vitaminer.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ae:4f:ec:7c:ca:04:4d:eb:4d:5c:2f:07:17:3a:d9:4e:c0 was issued on by Let's Encrypt.

With 24 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=vitaminer.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ae:4f:ec:7c:ca:04:4d:eb:4d:5c:2f:07:17:3a:d9:4e:c0
Serial Number (int): 320652226564273866974977703929511895715520
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 54:b8:3a:86:0c:80:58:ee:4b:97:14:30:7d:fe:ae:32:a7:e4:ce:21
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 1c:5e:8f:e5:dc:bf:a0:3e:86:48:df:38:e9:0d:15:d7:39:42:cd:8f
Fingerprint (sha256): cf:4d:94:a1:3e:46:cf:4a:c5:f1:07:36:8e:81:c1:e3:3d:d8:b7:6a:46:02:eb:8e:bf:04:7a:19:d9:6e:73:9b

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate vitaminer.org

24

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for vitaminer.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cpanel.helsekostbutikk.com
cpanel.helsekostbutikken.net
cpanel.vitaminer.org
helsekostbutikk.com
helsekostbutikk.lablogic.no
helsekostbutikken.lablogic.no
helsekostbutikken.net
mail.helsekostbutikk.com
mail.helsekostbutikken.net
mail.vitaminer.org
vitaminer.lablogic.no
vitaminer.org
webdisk.helsekostbutikk.com
webdisk.helsekostbutikken.net
webdisk.vitaminer.org
webmail.helsekostbutikk.com
webmail.helsekostbutikken.net
webmail.vitaminer.org
www.helsekostbutikk.com
www.helsekostbutikk.lablogic.no
www.helsekostbutikken.lablogic.no
www.helsekostbutikken.net
www.vitaminer.lablogic.no
www.vitaminer.org

Other certificates including the domain name vitaminer.org

(limited to 100 certificates)
kaninoppdrett.no
kosthold.info
www.kosthold.eu
kakaopulver.no
www.kakaopulver.no
vitaminer.org
vitaminer.org
fx1.no
www.helsekost.org
helsekost.org
www.nuclearsport.lablogic.no

Certificate

The complete raw certificate details for vitaminer.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4B4cJgYKW9qIMJJ1TwQ4
5iv3qazjxCIPys7530zULLGS2q38iahiZp9JjryOD7EXnTq1POhNGrNmgkCmkX0/
JXBys7HwbyG6Q847o0eFwxtCaDVWcOjxY7mnKViVbc9DKI1c9j1CvkWGfU52WOAi
s3v/V3Zpiso7aQx8jJVvijydRPk0Dt9X49UFcMXhJZwKPsO9qXb1Oi2t5Jjpy9q1
rFKrj4BwjkKrjYvN0lJa/hHz2OfNduNZsdO+Kpt1JLgBagMbRoGhfFV2qAlwnmwR
T1wnsILK8BLsUP448rkXHKXZyBnCI6dsMWISB/86YAXaN2gMSi/CKQ08bnRzwrCM
TQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 320652226564273866974977703929511895715520
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-29 20:36:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-29 20:36:16 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'vitaminer.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28292228084687356286366505443064547651599016372180897873058340995443392592960612766032671081904092559423978751301868440477062540906782175618372985910091850343930702652901625144539073198450181977176655729544498242426062834219386468618941817184812181627400734179940016902002749232244443912392269971097107017007132263683604049526020525233039379764043244320285153853199166991426585472299389584913364142449096114330904816173636276257487827832236294165556882541408795455315441047439615776361122730797721225683346743777483349816084333139455241676322655054752019047488542818763984093987134436529578488835356370460397825723469
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							54b83a860c8058ee4b9714307dfeae32a7e4ce21
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (632 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.helsekostbutikk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.helsekostbutikken.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.vitaminer.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helsekostbutikk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helsekostbutikk.lablogic.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helsekostbutikken.lablogic.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helsekostbutikken.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.helsekostbutikk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.helsekostbutikken.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.vitaminer.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vitaminer.lablogic.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vitaminer.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.helsekostbutikk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.helsekostbutikken.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.vitaminer.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.helsekostbutikk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.helsekostbutikken.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.vitaminer.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.helsekostbutikk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.helsekostbutikk.lablogic.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.helsekostbutikken.lablogic.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.helsekostbutikken.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vitaminer.lablogic.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vitaminer.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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