nli.no

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:79:3b:2f:38:7f:a2:8f:68:1f:e0:8a:66:b3:e2:7e:57:34 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=nli.no

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:79:3b:2f:38:7f:a2:8f:68:1f:e0:8a:66:b3:e2:7e:57:34
Serial Number (int): 302589693828345179575842412107519670245172
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 23:fa:cf:c1:f7:5c:d7:97:a3:4d:4f:95:29:51:80:e7:2d:e0:27:e1
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 7f:27:bd:9f:de:d0:e6:ab:81:ea:2d:d7:39:1b:00:f7:48:00:4f:e8
Fingerprint (sha256): ca:5d:63:92:d4:72:e4:4d:5f:b4:bb:70:9a:4c:a3:8f:a2:8d:81:98:95:e8:c0:d5:02:38:cb:82:07:c0:a4:95

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate nli.no

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nli.no

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

nli.no
www.nli.no

Other certificates including the domain name nli.no

(limited to 100 certificates)

Certificate

The complete raw certificate details for nli.no in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 302589693828345179575842412107519670245172
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-09 22:11:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-08 22:11:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nli.no'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 694997812000280625163562292764207504428885867242839779876932154700727404855405638422758221565816507102755383560896000132487789784695895868310453145729779508035692978084938787062283118158717726498823835736206044910439674721612802438554703908167966831060296967046513570645973351565412497856340672366304873295467957907495645427365613986574534183729975035209105274604297319820377095322642361961768490131776078425499446404376924016631018065513595000192488680671935127964549989641697434099915647091398990137626952089485947139599915219172120333857740045236033274269702873785536981966077691485549252050768314724526300115905367989173348561894558598256776099741921007116838313969568925331447491024805200843211825730298750935278288880255210889429765390917569850524635084519183715712485025752848250020747895162046170957287776961849518134619900164411112104308526278370936624366411785652483172219148714571103084612715542984817761773033503841899912595748306182237836551740460341407773305925923575786099803564998846577670074736875160643403406315358221233109907237372713672635058201478707752570944143382371610362080871390998963735665996238652927377902919053428955839376700192328832956665213450943451202642874711640079354003899154099560767846917346513
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							23facfc1f75cd797a34d4f95295180e72de027e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nli.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nli.no'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016eecee9d57000004030047304502207257798fbb14a766db38838b74be570eeb233ae1e0c97951dcc2b766b37314660221009980f44e77295c283c5ecbbe963078734bc7a08bd448ac99a3450cb56b7de88000770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016eecee9daf00000403004830460221008d79d9d726bd815a0ec95789fe88ad41bfa442cee91b423c7a67c514070118ac02210095040bd9a346f30bdbbebe80d13dcf6b24d0a6e817b02405172ac2c42c759401
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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