Open
Cached
·
just now
83/100
SECURITY SCORE
Certificate Information
Subject
CN=digdir.no
Issuer
C=NO, O=Buypass AS-983163327, CN=Buypass Class 2 CA 2
Valid From
September 26, 2025
Valid Until
September 26, 2026
234 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
1E:53:D5:FB:BA:15:6F:80:88:66:B7:BE:36:A2:D0:35:5D:5F:CC:49:58:70:91:A6:96:F3:27:85:5A:26:10:40
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=63072000;
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Good
SAMEORIGIN
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Configured
(Restricts certificate issuance)
Current Issuer
Not Authorized
(Potential misconfiguration)
Authorized CAs
Incident Reporting
mailto:[email protected]
CAA Issues
- • CRITICAL: Current certificate issuer 'C=NO, O=Buypass AS-983163327, CN=Buypass Class 2 CA 2' is NOT authorized by CAA records. Authorized CAs: buypass.no, letsencrypt.org
Recommendations
- • Consider using critical flag (flags=128) for stricter CAA enforcement
- • Consider adding 'issuewild' records to control wildcard certificate issuance
Subject Alternative Names
64 domains
norge.no
opplysninger.norge.no
psi.norge.no
www.norge.no
www2.norge.no
difi.no
eid.difi.no
hotel.difi.no
hotell.difi.no
lb.difi.no
lb1.difi.no
lb2.difi.no
lb3.difi.no
lb4.difi.no
user.difi.no
www.difi.no
www.eid.difi.no
aarsrapport2024.digdir.no
as4test.digdir.no
auth-user.digdir.no
demo.digdir.no
digdir.no
efmstatistikk.digdir.no
jobb.digdir.no
lb.digdir.no
maintenance.digdir.no
minside-samarbeid.digdir.no
node1.digdir.no
node2.digdir.no
node3.digdir.no
orglogo.digdir.no
profilveileder.digdir.no
prosjektveiviseren.digdir.no
samarbeid.digdir.no
signering.digdir.no
tilsyn-demo.digdir.no
tlp-ci.digdir.no
tlp-site-eid-unstable.digdir.no
www.digdir.no
digitaliseringsdirektoratet.no
www.digitaliseringsdirektoratet.no
id-porten.no
www.id-porten.no
www.idporten.no
lysingsblad.no
norsk.lysingsblad.no
www.lysingsblad.no
noreg.no
www.noreg.no
norga.no
www.norga.no
uustatus.no
www.uustatus.no
beta-testlab.uutilsynet.no
data.uutilsynet.no
kontroll.uutilsynet.no
test-kontroll.uutilsynet.no
test-testlab.uutilsynet.no
testlab.uutilsynet.no
uutilsynet.no
wasadmin.uutilsynet.no
www.uutilsynet.no
velgdigitalpostkasse.no
www.velgdigitalpostkasse.no
Other domains in certificate