grafana.fintlabs.no

Issued by R3

About this certificate

This digital certificate with serial number 03:ac:5f:88:b0:77:bc:84:2a:41:6a:a5:00:e9:32:4e:88:4e was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=grafana.fintlabs.no

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ac:5f:88:b0:77:bc:84:2a:41:6a:a5:00:e9:32:4e:88:4e
Serial Number (int): 319992411296845067941547640791065770756174
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 8d:1d:93:55:e7:81:48:c0:05:60:ef:ce:24:5e:37:ff:4f:68:8e:66
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 06:72:df:96:48:f5:1f:fe:44:8f:77:5d:56:b4:b3:8a:51:4e:8c:9c
Fingerprint (sha256): da:5a:6b:4f:78:d6:85:d6:73:8a:27:48:3d:e7:e6:a2:34:7b:5b:5a:0b:24:8b:38:6d:dd:30:38:3a:c9:d8:bd

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate grafana.fintlabs.no

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for grafana.fintlabs.no

Public Key Algorithm

RSA

Key Size

3072

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

grafana.fintlabs.no
public-grafana-33a76-fintlabs-no.aivencloud.com

Other certificates including the domain name fintlabs.no

(limited to 100 certificates)

Certificate

The complete raw certificate details for grafana.fintlabs.no in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 319992411296845067941547640791065770756174
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-21 18:02:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-22 18:02:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'grafana.fintlabs.no'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3184 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 4671765469848710906804658712220805014816668886659772524430493115800157155257363011268053419795519711326589779819333382624617978112209742226020963256435926729971694908411329873118028979463696338373345697557239569384094092679149400553441992754497555908939210359762607717860623391093590640101199559398656462077744765425597583729754718300449955196345651311485362176303530033039216998878987099573432529844956304587655950250583457139469275678780307639294889700097428352002557498797391189722929116602448691625773573741732664628509108872024787506708621098274448927516804124768089109472150783947260170606694130256212632373563889076101530206893534806097930143340855527321507373913529381674072793096046566799490870932471124209713207100116247784249623436303191653903261854207888342536206258674784875058575133720740081470639996301370073489799155196378421064936507753363798310744504830238332609351357375570335134473642675588521082399055709
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8d1d9355e78148c00560efce245e37ff4f688e66
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grafana.fintlabs.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'public-grafana-33a76-fintlabs-no.aivencloud.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f200770041c8cab1df22464a10c6a13a0942875e4e318b1b03ebeb4bc768f090629606f60000017f1daa34c80000040300483046022100873bf9ac9b441c0838894ca42164bc8d6cdb64e6f2921cb1f196282c891a1c99022100841d2638436044810da32c63f81d3a2b5d5a0e69071f949d2f4de495805422e500770046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d470000017f1daa34e40000040300483046022100976b4c9950344458c523755a4b90ed98ad96e195a69c61287e59f9b8817384cd0221008c19072ab57ead0d4e572cca510cc620a5b997cb63e4c5e384834e6783a810d0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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