ipt-biodata.gbif.no

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:a3:bd:0c:8c:8a:d5:90:59:68:d1:77:d7:3a:81:2f:78:f5 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ipt-biodata.gbif.no

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a3:bd:0c:8c:8a:d5:90:59:68:d1:77:d7:3a:81:2f:78:f5
Serial Number (int): 317054172852696286755148602494475570215157
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b9:3f:90:45:2d:7a:cc:d3:2c:e4:f3:22:b8:d4:42:99:8b:39:bb:5d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): cd:c4:e3:c2:b4:9b:70:0b:af:bd:2e:fa:3c:02:c8:00:67:76:85:a1
Fingerprint (sha256): aa:77:94:fd:f9:ca:90:f9:84:91:87:93:53:8d:d6:7d:40:c9:eb:7c:d6:8f:b5:6b:d4:bb:8d:f6:23:74:b6:4c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate ipt-biodata.gbif.no

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ipt-biodata.gbif.no

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ipt-biodata.gbif.no

Other certificates including the domain name gbif.no

(limited to 100 certificates)

Certificate

The complete raw certificate details for ipt-biodata.gbif.no in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGXjCCBUagAwIBAgISA6O9DIyK1ZBZaNF31zqBL3j1MA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEwMzExMTEwMzJaFw0y
MDAxMjkxMTEwMzJaMB4xHDAaBgNVBAMTE2lwdC1iaW9kYXRhLmdiaWYubm8wggIi
MA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDOlb3wSS59v+c0vj8tKiyF1yhl
FdoiDZMxXks2YuXRvNXvYTF/9lIjWFMLz1ifJJ5FA4QKcr96k0yEqAIiH7geDuAL
Q39clJzNmtnY79qyps+uXFEy1dcoqwHIqcl05fExfjqdDuSmPbjvoXK3OM76bvoR
XH0JWFi/jZkjaWsDbNGdSoembIVR72gJZVc9nN7IfEhSI68rnEg9WR0HW3flRT0q
98h/Y2iuM0cxH6qBIvGsGuXDFoKAc/e/BWmNZQH5FWK+dIy0degPbt3XNBYGp3JY
ihuB+jdnUNDMtw4RYTflRMVcLdlNu/ZXgHqJnRw5Ges3OPs0jNA9l+tu1fhKi7tH
QvDGT1PQ8eKKq+C/8+jtWnHAuXvC1yxnFH3lu9WTv2oXuj1opz767R2539/yTkJN
Z8q8SFG0pduun7psIOXhtFjGkOVG5E54qapDlj+mpBdle/Ng1yVq4N/gxzQ4Hxjb
fV8KmoTyl7LITziZWk0dinR95CadHfeFjyhujBEQTrD/AvVJqcEQPud0wBufvH/V
XFg+YMEoGjOcnuTV5BJKNoQMlQp8tkhbtsTvIQzYCb1p9eT2rCIBFxZGltsmC8e2
B7OwbPEGhT0S1yN4geD+gmsf083zcPK4SIdh42WVGnZGBrbV+dX6v1evVJZLkmm/
rc289aYU+/VtiSKy2wIDAQABo4ICaDCCAmQwDgYDVR0PAQH/BAQDAgWgMB0GA1Ud
JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQW
BBS5P5BFLXrM0yzk8yK41EKZizm7XTAfBgNVHSMEGDAWgBSoSmpjBH3duubRObem
RWXv86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3Nw
LmludC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0
LmludC14My5sZXRzZW5jcnlwdC5vcmcvMB4GA1UdEQQXMBWCE2lwdC1iaW9kYXRh
LmdiaWYubm8wTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAm
BggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEEBgorBgEE
AdZ5AgQCBIH1BIHyAPAAdgDwlaRZ8gDRgkAQLS+TiI6tS/4dR+OZ4dA0prCoqo6y
cwAAAW4huXReAAAEAwBHMEUCIQDyTesRJD2ElRwmCKIizE/8Fvaig6g9D7Ui0hHu
Rf4UJQIgbsq4s103fbQ1o6FfJ/7ezKV9p21RnMQ5bvSyw2lsLGcAdgCyHgXMi6LN
iiBOh2b5K7mKJSBna9r6cOeySVMt74uQXgAAAW4huXROAAAEAwBHMEUCIBV8msmX
YyhbGWsEP3rRmOjGvs4BoMhvD2haOwrpLz2mAiEAyHT4/zh87Vwsd86nW25XWXr0
djZkh8NdxOnXxZJRAjUwDQYJKoZIhvcNAQELBQADggEBABF7u2rrRa/Mqa3qZOLC
828EGm2tWPSTNdHiFy3M/mtzt9n7JFcGxIFqgSfA/mP63FyXUpB4ISJ6gubW6Fw3
tQ0UE9EXtVPc9hinRlgQZIwkaR8LccCHkJ/iRbnQxJfQyJX5Dr3SKomTXDT8u0Np
HELumNvM5KZ+cwz0gtyTMRUIuzxcO4pPcGvbPt4ZqZOwpjtvx0wCflW/ozEdD1IZ
2NGvnQjJVTYZ6MuOUkAAyrUGfX4l74M8VKm27/9nWJH5qUyKmXNBLiWuwJWWUWnj
js8FoOK9ZUP0r8g9h/B/W4cxQZoTx6YtHmrqNzDKySp2BZP5d/6DH0yruuUbVo9z
+h0=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 317054172852696286755148602494475570215157
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-31 11:10:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-29 11:10:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ipt-biodata.gbif.no'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 842792982108845920152819445829967798109852341310865212296212766692985049534163795824952714203033148623513057547443541625790932537212112854483181457970572414022547503283738613970173424875169230514406925565903196151611407265222964889562796298643627032629221770124205604629583503179919198310408175668332444489877429608099207417537851929338518826678929127559701610949830840076085436757256402968762898438262542051725342258157936278063667055320455824977008219279479889690011675432668486445332482392748154088886984722856829373606252621317042728056380806002951702930978410125132003276446325449964382112215592684711572043869718072143673764429932883684891187806476787446408272899494381776512302274209966785096019221686932070572105847872535500696659135248261508112491001070742349682989183324183603183328819379977750967850874784896389650828107230805662058979349651564574297069163450115699556049601408664630879334304129841281374909145654231763322302566513462710793521073315926078193515804346757781877887043305105947063951085423393088342845385984207608468864270654946356626904388049166505335487162067989351320370002056673695203338216402216291459532753604005246636318364432592159116272814764354681573098036549804399298362538750821914430880883061467
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b93f90452d7accd32ce4f322b8d442998b39bb5d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipt-biodata.gbif.no'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016e21b9745e0000040300473045022100f24deb11243d84951c2608a222cc4ffc16f6a283a83d0fb522d211ee45fe142502206ecab8b35d377db435a3a15f27fedecca57da76d519cc4396ef4b2c3696c2c67007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016e21b9744e00000403004730450220157c9ac99763285b196b043f7ad198e8c6bece01a0c86f0f685a3b0ae92f3da6022100c874f8ff387ced5c2c77cea75b6e57597af476366487c35dc4e9d7c592510235
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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