ting.tekniskmuseum.no

Issued by RapidSSL SHA256 CA

About this certificate

This digital certificate with serial number 0b:4f:bf:b9:b6:91:f2:5f:1e:0d:17:d1:00:9d:8f:8a was issued on by GeoTrust Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Certificate Subject

CN=ting.tekniskmuseum.no

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:4f:bf:b9:b6:91:f2:5f:1e:0d:17:d1:00:9d:8f:8a
Serial Number (int): 15035588059405399191173093980771291018
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 97:c2:27:50:9e:c2:c9:ec:0c:88:32:c8:7c:ad:e2:a6:01:4f:da:6f

Fingerprint (sha1): 9f:85:30:a3:3f:26:34:19:26:b5:81:61:4d:f1:cd:3f:c2:9c:9f:6e
Fingerprint (sha256): bc:60:b9:d7:76:d6:fc:ed:06:af:8a:1b:b0:ca:85:a4:f5:63:4a:ec:7d:8c:62:91:d1:f7:92:54:d5:9c:6b:7e

Issuing Certificate URL: http://gp.symcb.com/gp.crt

Revocation information

OCSP Server: http://gp.symcd.com
CRL Distribution Point: http://gp.symcb.com/gp.crl

Check the revocation status for certificate ting.tekniskmuseum.no

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ting.tekniskmuseum.no

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ting.tekniskmuseum.no

Other certificates including the domain name tekniskmuseum.no

(limited to 100 certificates)
nettbutikk.tekniskmuseum.no
keybot.w3a.io
ishpssb2019.tekniskmuseum.no
streamviewer.public.dev.tesuji.io
eventos.movilidadbogota.gov.co
sms.saler.ca
ting.tekniskmuseum.no
tingenesmetode.no
bestilling.tekniskmuseum.no
folk.tekniskmuseum.no
*.tekniskmuseum.no
epost.tekniskmuseum.no
tingenesmetode.no
tingenesmetode.no
www.coixinet.cat
huizerosolutions.org
melhoragora.mundocaixa.com.br
eventos.movilidadbogota.gov.co
bestilling.tekniskmuseum.no
folk.tekniskmuseum.no
tingenesmetode.no
ishpssb2019.tekniskmuseum.no
nettbutikk.tekniskmuseum.no
nettbutikk.tekniskmuseum.no
tingenesmetode.no
nettbutikk.tekniskmuseum.no
bestilling.tekniskmuseum.no
t.metastre.am
epost.tekniskmuseum.no
bestilling.tekniskmuseum.no
ishpssb2019.tekniskmuseum.no
tingenesmetode.no
bestilling.tekniskmuseum.no
tingenesmetode.no
tingene.tekniskmuseum.no
*.tekniskmuseum.no
map.tekniskmuseum.no
nettbutikk.tekniskmuseum.no
map.tekniskmuseum.no
nettbutikk.tekniskmuseum.no
www.verena-tudyka.de
bestilling.tekniskmuseum.no
www.tekniskmuseum.no
www.powermap.io
www.bonbiz.in
map.tekniskmuseum.no
epost.tekniskmuseum.no
ting.tekniskmuseum.no
tingenesmetode.no
tingenesmetode.no
*.tekniskmuseum.no
ting.tekniskmuseum.no
app.bbab.gq
www.tekniskmuseum.no
nettbutikk.tekniskmuseum.no
www.tekniskmuseum.no
nettbutikk.tekniskmuseum.no
resto.arshof.com
jarnedeschacht.be
www.tekniskmuseum.no
nettbutikk.tekniskmuseum.no
*.tekniskmuseum.no
www.tekniskmuseum.no
folk.tekniskmuseum.no
bestilling.tekniskmuseum.no

Certificate

The complete raw certificate details for ting.tekniskmuseum.no in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/xy7V5q15TZswMh47it
cD9RfTUeQcrCwh/Jtc9aVOq+RFqIL59CHS54apmEmfUbzLgUj4iLDMKutRd8MqLB
cuTNAQHdzS6cwJSQxFZzNqC8icoZxore29FOOiXgitp8w1RaP8o1FzyGiBEg2NMS
HmBWKVJVKLYLXUD8trYHPrb+XdB1n+8qBtpWaKnCeIHR7TUSmZUlf5Ad5NmW9sb4
NPN0qwNBuQuzWzFF+HcoKpMtD5OFUa1znsj8pgEj14fI+b6/s2ARYUCythyjWEOa
RMxq1MxtiiPm7OSogLz9UnjSGyeRNOwJdLdefgKHmzgY9B2vLl1frxxZHSB5ZdrA
XwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15035588059405399191173093980771291018
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL SHA256 CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-03-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-16 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'ting.tekniskmuseum.no'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19691424479023496550746437958977689229975633583865369791345038445824887419303028451285469552965783440037535771769291472809417185269093594853634467775001868969013567493846667862535712373409649543207699405456366395459508138026397747658350379242117624336830496203352883399742920911426628111418107453462263696701281841167920667444235530261912362964284273395709866571685318007639599322301128517422958481222974033167044002685779666946053897539359461170149288173131394464166614238760740314332862292064516911796649598203594248352586075653488918433344938676215184777685138253710666251959679852497765099178598176613826047950943
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ting.tekniskmuseum.no'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcb.com/gp.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.rapidssl.com/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.rapidssl.com/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 97c227509ec2c9ec0c8832c87cade2a6014fda6f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcb.com/gp.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc0000015ad937b947000004030047304502203e2c822fa44299fda84f43b3b69abe40526dffac2a963a24cb34d925299e9d4f022100d0288c873277df7b836152b4c0e1547f7a2ca1d74e3f07568a3e0f97a41718df007700a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000015ad937b9800000040300483046022100e9bf87b88de0065f3d0e2ceb0c51a29b4aa77b7e68a22e71fda1b8cde4a0d002022100b3adf437eb875ce48fcd66e8613e1efc20adb04b0bed4923d66e6f2b0604fc71
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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