DV SSL/TLS Certificate for ryfylketurer.no

Certificate is witin its validity period

Issued by Let's Encrypt (R11)

About the ryfylketurer.no DV SSL/TLS Certificate

This certificate with serial number 06:a9:2c:45:a6:8f:1b:e8:46:40:86:fd:42:62:ca:b8:f6:1f for ryfylketurer.no was issued on by Let's Encrypt.

With 2 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for ryfylketurer.no provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Let's Encrypt

Organization: Let's Encrypt
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 06:a9:2c:45:a6:8f:1b:e8:46:40:86:fd:42:62:ca:b8:f6:1f
Serial Number (int): 580240283278716113750096231773363292927519
Serial Number Length: 139 bits, 18 octets

Subject Key Identifier: 03:e3:6a:b2:93:1c:4a:48:23:09:d0:59:d7:e3:a5:40:eb:2e:57:9f
Authority Key Identifier: c5:cf:46:a4:ea:f4:c3:c0:7a:6c:95:c4:2d:b0:5e:92:2f:26:e3:b9

Fingerprint (SHA-1): cc:a3:eb:01:34:e8:88:c9:84:b1:4b:44:76:8c:a9:76:a4:bf:1f:c2
Fingerprint (SHA-256): 78:26:a7:03:12:15:c0:57:b2:61:f5:3b:d7:7b:2c:97:fa:ad:8a:87:6d:9e:2c:ea:49:0a:a7:a6:67:27:a4:38

Issuing Certificate URL: http://r11.i.lencr.org/

Revocation Information

CRL Distribution Point: http://r11.c.lencr.org/32.crl

Check the revocation status for certificate ryfylketurer.no
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for ryfylketurer.no

Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for ryfylketurer.no in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAqq0UFOf5xqtCjpJ/Y4zv
BSHhrDL9M7UOJpbcvCUL2sJKDDX49qiIjnWzDXXPELOMtEHpmapfeGcTniZBk1rs
xQGiYdUX3AVpVWL6LNaZklJ4kuQ+eGyDiqXRCvO4SP/WJCfdy/xbEvnpgc5qxQAw
GpADOXzFsiNjgrPJj0thRBWtKmu+UodGOZI//W7+VN2cuq0csz95+vC94Y1tYsJj
+iTBOPrN7mKAf6K/ht7Vp87vlFbt1qDQm44v86Y93Hmnn2yaGYsb/JNuW2St05Np
tkxbGxYFw2TeZtU3mdD7Se3AF2Zy6PJdTeFzBm0YVi7vGYBfnFkhmS08SYpkgzBl
73Pr9Nlz+Cdv7YcYX546vadCYSpo6XB5zNMQkBH1Z/xMWWK2CS0KI2zMioVr347A
W0U518H7k20XrzO+toYCmQzj+TG3KXwypOkKxkBg/eHe3jpwvmp5SHWgmlLw2esu
zvKmftGatwa+WkWy3PWP0BmWTXF5l53g1He8f6iXG9wEwxG81UnLUYj0XUivTJCT
1rI+bDbYrRezVK8sBsjHV/pmjl+fldk9NgbtxRkRrqIijAYekqKXYd3J7ls4Z8Et
7Sp9plZJI37Gs9pqb9b2mt+EzE6CZIPqxgbY298NX3g1y89ADXP1ou65nZIlp7H5
2mYN7bVGMZ7vsNWOPGI3oUcCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 580240283278716113750096231773363292927519
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R11'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-18 23:11:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-09-16 23:11:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ryfylketurer.no'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 696297688623489556918001286522508423787230838232675226436757938100403619328048676590562959091871682518691628744361065149625354956394225868719342579469545986350545073021171361175221842959526976473302480472393943305751966793112360448996169900003487326460016900444048726897492828860127542956382085923342253782007399003578582225385820479019638188633266741566661313098183754374146698757196470886018565622194492653088322836569809083548294490846185109574338398959043768151741105425235740655757938725480762120169447575380402092547069183475107880605640037329022769966451586882744686578743017300335762601165858359656132611630575904046731347373478499070504813439972570834442068913002986223004966787061806202280222078385552481161746444725504735350656738671046152840998103258513500570478275136927332472525488197913132403925786634919731397258152436547277664546869899687858363397711321432459317503016724016526350164879760226495807555384168396891591577874876143643160283600942757433694741348657058246114009174912207996937520101666596606407410925870588427431558706202080279298715953876114846310769667239618711797764887917113297853454939546557178153126973962371218109093685419466366217148255512786320888522497723955550542501723663611305079365671821639
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							03e36ab2931c4a482309d059d7e3a540eb2e579f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c5cf46a4eaf4c3c07a6c95c42db05e922f26e3b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ryfylketurer.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ryfylketurer.no'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.c.lencr.org/32.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700ccfb0f6a85710965fe959b53cee9b27c22e9855c0d978db6a97e54c0fe4c0db0000001978585b67c0000040300483046022100a1a0ed2b0ee1684a13a7ffd553a2467b0b450f13006367175b64733a4754d3b6022100f0e789f69637931e8d071d14928637a6466aaad49f85d691b2f28c070fc3d7170076001a04ff49d0541d40aff6a0c3bff1d8c4672f4eecee234068986b17402edc897d000001978585bef800000403004730450220373e415fc389fd9f9a36c7b355dd530a315938a8955ea51085c8d6c477805eca022100873615e0f4ece75fdf4dfc60664cdaeff6144c1c12e172ed84969393ae31332e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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