ish.tek.no
cmp.aftenbladet.no
cmp.aftenbladet.no
ish.tek.no
tek.no
id.aboutme.schibsted.com
tek.no
cmp.aftenbladet.no
tek.no
cmp.aftenbladet.no
cmp.aftenbladet.no
tek.no
new.tek.no
ish.tek.no
tek.no

Certificate

The complete raw certificate details for tek.no in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 278185400328299458168850467581805738798940
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-10 08:05:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-09 08:05:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tek.no'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 806149163338442669858864795480782048099026889104294489639567927680835699236245839513212868836205801602662792498584930573721260652278096429517860678929598531202883010657506373103767872131745811995637700688378695222025041766316725992836924328213678652993788651575330236982656584126604069756839955079252611035506303469352352521266419365254463993675293375183510470466196392384006151041004245082142925500782230976521031340397244238210267343183564429143644356817722122454448839940837539971768517550553586149023706545536652338374533071848145309332284717623102943007899915403986774695998832584961002837887392214083244081324958373268898985952793778745419260032894147230519028180518864719096641390339749061096217834981895779871285999872332330607327619375834803986806668451257399545172627381552692542837530414716733322969804473583908899159806097649768177867900379424178428104664699625515430866373674978239945934788423798707077391114033687456922938770934197511657236105699391612526970632046315028229560358856674007920206894497322792201530395544445869504184787516246913438912330063073628890829316319512292029102916584636692156109374995012424698189034969430722714505483695191733999714420611760975258141568839661070401723586151736377456733228292757
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6454aee5f6dba3cad435f829f475c181c5971beb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (89 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.tek.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'min.tek.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neo.tek.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'search.tek.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.tek.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tek.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tek.no'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016a067ec5750000040300463044022070da56b7727cc452a4566728395b76a9e3c4c8291321fa476c5ea13a7c3e410002206981b8619db4b3f81913e214f0938154011695a17d1ea39c9d9dce2817368010007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016a067ec5c8000004030046304402203175592bd2369f9420fbf67893867b41e7d98fdf35cbb9d70a4892c6996f8c9802206e3540b270f980407bc7636b94b7f2ecc6b49cb8d4a6c6564ba80e41f80ddd61
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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