reisepodden.no

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:60:a5:5f:54:f3:b3:a6:62:b0:23:28:53:7f:7a:dd:01:3e was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=reisepodden.no

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:60:a5:5f:54:f3:b3:a6:62:b0:23:28:53:7f:7a:dd:01:3e
Serial Number (int): 294223782630227353522201201470485787640126
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 81:6d:d9:45:91:cf:9e:78:64:0e:6b:56:6d:5f:d7:d4:ae:1c:29:67
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ba:cb:84:d0:42:54:71:54:6b:97:81:bf:6e:40:b7:3e:6f:72:2f:91
Fingerprint (sha256): cb:8b:4c:52:5e:9e:ab:74:9e:74:7e:82:e8:c6:f3:d2:05:0f:45:51:0a:9a:9d:3f:64:98:64:46:05:55:98:f5

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate reisepodden.no

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for reisepodden.no

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

reisepodden.no
www.reisepodden.no

Other certificates including the domain name reisepodden.no

(limited to 100 certificates)
reisepodden.no
reisepodden.no
reisepodden.no
reisepodden.no
reisepodden.no
reisepodden.no
reisepodden.no
reisepodden.no
reisepodden.no
reisepodden.no
reisepodden.no
reisepodden.no
reisepodden.no
reisepodden.no
reisepodden.no
reisepodden.no
reisepodden.no
reisepodden.no
reisepodden.no
reisepodden.no
reisepodden.no
reisepodden.no
reisepodden.no
reisepodden.no
reisepodden.no
reisepodden.no
reisepodden.no
reisepodden.no
reisepodden.no
reisepodden.no
reisepodden.no
reisepodden.no
reisepodden.no
reisepodden.no
reisepodden.no
reisepodden.no
reisepodden.no
reisepodden.no
reisepodden.no
reisepodden.no
reisepodden.no
reisepodden.no
reisepodden.no
reisepodden.no
reisepodden.no

Certificate

The complete raw certificate details for reisepodden.no in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 294223782630227353522201201470485787640126
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-30 23:02:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-29 23:02:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'reisepodden.no'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 828929119253114216436492527118091294097739213160301812575077860486646145807670034244643652159424841771172361930246577163778819339581725639339174746605097374416499090218621306189780148776136618094013434256475645162082192081079760968784054207743851462239457341437637632096563761026677292711114606990038305125732581188050280825806239804568923817253631383886431554947981855323084558306749950461861244101736632422042298021773520870794991669086720971128766535641597615268705463721453536057269118081969169373349273027318521122107341502698143784631902275542821401324873171205389200214464611288546771210501952638434977069436068070761759654920949078214511336158649390222818788017399736199323521616331085374420407066712733396825543467938623026287357007418267419584164880222812192260760606520966702047285582636260852331009586666163946625257604687830517219328642855528720310853727147848324563994577232178679474699220398840350104072503707886203458561095455859389799228590448758598920101695976501785201270230742127052305061506522021327110383805924706001383717883041012333582486868873784970398714420365934620780797002193444671694292987470433183676331346455402736168084760845113924259532892820314143487686852320295332368089979597815593934900899093737
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							816dd94591cf9e78640e6b566d5fd7d4ae1c2967
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reisepodden.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reisepodden.no'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016d84a01d34000004030046304402202d5f158478f9725fe01ac78034edc1e8524a981b98bae7b78dc86389644dc758022003c96f31233c42715b9508bbe2e7818fb06c9b1b169f4c933134675517c05ec900760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016d84a01d050000040300473045022100912cfaf4ed4a472d32d0617d53e87c5e6a54441a2d846dda7ea5d19db0b90c0e0220578b049f86394e99b69ae5404009ef047e989587054b15b45bbdaa5fdd779ce5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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