kostholdsbutikken.no

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:1b:2e:41:20:eb:86:05:72:83:a1:1f:d9:47:22:dd:ee:af was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=kostholdsbutikken.no

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:1b:2e:41:20:eb:86:05:72:83:a1:1f:d9:47:22:dd:ee:af
Serial Number (int): 270585964356945192431760886486499327864495
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 04:6a:86:93:a6:92:ac:f9:60:81:b3:af:df:6b:96:81:d7:e6:fc:e4
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 20:6b:39:27:5d:ab:39:4e:0c:5e:25:60:04:2b:ac:5f:a8:ca:07:6a
Fingerprint (sha256): a4:d3:d4:77:ea:bc:13:c7:06:f5:01:73:a5:d0:0e:85:a2:a3:86:61:e7:8b:6c:c1:f3:dc:c2:4b:59:38:58:6a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate kostholdsbutikken.no

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kostholdsbutikken.no

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

kostholdsbutikken.no
www.kostholdsbutikken.no

Other certificates including the domain name kostholdsbutikken.no

(limited to 100 certificates)
kostholdsbutikken.no
kostholdsbutikken.no
kostholdsbutikken.no
kostholdsbutikken.no
kostholdsbutikken.no
kostholdsbutikken.no
kostholdsbutikken.no
kostholdsbutikken.no
kostholdsbutikken.no
kostholdsbutikken.no
kostholdsbutikken.no
kostholdsbutikken.no
kostholdsbutikken.no
kostholdsbutikken.no
kostholdsbutikken.no
*.no.nett.pro
kostholdsbutikken.no
kostholdsbutikken.no
kostholdsbutikken.no
kostholdsbutikken.no
kostholdsbutikken.no
sjokolader.no
kostholdsbutikken.no
kostholdsbutikken.no
kostholdsbutikken.no
kostholdsbutikken.no
kostholdsbutikken.no

Certificate

The complete raw certificate details for kostholdsbutikken.no in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 270585964356945192431760886486499327864495
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-30 21:23:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-28 21:23:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kostholdsbutikken.no'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 751884911376313297721148486401687862544598171644009573671011315378748527766034094370027215429770037503731680705432281578196966819389241358763373837181745612887955519357292474285875974364654552233384366477802294176987269839282689998347062283513227024590452243700789835959810275563848149246345450336276268328388017056946413542519130182095301287103207537589113981597255543966100779587524400753619693644702754810155111535767550552716836894916725293766977847390908775863240130323634268090238050726975875453390099412213595418702532052083564663735449956321979315152959986445772082498803985765721304665390556302159032490677167151369542351299593175161855924761348475443638964260995089341917814855846929299595448468173036390857761972888151091430732252136929237094741942478871456436222942858530213316263348374482461180142396576430714061667448847514155942136866055300357507964678338452650927375663529873156224042048420147863636021849601799863388752776627229872602803752109299531823560363515634563368319909781897201690372969416939063724370201361283706090223428236706346998466455447180089843629760102032292873884019493289834162453133889232379375947891509486764133924558055181721068323469268654931686202453082782777635621111937472994643355468371341
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							046a8693a692acf96081b3afdf6b9681d7e6fce4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kostholdsbutikken.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kostholdsbutikken.no'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000164ed4a3b0c0000040300483046022100fbbdf74fd19a60d11801e98ebbe092a21aea9693ce8bab5c4c7b9aec4524ac9a022100c5a380094682b645e3a1a5396db17cb69c4d6288a612408cde13204c6e7dacda007500a4501269055a15545e6211ab37bc103f62ae5576a45e4b1714453e1b22106a2500000164ed4a3ac1000004030046304402200f85022cec88ae53b2766f6a0ba09a62af4d63acccb216ab68839745d8d25a61022039dc253e3d94458f4e964c3094c102d24623997ec88cbf873115882fbbc4a678
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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