ess-search.nsd.no
Issued by R3
About this certificate
This digital certificate with serial number 03:54:6f:67:ef:c3:4a:21:2d:81:43:4a:60:0a:13:f5:5e:e6 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=ess-search.nsd.no
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:54:6f:67:ef:c3:4a:21:2d:81:43:4a:60:0a:13:f5:5e:e6Serial Number (int): 290068660593716454583133801236849856175846
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: c6:a3:b5:43:d4:dc:5f:dd:cc:de:92:d4:b6:a2:26:d7:4a:ff:16:08
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 4a:95:fa:6f:06:be:35:a9:15:76:7a:db:62:88:f9:03:14:8d:dc:da
Fingerprint (sha256): d5:98:5e:96:2d:5e:e3:43:5f:fc:70:3d:d8:8d:2f:8d:e2:84:ba:90:40:55:68:66:b4:2e:90:77:52:69:97:27
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate ess-search.nsd.no
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for ess-search.nsd.no
Public Key Algorithm
ECDSA
Key Size
256
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
ess-search.nsd.no
Other certificates including the domain name nsd.no
(limited to 100 certificates)
uhskypepool02.uhad.no
fagskole.nsd.no
surveybanken.nsd.no
uhskypepool02.uhad.no
sip.s2.l.uhad.no
fagskole.nsd.no
www.nsd.no
fagskole.nsd.no
uhskypepool02.uhad.no
uhskypepool01.uhad.no
*.nsd.no
uhskypepool02.uhad.no
uhskypepool02.uhad.no
sip.s2.l.uhad.no
*.nsd.no
uhad.no
uhskypepool01.uhad.no
uhskypepool01.uhad.no
ess.nsd.no
nsd.no
uhskypepool01.uhad.no
search.nsd.no
nsd.no
uhskypepool02.uhad.no
uhskypepool01.uhad.no
sip.s1.l.uhad.no
uhskypepool02.uhad.no
uhskypepool02.uhad.no
sip.s2.l.uhad.no
uhskypepool02.uhad.no
nsd.no
uhskypepool01.uhad.no
*.nsd.no
ess.nsd.no
fagskole.nsd.no
uhskypepool02.uhad.no
sip.s1.l.uhad.no
sip.s2.l.uhad.no
uhskypepool02.uhad.no
uhskypepool01.uhad.no
uhskypepool01.uhad.no
dlmessenger-eng.dealogic.com
www-stage.nsd.no
*.nsd.no
uhskypepool01.uhad.no
uhskypepool01.uhad.no
sip.s2.l.uhad.no
uhskypepool01.uhad.no
uhskypepool01.uhad.no
nsd.no
sip.s2.l.uhad.no
nsd.no
sip.s1.l.uhad.no
*.nsd.no
pvoportal.nsd.no
nsd.no
ess-usage.nsd.no
survey-sandbox-stage.nsd.no
sip.s1.l.uhad.no
uhskypepool02.uhad.no
sip.s1.l.uhad.no
uhskypepool01.uhad.no
skolevalg.nsd.no
sip.s1.l.uhad.no
uhskypepool02.uhad.no
fagskole.nsd.no
per.nsd.no
fagskole.nsd.no
ess-search.nsd.no
sip.s1.l.uhad.no
uhskypepool01.uhad.no
studio-stage.nsd.no
sip.s2.l.uhad.no
uhskypepool01.uhad.no
uhskypepool01.uhad.no
nsd.no
uhskypepool01.uhad.no
sip.s1.l.uhad.no
nsd.no
sip.s2.l.uhad.no
uhskypepool02.uhad.no
uhskypepool02.uhad.no
fagskole.nsd.no
surveybanken.nsd.no
uhskypepool02.uhad.no
sip.s2.l.uhad.no
fagskole.nsd.no
www.nsd.no
fagskole.nsd.no
uhskypepool02.uhad.no
uhskypepool01.uhad.no
*.nsd.no
uhskypepool02.uhad.no
uhskypepool02.uhad.no
sip.s2.l.uhad.no
*.nsd.no
uhad.no
uhskypepool01.uhad.no
uhskypepool01.uhad.no
ess.nsd.no
nsd.no
uhskypepool01.uhad.no
search.nsd.no
nsd.no
uhskypepool02.uhad.no
uhskypepool01.uhad.no
sip.s1.l.uhad.no
uhskypepool02.uhad.no
uhskypepool02.uhad.no
sip.s2.l.uhad.no
uhskypepool02.uhad.no
nsd.no
uhskypepool01.uhad.no
*.nsd.no
ess.nsd.no
fagskole.nsd.no
uhskypepool02.uhad.no
sip.s1.l.uhad.no
sip.s2.l.uhad.no
uhskypepool02.uhad.no
uhskypepool01.uhad.no
uhskypepool01.uhad.no
dlmessenger-eng.dealogic.com
www-stage.nsd.no
*.nsd.no
uhskypepool01.uhad.no
uhskypepool01.uhad.no
sip.s2.l.uhad.no
uhskypepool01.uhad.no
uhskypepool01.uhad.no
nsd.no
sip.s2.l.uhad.no
nsd.no
sip.s1.l.uhad.no
*.nsd.no
pvoportal.nsd.no
nsd.no
ess-usage.nsd.no
survey-sandbox-stage.nsd.no
sip.s1.l.uhad.no
uhskypepool02.uhad.no
sip.s1.l.uhad.no
uhskypepool01.uhad.no
skolevalg.nsd.no
sip.s1.l.uhad.no
uhskypepool02.uhad.no
fagskole.nsd.no
per.nsd.no
fagskole.nsd.no
ess-search.nsd.no
sip.s1.l.uhad.no
uhskypepool01.uhad.no
studio-stage.nsd.no
sip.s2.l.uhad.no
uhskypepool01.uhad.no
uhskypepool01.uhad.no
nsd.no
uhskypepool01.uhad.no
sip.s1.l.uhad.no
nsd.no
sip.s2.l.uhad.no
uhskypepool02.uhad.no
uhskypepool02.uhad.no
Certificate
The complete raw certificate details for ess-search.nsd.no in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEXDCCA0SgAwIBAgISA1RvZ+/DSiEtgUNKYAoT9V7mMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzA0MjQxNDMwMjBaFw0yMzA3MjMxNDMwMTlaMBwxGjAYBgNVBAMT EWVzcy1zZWFyY2gubnNkLm5vMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEBFUz lkpEfBgafIO3Fm5XNjK8Xqm2BZk2dDCdw2w/E1v3UTDVp8bSFK3tw+452wnZTj3l uHzWQui3g9QzYwGA56OCAkswggJHMA4GA1UdDwEB/wQEAwIHgDAdBgNVHSUEFjAU BggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUxqO1 Q9TcX93M3pLUtqIm10r/FggwHwYDVR0jBBgwFoAUFC6zF7dYVsuuUAlA5h+vnYsU wsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8vcjMuby5sZW5j ci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9yZy8wHAYDVR0R BBUwE4IRZXNzLXNlYXJjaC5uc2Qubm8wTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYL KwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlw dC5vcmcwggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8AdQC3Pvsk35xNunXyOcW6WPRs XfxCz3qfNcSeHQmBJe20mQAAAYez4yMUAAAEAwBGMEQCIDJGK3g9U23j05LXGXjq PDy74LPmzl6xF21NXWKvtj51AiBEe4Krt4BE6IWFTIlZMvSiYsteimOLsaTwqeuD zXraAAB2AHoyjFTYty22IOo44FIe6YQWcDIThU070ivBOlejUutSAAABh7PjIyYA AAQDAEcwRQIgD7ToJMPtWHlgqp1e6B6aTNRvx5uHKqnVGfso9VWoJ0YCIQD6pHtA Q1MqyoVlDgG7ohPtgAIwuXMnIYpaf+x6qDUB6TANBgkqhkiG9w0BAQsFAAOCAQEA Z9IMKXnLAybtsOs0qyU/oLqsCzGdSp0muVfwt/PSTFWCBMrWipbSNFyavdtf8yrL HXwaU9rskGWxMhYXav/zeC8Vbw/tWZLSuXQs8uJOuH0pLLvAWcYLHc4GJkUDTEqI 3XGs1bT9SvdmKiJ8GbvTcvLa8cGvhG/DswIZcd9m+V6uamTuYGLmvPoTJo8XVSHJ 738eC/meK1MJQuwTLI0430OYSvBcAcP0Ud9r7KzsT8/CgJGzRqwofcJmcOKfAljY jeBKySE/ZQ6A1ZUwEw1pVlLSv/egZxywINm6PW3mCYMtp5p5dqc9YAhunBZ9QjbE l7Jm/zY4vEqYIZNqDhGtHA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEBFUzlkpEfBgafIO3Fm5XNjK8Xqm2 BZk2dDCdw2w/E1v3UTDVp8bSFK3tw+452wnZTj3luHzWQui3g9QzYwGA5w== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 290068660593716454583133801236849856175846 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-24 14:30:20 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-23 14:30:19 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ess-search.nsd.no' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey) . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1) . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits) 0004045533964a447c181a7c83b7166e573632bc5ea9b605993674309dc36c3f135bf75130d5a7c6d214adedc3ee39db09d94e3de5b87cd642e8b783d433630180e7 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits) 0780 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) c6a3b543d4dc5fddccde92d4b6a226d74aff1608 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ess-search.nsd.no' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000187b3e323140000040300463044022032462b783d536de3d392d71978ea3c3cbbe0b3e6ce5eb1176d4d5d62afb63e750220447b82abb78044e885854c895932f4a262cb5e8a638bb1a4f0a9eb83cd7ada000076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000187b3e32326000004030047304502200fb4e824c3ed587960aa9d5ee81e9a4cd46fc79b872aa9d519fb28f555a82746022100faa47b4043532aca85650e01bba213ed800230b97327218a5a7fec7aa83501e9 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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