fv-test.gc.nav.no

Issued by R3

About this certificate

This digital certificate with serial number 04:1e:27:ee:21:20:1e:b1:9b:d6:7c:38:76:d2:89:0f:10:1e was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=fv-test.gc.nav.no

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:1e:27:ee:21:20:1e:b1:9b:d6:7c:38:76:d2:89:0f:10:1e
Serial Number (int): 358710691065021400885465329012714213675038
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 19:47:a2:89:9a:ee:8b:93:26:3c:b0:15:ed:6b:5e:c3:b8:63:2b:cf
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): af:c5:c1:96:05:40:37:9a:54:4b:2b:1a:68:a7:bd:20:9a:d7:d1:65
Fingerprint (sha256): a2:1d:c3:88:7e:fb:7d:4a:3f:9a:2f:09:36:6c:90:ca:b5:a7:e1:e0:ab:b8:86:9d:e3:f9:da:3e:bf:64:1e:f4

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate fv-test.gc.nav.no

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fv-test.gc.nav.no

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fv-test.gc.nav.no

Other certificates including the domain name nav.no

(limited to 100 certificates)
data.nav.no
license.jetbrains.gc.nav.no
*.nav.no
pexmgr.dev.nav.no
repr-docs.intern.nav.no
nhn-gw.nav.no
peppol-ap-test.nav.no
sal.gc.nav.no
munki.gc.nav.no
*.nav.no
design.nav.no
tjenester.nav.no
wireless.nav.no
data.nav.no
tjenester.nav.no
sip.hot.nav.no
data.nav.no
*.nav.no
bekreftidentitet.nav.no
data.nav.no
nocf.gc.nav.no
sip.video.nav.no
*.dev.intern.nav.no
join.video.nav.no
smtp-pp.nav.no
wireless.nav.no
zentral.gc.nav.no
sentry.gc.nav.no
saas-to-nav-api.nav.no
www.nav.no
www.nav.no
www.nav.no
nhn-gw.nav.no
data.nav.no
data.nav.no
design.nav.no
begrepskatalog.intern.nav.no
data.nav.no
saas-to-nav-api.preprod.nav.no
pexmgr.dev.nav.no
apno01-eessi-acc.nav.no
api-portal-preprod.nav.no
design.nav.no
*.nav.no
*.nav.no
*.nav.no
www.nav.no
aaregisteretsoknad.nav.no
design.nav.no
data.nav.no
sip.nav.no
depviz.intern.nav.no
sentry-dev.gc.nav.no
data.nav.no
svar.nav.no
opptak.nav.no
www.nav.no
edge.acano-t.nav.no
*.nav.no
opptak.nav.no
design.nav.no
saas-to-nav-api.preprod.nav.no
sykmelding.nav.no
mmdm.gc.nav.no
data.nav.no
portal.video.nav.no
nhn-gw.nav.no
trello.intern.nav.no
apno01-eessi-test.nav.no
*.nav.no
*.nav.no
*.nav.no
data.nav.no
api.nav.no
m.vpn-t.nav.no
sykmelding.nav.no
api.nav.no
api-portal.nav.no
sip.hot.nav.no
data.nav.no
data.nav.no
innboks.nav.no
data.dev.intern.nav.no
sip.vk.nav.no
sentry.gc.nav.no
respons.nav.no
www.nav.no
data.nav.no
sip.video.nav.no
www.nav.no
sentry.gc.nav.no
etterlevelse.dev.intern.nav.no
fv-test.gc.nav.no
m.vpn.nav.no
mmdm.gc.nav.no
api-preprod.nav.no
api.nav.no
design.nav.no
peppol-ap-test.nav.no
data.nav.no

Certificate

The complete raw certificate details for fv-test.gc.nav.no in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 358710691065021400885465329012714213675038
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-05 22:11:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-03 22:11:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fv-test.gc.nav.no'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 910479054744088770073568383044173413869804323144687067527722475412920486272604192899509107539299476559289715421434242084722223454974848586957965825279762144883080092430735315304389122731938115220190845665710228967450182148267140685704042312039194699156403335509455923548816824343742876871559942948042624640220680973792384248795711000310007790660745894702282299424537681415223572056997944582040112177969384632839108217379852266511737826003788593366504459156285425042893577872910046641210774367253039118172550140420738335919031987880327967390458259077446130646235828847936415756386849812826479719509229634021598886104364491313179585284543518397945940659591043376503290565989675126390935978429903421000462790395884987830873504730477195121151118040731673392769523347289040818853712156424106181951570847814732398522067941499931869949005084759489676583834350130264737778665098256812434971517156425147762415730273103439083512773516249680639351221237807745997903587297728327056046104914752508758997736052656322964495056067285608240204138413776553098173698845546781558887139784750739710913201214365539303748539739822218168031582954840695247911899742106492967528667227707459060009608053224555196075874207261644714918598476649520077782432529601
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1947a2899aee8b93263cb015ed6b5ec3b8632bcf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fv-test.gc.nav.no'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000187ee2f6ba40000040300463044022032364a34fb28daf84c8a75ba989e3c10420237067426b9e681c89fa2b062ce3802207098a9cb48a48590e0529791d27c47dba933c36c82107c39f5ea4ca537391dcd007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000187ee2f6b8a0000040300473045022100f9d725fade5f728e49613aa94b05a71d963f1ede366efda82b21671edb82bd7302203f6df6e90d9b10f64fe37a830d5305fda9e9dce5c82d577cceb388b9099631ff
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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