visitnorway.com
Issued by R3
About this certificate
This digital certificate with serial number 04:88:d6:fb:2e:8b:30:31:49:ba:15:65:40:76:6a:5d:39:f5 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=visitnorway.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:88:d6:fb:2e:8b:30:31:49:ba:15:65:40:76:6a:5d:39:f5Serial Number (int): 395013304629916553079512277950053127895541
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: d1:06:34:fb:7a:5c:71:80:c5:b2:06:4e:29:73:40:2e:97:6a:b4:a3
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): fc:d1:b2:fb:3a:4d:84:cc:0a:57:e0:4b:a8:5b:52:56:4e:c5:2a:f1
Fingerprint (sha256): b6:63:bb:81:1a:33:81:75:13:68:ef:e1:9b:a7:b5:38:76:0b:13:42:ba:20:55:50:ce:dd:f1:30:79:30:23:df
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate visitnorway.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for visitnorway.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
visitnorway.com
Other certificates including the domain name visitnorway.com
(limited to 100 certificates)
*.visitnorway.com
sni.cloudflaressl.com
www.visitnorway.com
visitnorway.com
visitnorway.com
collect.visitnorway.com
content.visitnorway.com
visitnorway.com
sni.cloudflaressl.com
sni.cloudflaressl.com
www.visitnorway.com
*.visitnorway.com
booking.visitnorway.com
sni.cloudflaressl.com
visitnorway.com
sni.cloudflaressl.com
*.visitnorway.com
*.visitnorway.com
*.visitnorway.com
visitnorway.com
visitnorway.com
visitnorway.com
*.visitnorway.com
visitnorway.com
*.visitnorway.com
visitnorway.com
sni.cloudflaressl.com
www.visitnorway.com
visitnorway.com
visitnorway.com
collect.visitnorway.com
content.visitnorway.com
visitnorway.com
sni.cloudflaressl.com
sni.cloudflaressl.com
www.visitnorway.com
*.visitnorway.com
booking.visitnorway.com
sni.cloudflaressl.com
visitnorway.com
sni.cloudflaressl.com
*.visitnorway.com
*.visitnorway.com
*.visitnorway.com
visitnorway.com
visitnorway.com
visitnorway.com
*.visitnorway.com
visitnorway.com
*.visitnorway.com
visitnorway.com
Certificate
The complete raw certificate details for visitnorway.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIE6zCCA9OgAwIBAgISBIjW+y6LMDFJuhVlQHZqXTn1MA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzA5MTQyMDMwMTdaFw0yMzEyMTMyMDMwMTZaMBoxGDAWBgNVBAMT D3Zpc2l0bm9yd2F5LmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AOpx7osqhYLYk1rp92HT4odV2IIm8OFiaB7WkhIChbimoZX9for7vXtTY6BaROqa LVuu8LQ8VrNnK3GxWiiE1ul51gIwggnjtN3nCnfW+Z99rIuxLHphaOaObg+zrEiX Qkf7fKxTFpZW3Yam8sTNkB1pC4tR3BJ1sIY9qQmh52TGqedx4/ymRJ0YMZ9dh/F7 ldQZN9uoA+fhclfWD9oCqPWAdu1DeLfeIbM/h3sENNynuKWezGmyCAF+Ox4LJV3W 4pw5SuOrxCpurPNbtHpC4mxrvEnPgL0TPUmp+L3lC5HI16zpC7p6srJGwFDM2XM4 Uvs2cU2UOSZDjc5RXs//4MkCAwEAAaOCAhEwggINMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNV HQ4EFgQU0QY0+3pccYDFsgZOKXNALpdqtKMwHwYDVR0jBBgwFoAUFC6zF7dYVsuu UAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8v cjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9y Zy8wGgYDVR0RBBMwEYIPdmlzaXRub3J3YXkuY29tMBMGA1UdIAQMMAowCAYGZ4EM AQIBMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHcAejKMVNi3LbYg6jjgUh7phBZw MhOFTTvSK8E6V6NS61IAAAGKlZoUvQAABAMASDBGAiEA2ZJPdGZ2yVq63cd193uD rbrnefAmd84Sx+dBJWZVTagCIQCgheCpDEGmdyrHxeFgHP9BZnhwc2HJSbCJTovQ /hxKOwB1ALc++yTfnE26dfI5xbpY9Gxd/ELPep81xJ4dCYEl7bSZAAABipWaFqEA AAQDAEYwRAIgODU27iu7e1gmV5sB4a6TtBsyTuVGGZnQFJ5Cz52AtwoCIAX+EVWX b09GP/+jZjgWBM7QCSjEFctohUD0w+Sv5jP1MA0GCSqGSIb3DQEBCwUAA4IBAQB6 tmNl1NBw27ynalYxeeFl6xG0No/MeO+RuBzHtbCYosyaofokCB94TVDABXbIF+F+ ici/fN+xKPSmNo9Os8p59JOt200gefBGYimJHX3vUjjfN46SULK0x5gxMV7mJL0N ekLlwXJLaxX8AgcFSpRFxPAxAL9z/hbM4KwO5pjtSAN/ZjN6jjunYXMC4eKMwMCW AfrxxPlSAgxra1CHxdxaIi0Si19lGJG4+S/2xtupRrb5dgdSmiUINbyfNOVIn8lH yLuZmLsz2EpTSOD7JXa+HbENrUnfwTHr3lv+K7vnvJA7xeE21fv+nhdSQAn7PnC3 jjtRuiln5CYxsCXfs8cY -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6nHuiyqFgtiTWun3YdPi h1XYgibw4WJoHtaSEgKFuKahlf1+ivu9e1NjoFpE6potW67wtDxWs2crcbFaKITW 6XnWAjCCCeO03ecKd9b5n32si7EsemFo5o5uD7OsSJdCR/t8rFMWllbdhqbyxM2Q HWkLi1HcEnWwhj2pCaHnZMap53Hj/KZEnRgxn12H8XuV1Bk326gD5+FyV9YP2gKo 9YB27UN4t94hsz+HewQ03Ke4pZ7MabIIAX47HgslXdbinDlK46vEKm6s81u0ekLi bGu8Sc+AvRM9San4veULkcjXrOkLunqyskbAUMzZczhS+zZxTZQ5JkONzlFez//g yQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 395013304629916553079512277950053127895541 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-14 20:30:17 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-13 20:30:16 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'visitnorway.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29595945231991823124712080404204395344192316191700586322580014034643844620902776148864727373806553910163462150680631763249778604808136119310288981422543718741448648533565498033474851829250355380138625584383737847752932847253977753342476937480020080867714923925034924799834360625108864434709002688445526280070477566393009551204119935134417738908461555439146901719608007121116104657938871004559029307460855267121683919358116886637758412193058410780484329434867033297439171192034684537068868204851732726524500563532123200338378943502054521341672072442576637553724634052693009411110140835665663158199066039616473996976329 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) d10634fb7a5c7180c5b2064e2973402e976ab4a3 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitnorway.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018a959a14bd0000040300483046022100d9924f746676c95abaddc775f77b83adbae779f02677ce12c7e7412566554da8022100a085e0a90c41a6772ac7c5e1601cff416678707361c949b0894e8bd0fe1c4a3b007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018a959a16a100000403004630440220383536ee2bbb7b5826579b01e1ae93b41b324ee5461999d0149e42cf9d80b70a022005fe1155976f4f463fffa366381604ced00928c415cb688540f4c3e4afe633f5 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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