bibliotek.lunner.kommune.no

Issued by R3

About this certificate

This digital certificate with serial number 04:87:af:ed:4b:ee:02:ce:9c:90:93:d2:11:df:7a:16:96:35 was issued on by Let's Encrypt.

With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=bibliotek.lunner.kommune.no

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:87:af:ed:4b:ee:02:ce:9c:90:93:d2:11:df:7a:16:96:35
Serial Number (int): 394621110275023403886322129493652225300021
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 28:a1:cc:3b:9c:d6:d2:65:66:e1:c6:2a:cb:7c:ee:6c:b3:da:78:f0
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 56:78:be:d2:96:e3:61:90:c0:b4:98:7f:ce:89:d3:5f:8c:f9:16:c1
Fingerprint (sha256): e2:87:49:4d:af:69:2f:ce:4f:94:87:0a:47:79:87:3a:3d:f3:8b:dd:ce:db:fa:4e:77:8a:1b:13:97:46:0c:2e

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate bibliotek.lunner.kommune.no

18

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bibliotek.lunner.kommune.no

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bibliotek.lunner.kommune.no
holebibliotek.no
lierbib.no
lorenskogbibliotek.no
midtfylkebiblioteket.no
nesoddenbibliotek.no
nordrefollobibliotek.no
oeikbib.no
tjenester.vikenfylkesbibliotek.no
www.hallingdalsbiblioteka.no
www.lorenskogbibliotek.no
www.midtfylkebiblioteket.no
www.nesoddenbibliotek.no
www.nordrefollobibliotek.no
www.oeikbib.no
www.vikenfylkesbibliotek.arena.axiell.com
www.xn--rlingenbibliotek-uob.no
xn--rlingenbibliotek-uob.no

Other certificates including the domain name lunner.kommune.no

(limited to 100 certificates)
lunner.kommune.no
k247.lunner.kommune.no
lunner.kommune.no
tilgang.lunner.kommune.no
bibliotek.lunner.kommune.no
bibliotek.lunner.kommune.no
k247.lunner.kommune.no
bibliotek.lunner.kommune.no
www.lunner.kommune.no
*.lunner.kommune.no
moteportal.lunner.kommune.no
stilling.lunner.kommune.no
mail.lunner.kommune.no
mail.lunner.kommune.no
mail.lunner.kommune.no
skjema.lunner.kommune.no
stilling.lunner.kommune.no
moteportal.lunner.kommune.no
lunner.kommune.no
bibliotek.lunner.kommune.no
skjema.lunner.kommune.no
tilgang.lunner.kommune.no
bibliotek.lunner.kommune.no
skjema.lunner.kommune.no
bibliotek.lunner.kommune.no
innsyn.lunner.kommune.no
www.lunner.kommune.no
k247.lunner.kommune.no
bibliotek.lunner.kommune.no
lunner.kommune.no
bibliotek.lunner.kommune.no
webmail.lunner.kommune.no
lunner.kommune.no
lunner.kommune.no
bibliotek.lunner.kommune.no
www.lunner.kommune.no
lunner.kommune.no
bibliotek.lunner.kommune.no
bibliotek.lunner.kommune.no
www.nordrefollobibliotek.no
k247.lunner.kommune.no
interactintegrasjoner.lunner.kommune.no
bibliotek.lunner.kommune.no
mpinternetserver.lunner.kommune.no
stilling.lunner.kommune.no
bibliotek.lunner.kommune.no
bibliotek.lunner.kommune.no
bibliotek.lunner.kommune.no
www.lunner.kommune.no

Certificate

The complete raw certificate details for bibliotek.lunner.kommune.no in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1CtNnEPV8I8nzkNQGj6
YQzc/bb2IiR3ZNUJvqvWhZO47cSs+XI0iFx7um7waNlE9a2vNfwZrLvDL0ByMjgx
Bv35yp8IgAn7UCJHDs7Ae7kLkLHDG15oB0PLNqp1AY53kHM2y34gg0igxzf/yYIu
Bn0XsBtAqgJS1deil79o1aIuXXVJ3j6QqNI05MZyKPHUUdBT40FmCQJg46cdVNRm
UmYYwXmXmkkuRDcIMJfZYdXwSifbM4Ov3qaBVxb/TbWE65xp0sdQhoZka+mwxe+D
QxFUHFULQYdhYA9irRRtXTi7VB+a7GIHSc2daPHpXYVQJyid7FrJGedavvEzePSo
vwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 394621110275023403886322129493652225300021
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-21 12:19:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-19 12:19:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bibliotek.lunner.kommune.no'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20111673609699717457733746763037363678965137394836034590593188847773406319355955619756638502270668008972490484287089734355045275940059061085262796430318749996578439088767374795350818133385025833613806265036816279587735293962767343329316524094356852140056258057114423058506260485270204803207496531358633504655207358824370896931210907474352319554260461877010767141040936411535442644251023505047289631949443698454673412241070544594405026429611837438698805449269619023818337942767995945604844587286330523977191766947030986096989019128840087543545337999418504098961257665057375566651062838216833851965301500989416727161023
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							28a1cc3b9cd6d26566e1c62acb7cee6cb3da78f0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (467 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bibliotek.lunner.kommune.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holebibliotek.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lierbib.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lorenskogbibliotek.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'midtfylkebiblioteket.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nesoddenbibliotek.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nordrefollobibliotek.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oeikbib.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tjenester.vikenfylkesbibliotek.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hallingdalsbiblioteka.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lorenskogbibliotek.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.midtfylkebiblioteket.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nesoddenbibliotek.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nordrefollobibliotek.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oeikbib.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vikenfylkesbibliotek.arena.axiell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--rlingenbibliotek-uob.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--rlingenbibliotek-uob.no'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018e612a569f0000040300473045022058ab7443dc64555ce8c3d2bfad18716014d96930328b0f4dac48cdff4d7b2d75022100a170177a7d6990e89e2c866fbc4d2194f9f18b4441ac53975727afb00eb0a3d100750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018e612a5686000004030046304402201c89d3c3bd63a6a5e6981e09bf7a11a2b8d6d92c4bb73f2af4fd2e685bcd570b02203accf4520c4133d2b96e48aa74c38dca54985340236bf02823beee4a0e99ec26
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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