nli.no

Issued by R3

About this certificate

This digital certificate with serial number 03:62:e1:82:9f:cd:27:33:e5:08:1c:79:7e:34:09:18:53:76 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=nli.no

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:62:e1:82:9f:cd:27:33:e5:08:1c:79:7e:34:09:18:53:76
Serial Number (int): 294984284292332957906488645346660418343798
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3c:40:df:a2:41:92:8b:34:b7:84:96:94:87:5b:52:9d:d7:a2:05:b9
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 9f:9d:72:31:8b:ca:18:2c:14:69:67:40:fc:25:37:a5:88:5f:4b:5a
Fingerprint (sha256): cb:70:34:22:41:41:dd:d1:2a:48:16:61:c4:e8:72:b0:fd:42:13:44:48:13:b9:3f:aa:85:b1:21:bb:16:27:49

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate nli.no

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nli.no

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

nli.no
www.nli.no

Other certificates including the domain name nli.no

(limited to 100 certificates)
mail.nli.no
nli.no
mail.nli.no
lsrp.nli.no
nli.no
nli.no
lsrp.nli.no
sip.nli.no
conferencing.nli.no
sip.nli.no
lsrp.nli.no
conferencing.nli.no
nli.no
nli.no
mail.nli.no
nli.no
nli.no
sip.nli.no
mail.nli.no
nli.no
mail.nli.no
nli.no
ocscontent.nli.no
mail.nli.no
nli.no
mail.nli.no
mail.nli.no
sip.nli.no
nli.no
nli.no
nli.no
nli.no
lsrp.nli.no
nli.no
wfm.nli.no
wfm.nli.no
lsrp.nli.no
ocscontent.nli.no
sip.nli.no
sip.nli.no

Certificate

The complete raw certificate details for nli.no in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 294984284292332957906488645346660418343798
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-04 21:19:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-03 21:19:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nli.no'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 961662985932275210762293237745447621222439795281290742154812363583371171134530058522464392363736110797814275277588245260244098682319751261393427741260184852992757897176686934149691657039337118654578681736369715548095819160927791310973924849689197128929736140147461740863968580824713457377746564919798584335700774780047392515833351130985085535141951063234040178276195004426433074311186610317958238392300903718674904990079380404378190446740500951213448158179034233177627927583258247742128231900211490234185564800666369490481038756637251740768778403207373869691165753457077610115498155127173650117264249377233696236947850427782921262984750495607713198262002885999849688605660444592958888729035894220150803758758042210899436524906505173288415732997812551324854161924773057882817836368236154459665172420265174820017108805655252209155556487794600687215198669436245687967536659948339350194097539778777451432975619169261324026349112090831945073462309094575580009719518283143935702349851238842208948381710909012349149458348450137255151209368680511477717004741274465464580531463542029801953153032077374647516706545850969818592332625202542244914256939100698971086279801070389140925617995102544737081485974126214655765092707961921481226546439749
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3c40dfa241928b34b7849694875b529dd7a205b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nli.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nli.no'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001874e5afc0b000004030046304402204be4b2e884a6783afcca7abc72c9d02e2a113a86422ef94184db4f3169adf30d02206fc18e62156f93b71d61e8d607a0ecc2752ba3f17f5f2f292b289f5990074040007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a000001874e5afc51000004030047304502204a04b2dd917750c5d236ff7250e7e43bc1d4aafee8624e5c009f855cd22d7602022100c566d26546c92d61d8cea031d002e4b719b12891c5a53089e1170cebec378f6c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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