digi.no

Issued by R3

About this certificate

This digital certificate with serial number 04:44:34:e8:03:73:e0:91:74:44:c6:cd:a4:df:dc:85:15:d4 was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=digi.no

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:44:34:e8:03:73:e0:91:74:44:c6:cd:a4:df:dc:85:15:d4
Serial Number (int): 371658669216344765793008339766660049475028
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 13:4e:d8:e7:17:c3:43:f4:86:d7:ac:69:e9:eb:5f:64:45:d9:18:00
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): e2:80:5b:95:7d:77:3e:17:0e:c2:20:49:db:19:ff:7d:c5:df:49:1b
Fingerprint (sha256): e8:13:5a:2d:13:8f:9d:b2:d1:13:33:62:3d:91:5d:eb:08:1a:fe:6a:9b:4c:14:ee:f4:68:c3:13:87:76:ff:42

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate digi.no

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for digi.no

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

digi.no
test.digi.no
www.digi.no

Other certificates including the domain name digi.no

(limited to 100 certificates)
wallbrand.co
dcfit.turnosweb.app
erlend2.digi.no
digi.no
digi.no
www.penguinpeople.io
groupm.beaconforce.com
www.trumpcarestories.org
digi.no
www.parrify.com
cloud.workito.co.il
digi.no
digi.no
wallbrand.co
whitepaper.digi.no
f.link.mustard.love
1j2n061x3td.www.digi.no
mysomras.com
digi.no
www.waidy.it
www.couplemonitor.app
new-adventskalender.de
admin.ugyde.io
digi.no
digi.no
digi.no
erlend2.digi.no
ymd.development.fensi.in
www.crudewiser.com
whitepaper.digi.no
erickmendoza.com
employeronboarding.keeper.co.in
www.iamtheliquor.app
static.dev.getbusy.com
www.51hint.com
www.aduug.com
digi.no
digi.no
whitepaper.digi.no
www.marktompkins.me
digital.stratton-press.linkmalloc.com
whitepaper.digi.no
hueanh.com
invertecfoods.cl
trimbo.com
digi.no
digi.no
digi.no
digi.no
www.garrettspence.dev
vedur.arnigu.info
kalk.digi.no
kalkulator.digi.no
digi.no
digi.no
digi.no
admin.job.hoikushi-go.com
f.link.mustard.love
digi.no
whitepaper.digi.no
nakytec.com
www.redstonemail.app
cvmetalproducts.ca
digi.no
digi.no
whitepaper.digi.no
upliftstress.com
whitepaper.digi.no
digi.no
digi.no
dev.viviultra.app
www.matahari-amsterdam.nl
slw.ai
edificiouna.porcelanosapartners.com
whitepaper.digi.no
kolssak.afterword.com
digi.no
kalk.digi.no
digi.no
whitepaper.digi.no
app.bemoved.com.au
digi.no
digi.no
www.chen.enterprises
digi.no
digi.no
www.inthga.io
introvue.robinsoft.biz
www.ministryofpup.com
digi.no

Certificate

The complete raw certificate details for digi.no in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 371658669216344765793008339766660049475028
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-20 13:26:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-19 13:26:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'digi.no'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 659706363692755211238713146136343406082509848584512789052372329003930344613359811921562892425124180645320459666157562576517753573303667487708109737409936802588450733718452440384575023789286939027141517616821912942366069757272800999237072484545951755070174425850005030007925543293355904754053449191736025302391127760684276345838771690352621853583362215419212497123880099016649287120375405524761603854311720430100356766285840861845679507870751652703470546577918747298397624360102777367689494047361126611305223605678897907501676843677990767874315087457304157611486309371854384375165721814024138447472682212318634175040397795288156182293578708307832793884271801925939409828320859249582502829494168262992915569210304021509699159887548689198157765092921465615009425804090944239161374736608627773217346547374153966903578362467503429674918394021301309495463065059782942210733752234865666459792922716488979056639190228265597781796196836429392414328453135760508659628029569209584418266309488609464656407428786021282271770801505574966984551704084206690717853668596906780541953485203171952841549141752495270566682519523362568407651916118593001018269481563173990979709428443334593596015380344027000668367449245729804185027719903774322343431828047
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							134ed8e717c343f486d7ac69e9eb5f6445d91800
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digi.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.digi.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.digi.no'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018ab2fc39f10000040300483046022100e745443c124e28ac293924206cd56865eb7e77849fde9ce4ae33f77ebfe2cd9e022100f4e984661efc3255f5c2abd22c7a75682b29da5a6a192fb1666738a3aad63fc50076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018ab2fc3bf50000040300473045022100b13ded93d24e9a36c9e9ed99307bd00bb668463bb287076978bc474c02b6e2d40220672cb5d0394c6b6b53ef63fb25c9a3e626f318f47a4642c042cf410d496d87a2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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