survey.novonordiskfonden.dk

Issued by R3

About this certificate

This digital certificate with serial number 04:47:1b:08:dc:62:68:7e:73:07:ca:3e:30:4e:07:01:21:d4 was issued on by Let's Encrypt.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=survey.novonordiskfonden.dk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:47:1b:08:dc:62:68:7e:73:07:ca:3e:30:4e:07:01:21:d4
Serial Number (int): 372645126942615490538240561732451441910228
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 56:16:a4:6a:3a:0d:a5:e8:f5:55:d4:f2:0b:cf:85:c0:ef:bf:f3:d6
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 86:6b:98:8a:de:ac:7b:a7:f0:cc:92:ad:27:0a:75:67:dc:95:cd:60
Fingerprint (sha256): d7:46:45:30:de:1f:24:3a:63:0e:aa:58:1f:fb:84:3b:51:87:83:01:aa:fd:86:ef:6c:e8:b0:0b:86:67:53:11

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate survey.novonordiskfonden.dk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for survey.novonordiskfonden.dk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

survey.novonordiskfonden.dk

Other certificates including the domain name novonordiskfonden.dk

(limited to 100 certificates)

Certificate

The complete raw certificate details for survey.novonordiskfonden.dk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAi6Ue8rEgReEPkT3G83PO
qSvqHV+83L5GvQ3n5dlgL9L0k6v01i5OA0ZNrgAu/XSYijMYJRDkDRhqDvtZt9Z+
6ca1wnQ8E8b8R70//5UclM9hcMt2ObFjmnyg7e2nT5l6/EHmRcgh6vkVX4P6K17v
u6nDwM9rB0a7cXpuPsqUVtEuPoK5z/jhxXJhpwSGXn1Y6VQsIwDPXh+MEvu4hHwr
oxbNSTVOCHyTwi/dwmZU9ehHGmnftXQaePVHzKXhSc17mYtCAXbqMTYkZM0tqkTR
eV5NgvVs8YE8reYgm5OCrEK/k87CWH7jXVFkLYE2e752CoDKF/E5Kl7fKcpndaY6
Xq/mxAPEgXnO16CZh60U0VYTmiaWVtkMmbQ96FS9dag7mFMVxOKA1BzzwPt44Xix
DO5vn5wR16RE5USZJIvYmLeR1CEdzmPTlWCSUsXkIUoDJMqWw5qqaGlso0sELPgt
gKhVIhXRKK/rrISZLBeSszq15SWRQSt30PseDeU7L+HoW1Ni5/C4ge6tEahd7MJf
t6C1WrGQBhJ84P3U9/ZurP7T+LVds09WA7HDd1AjQSGoHG7XqSbVeru7TLFJXavW
lhrLHIZimeYK0vtz16IzZhZbFVOVGdIMmMwTsY2IYhPisFw8cwwddLGNMKeJd3w5
ty3A8rV1Q5XWOz+p9Wde5T0CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 372645126942615490538240561732451441910228
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-13 05:08:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-13 05:08:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'survey.novonordiskfonden.dk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 569701910072716310141692207483367550032648774394375798873100416385214584983264387307279047411374721308552187469535593885195317832999814822227171717439417990779454392321517464082086677984459623127305761469981107652701591240332474689251997594770284788149254231592998272638041034013929606066064582715715295714241684002475080358526025863983835869399815369155868724007490046197817300685346830343597273271881800794337204928741048742748437024324313179683530056077210295160953118916582007109960959049891946177740468117491279588308141958112752259171903774798300206768315617946639146744825899294171502488180336076535501946487590016394127337267879528174036722350114911103100294311884478843574212813391883240430146268020713558383219222368688768964483288505923358354989106149622626222787825424684112462552565709892663284126571372093854042639668507727465155153657720213362004289528014201368828961496986292121925185246928044643023859605082377570871649580016934191184554137525095670217593948286898043609321704086119347600402671481772378786994066428402926473413741434239014858969403462199621801627614399455834777519881076009260694743803574132437345352819576190419370547206003944633062306038795867050485024962672763588030208964906023555200738127701309
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5616a46a3a0da5e8f555d4f20bcf85c0efbff3d6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'survey.novonordiskfonden.dk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018da114788f0000040300463044022079495e522ccd6c465de283f55cd38079096c84414108b6d438cb6e30631058130220148eb7e6424d89d77f6f9979687b3954a1d7b264c0506ebb901ca7398fe4653d007500a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018da11478d700000403004630440220618a33d78b801ee3684aa524be4d3004a0e355e5d80a437577eb993220c1a5a802205405524576a856ae283762ff8f8704a9e7aadba991edb22c91ec680257c8a944
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00586341b604943955f10c9532f73439801746ff59d5b28f4f62292075b22d183fcdcb8363a95359d66f62a01e3bde0326334a1f0ea55412ef1d5b6d05e4899682e2ad617228c7b18d43c46f2309bc78ccc068d7b354c0d18b292ac3471c89fdb03238bbd72241d9ad773c01ee10c8b93cc60569a87dac93b79cc0cc9b92d45ddfc2e163eadd44c79cd48251c61678ec2467b359c7458dba40117e5bcc99ec25457e03e1f5bf069f8e5ce665593a988f01441352350af118b72b1af59d4037917dc19cf04ce3599f7ce263be29d66c7ce52e62b8844fbbcfb734559f13cbd02b0319beabd6826a9f8fd4785ab792dbc6cf15694146b3290101c7817b7aaae04448