ntg.no

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:29:0c:c4:a9:af:56:ba:e0:c2:45:66:6b:d5:cb:41:4c:7c was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ntg.no

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:29:0c:c4:a9:af:56:ba:e0:c2:45:66:6b:d5:cb:41:4c:7c
Serial Number (int): 362417692638552148494753400615831926295676
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 44:18:a9:c2:e2:be:2b:3b:e0:98:88:1b:09:e3:bc:36:e9:c5:47:5c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 87:49:7b:8b:a4:3f:bb:d1:81:ee:0a:da:31:5c:c0:b4:26:97:b1:a6
Fingerprint (sha256): 9e:64:67:1f:a1:f7:69:6a:6c:c5:65:6e:42:a5:25:8d:9a:05:fd:30:49:59:82:5f:07:16:dd:50:ee:c0:d0:cf

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate ntg.no

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ntg.no

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ntg.no
www.ntg.no

Other certificates including the domain name ntg.no

(limited to 100 certificates)
*.opptak.ntg.no
osrportal.ntg.no
ntg.no
*.opptak.ntg.no
opptak.ntg.no
ntg.no
fs.ntg.no
opptak.ntg.no
opptak.ntg.no
ntg.no
fs.ntg.no
ntg.no
ntg.no
*.ntg.no
ntg.no
ntg.no
ntg.no
opptak.ntg.no
osrportal.ntg.no
opptak.ntg.no
ntg.no
*.ntg.no
ntg.no
ntg.no
ntg.no
*.opptak.ntg.no
mail.ntg.no
ntg.no

Certificate

The complete raw certificate details for ntg.no in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGxrB3ATBFMU5AN+eKyz
kI29yIhSVEck8m/TS0/BxnIGrYKx7rqndP3DPsANDfNhrOYi+xFrN8BagjYzaRKv
HncJ4Ip7/91goHI1qgFcO9bztD1r6nPPAsOCRrQkPzG+25+jruS1n8n5AIvf6Fpu
tmor9C5KMIMZzgrJEX9XUKNkDU0NHPifP2EU6CrmXS46QDVJ9vyb/s5c7rqjDwBq
4jbtW4PkCCo4uXeXxJ3Xdfdi5igrENK/+acrURXXsHLyi9PELOSuOvlbYM1wovO4
SoT9bBDA9JQFMC7pi6JGoYDYqPoytYuFCoRXzgaWU9x9VIV7B9mVltX0+8Jmhe/7
SQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 362417692638552148494753400615831926295676
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-29 23:18:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-29 23:18:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ntg.no'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21261498183242611567443138459813588257781916702577964053814666322672041163088339217880020445050659791922060858612701127181158879722170055887651245474107167272833708626751782331754361069312130979423818538649436835393972463078426273438334530520663853449289709786298710709855433230509551786020071666059884085577861445950372177334146355654165353962176432084860885859984123513899485403716611130483558460535653671841663199128632301596712523893188433197139615902091657222060699945291522320939529067272414962952675776233177774215907475905315211855547860488311773870033469274899537013432106059103109757216392863581243421227849
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4418a9c2e2be2b3be098881b09e3bc36e9c5475c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ntg.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ntg.no'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000017093750faf000004030047304502210093d5993a0815c24c17a919d1a8a118dc521dd4ba75fcf34b15a59ec5ca056cfd0220241ce391a7fc84bbc39cef4ba47159f8a4ebec30afa14f125bb92bbf40f4b01300750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000017093750fb000000403004630440220729b7ca340393c0267acf6312b7aa5ce143e14353884cc35242483a310cd0ef202202945f55f1708181482771b0aff60de5e15eca5b30e5d963e662f63cc546447d0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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