gratis.adressa.no

Issued by AlphaSSL CA - SHA256 - G2

About this certificate

This digital certificate with serial number 4e:64:34:5f:ed:17:43:32:e4:15:a6:76 was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=gratis.adressa.no,OU=Domain Control Validated by OneClickSSL,C=US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 4e:64:34:5f:ed:17:43:32:e4:15:a6:76
Serial Number (int): 24260970680608372099269371510
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 84:5a:f4:5f:b6:d7:34:26:c7:85:84:69:0b:7a:21:05:ef:1c:66:50
AuthorityKeyId: f5:cd:d5:3c:08:50:f9:6a:4f:3a:b7:97:da:56:83:e6:69:d2:68:f7

Fingerprint (sha1): aa:e3:46:b2:94:38:97:1b:98:b9:e6:fe:6c:14:d5:eb:c6:e8:b8:2a
Fingerprint (sha256): a5:78:48:29:b1:24:a2:95:56:d2:7d:75:96:82:f2:7e:64:7a:34:9f:23:a8:e0:f2:b9:b3:28:3e:da:70:17:3a

Issuing Certificate URL: http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsalphasha2g2
CRL Distribution Point: http://crl2.alphassl.com/gs/gsalphasha2g2.crl

Check the revocation status for certificate gratis.adressa.no

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gratis.adressa.no

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gratis.adressa.no
www.gratis.adressa.no

Other certificates including the domain name adressa.no

(limited to 100 certificates)
id.adressa.no
registrering.adressa.no
pmftp.polarismedia.no
lesertur.adressa.no
registrering.adressa.no
torg.adressa.no
gratis.adressa.no
registrering.adressa.no
id.tek.no
polarismedia.no
polarismedia.no
alogin.adressa.no
*.adressa.no
polarismedia.no
id.dolen.no
info.adressa.no
*.adressa.no
arlingtonmoments.dallasnews.com
arlingtonmoments.dallasnews.com
polarismedia.no
registrering.adressa.no
info.adressa.no
polarismedia.no
folk.adressa.no
registrering.adressa.no
polarismedia.no
alogin.adressa.no
id.dolen.no
id-pre.adressa.no
polarismedia.no
id-pre.adressa.no
info.adressa.no
registrering.adressa.no
folk.adressa.no
info.adressa.no
polarismedia.no
id.tv.nu
alogin.adressa.no
gw.adressa.no
info.adressa.no
alogin.adressa.no
studio.adressa.no
id-pre.tv.nu
info.adressa.no
arlingtonmoments.dallasnews.com
info.adressa.no
gratis.adressa.no
godmorgen.adressa.no
folk.adressa.no
studio.adressa.no
godmorgen.adressa.no
torg.adressa.no
info.adressa.no
gratis.adressa.no
alogin.adressa.no
id.schibsted.no
lesertur.adressa.no
gratis.adressa.no
polarismedia.no
gratis.adressa.no
gratis.adressa.no
info.adressa.no
gratis.adressa.no
gratis.adressa.no
folk.adressa.no
torg.adressa.no
alogin.adressa.no
folk.adressa.no
id-pre.bsnett.no
id-pre.tv.nu
id.dolen.no
torg.adressa.no
lesertur.adressa.no
studio.adressa.no
gratis.adressa.no
id.schibsted.no
gratis.adressa.no
registrering.adressa.no
karriere.adressa.no
info.adressa.no
folk.adressa.no
gratis.adressa.no
info.adressa.no
id-pre.byas.no
info.adressa.no
id.tv.nu
registrering.adressa.no
studio.adressa.no
polarismedia.no
gratis.adressa.no
id.dolen.no
lesertur.adressa.no
polarismedia.no
gratis.adressa.no
alogin.adressa.no
folk.adressa.no
id-pre.adressa.no
id.adressa.no
*.adressa.no
id-pre.byas.no

Certificate

The complete raw certificate details for gratis.adressa.no in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApq4rLZJM+guR67EgvG1X
68h1bEd58q9kMv0oTzRIckpGEZhsUs1s1PqByCbPsxAqgwzbITRq+ycluT8K+ACX
Qg3ZjuiCwdQUZ2mAMdDKQSNUHAFai+2Er2P78MxQXbMyycf/EKU8G1zvPClO2mGd
1bVMhzKRdeiKNHPTTLPonZQtDi5da8H91NDc2CGfKIS4AKwPR8UVkqCi8NMPptxS
nN/OraV6HruKE6KlwtXhKbJpWDqywDbWCBeDh+gg975r+LEZkEB7jHg4QFHz98fq
07rJ97SrpNIHCNSsWfGms/3nrtk6A6i+Gn8HGoJ5CsLZkfeBsvSJGgb5Gvj3OlTL
TQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 24260970680608372099269371510
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AlphaSSL CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-12-22 00:02:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-12-23 00:02:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated by OneClickSSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gratis.adressa.no'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21041444393647644732744037163757795483055606317393454811156391078329315838872782620339431706380754772775836109678245042891048806729944652266362442111559593411824493273337301727423251329427803848291873748558481080810678532135638294696455731093132920775486748653371244495423431520285625762027090671673699098675830654876653961651488150164687782277664678621119721542210668247103018763439470152943294778033320310929820190107620725719668211852834864358471036675406255135418961966103188952284780938905844234657351859129006294829549344768607769915524371673499969971118555054093591813982586712542520524161146787641272548248397
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (125 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsalphasha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10.10 (Domain Validation Certificates Policy - AlphaSSL)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl2.alphassl.com/gs/gsalphasha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gratis.adressa.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gratis.adressa.no'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							845af45fb6d73426c78584690b7a2105ef1c6650
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f5cdd53c0850f96a4f3ab797da5683e669d268f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (608 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (604 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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