mdm.napma.nato.int

Issued by Buypass Class 2 CA 5

About this certificate

This digital certificate with serial number 03:2f:9f:3e:0e:f3:61:7c:9a:7d:1e was issued on by Buypass AS-983163327.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mdm.napma.nato.int

Buypass AS-983163327

Organization: Buypass AS-983163327
Country: NO

This certificate has expire since

Certificate Details

Serial Number (hex): 03:2f:9f:3e:0e:f3:61:7c:9a:7d:1e
Serial Number (int): 3851666187625560721227038
Serial Number lenght: 82 bits, 11 octets

SubjectKeyId: 4d:bc:8e:50:ee:87:1a:d8:ab:f5:2b:b1:21:07:8c:7b:06:f5:1f:b4
AuthorityKeyId: 27:52:a4:6f:2d:2a:ab:40:93:90:ec:d6:69:cb:fe:7c:61:3b:7c:42

Fingerprint (sha1): 75:ad:1c:09:19:e4:c2:e7:a3:69:50:ee:51:85:36:d9:b3:7f:59:2c
Fingerprint (sha256): 02:ea:06:59:1f:a1:e6:ac:1f:98:22:f4:d4:48:2b:65:58:64:de:5d:87:17:6a:00:86:8a:ce:a1:c7:17:c4:5a

Issuing Certificate URL: http://crt.buypass.no/crt/BPClass2CA5.cer

Revocation information

OCSP Server: http://ocsp.buypass.com
CRL Distribution Point: http://crl.buypass.no/crl/BPClass2CA5.crl

Check the revocation status for certificate mdm.napma.nato.int

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mdm.napma.nato.int

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mdm.napma.nato.int

Other certificates including the domain name nato.int

(limited to 100 certificates)
shared.napma.nato.int
meet.nahema.nato.int
ims.nato.int
npc.ncia.nato.int
www.natoschool.nato.int
*.nc3a.nato.int
www.nato.int
extranet.napma.nato.int
extranet.napma.nato.int
ap.ndc.nato.int
ncia.nato.int
apx.ndc.nato.int
elearning.natoschool.nato.int
*.ncia.nato.int
mail.cmre.nato.int
ndcmail.ndc.nato.int
www.asc.nato.int
awds.ndc.nato.int
mdm.napma.nato.int
mail.hrf.tr.nato.int
verity.hq.nato.int
extranet.napma.nato.int
ism.hq.nato.int
captiveportal.nahema.nato.int
msiac.nato.int
guest.napma.nato.int
gss.ncia.nato.int
servicedesk.thwaites.co.uk
ssc.nato.int
ncio.nato.int
dnbl.ncia.nato.int
acquia-sites.com
coi.nato.int
*.nc3a.nato.int
cmre.nato.int
itsupport.valeosnackfoods.com
www.ncia.nato.int
iocore.ivv.ncia.nato.int
www.nspa.nato.int
dnbl.ncia.nato.int
shared.napma.nato.int
awacs.nato.int
*.nacc.nato.int
*.ims.nato.int
redirect.napma.nato.int
nexus.dev.nato.int
acquia-sites.com
iocore-cwix.ivv.ncia.nato.int
*.nciss.nato.int
*.reach.nato.int
acquia-sites.com
emm.hq.nato.int
lldb.jallc.nato.int
apx.ndc.nato.int
ndccds.ndc.nato.int
apy.ndc.nato.int
www.ssc.nato.int
guest.napma.nato.int
sts.reach.nato.int
meet.nahema.nato.int
NSOVPN.natoschool.nato.int
ndccds.ndc.nato.int
skypeaccess.shape.nato.int
labs.academy.ncia.nato.int
shared.napma.nato.int
dev.nato.int
www.ssc.nato.int
amdc2-iss.ncia.nato.int
mail.cmre.nato.int
e-isaf.act.nato.int
*.nshq.nato.int
mdm.napma.nato.int
servicedesk.usspeaking.com
webmail.pia.nato.int
acquia-sites.com
diana.nato.int
jftc.nato.int
ticketing.alphamead.com
selfservice.act.nato.int
verity.hq.nato.int
acquia-sites.com
gp.csp.nato.int
mobile.pan.nato.int
meet.nahema.nato.int
redirect.napma.nato.int
acquia-sites.com
napma.nato.int
msiac.nato.int
extranet.napma.nato.int
extranet.napma.nato.int
guest.napma.nato.int
webmail.cmre.nato.int
haivision.hq.nato.int
*.ndss.nato.int
ssc.nato.int
www.msiac.nato.int
ithelpdesk.dccoilireland.com
servicedesk.thwaites.co.uk
eportal.nspa.nato.int
www.nspa.nato.int

Certificate

The complete raw certificate details for mdm.napma.nato.int in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3851666187625560721227038
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Buypass AS-983163327'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Buypass Class 2 CA 5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-24 11:02:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-19 22:59:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'mdm.napma.nato.int'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 746364677695977354272556750341237520378565602298719576723427738012956207118449849180294149268217567019853435925901396986732646130781318051986923112587413673408464092175254564481366797233493083239861324951531051038322522615164970049416525127562826088150783874965810518523421112417843833700858183492371661618573190020378590391505329542468505755738238979885167003225606971005365536369533493866327155846104541301717876503396207657404407518813108892362602620808380460406551765149027873236645124743373718210988664639639811403287538553081646084791689582088356965638418574564002338851339668717920934606330094659474476470420245540270908100023935748720092500249244736097364345527518042528877429525296386342099095826095212337498243076788779373099689810709896764437351714451211750703299111875932486973000538181216573352311797107001680945221988048907768026601576267455601004812171963755752636130451590809474520592607734979852494690588239148735456865557716713759500789777919701346625547546750719738483906704889822385418931006377520726348933902772374455290417859274735178283250900732794803299958266296767201748783334215532967366861549247629499087159693228962992964219521980896541525878059862814466425642338556703549092799800504910065847312482375641
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 2752a46f2d2aab409390ecd669cbfe7c613b7c42
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4dbc8e50ee871ad8abf52bb121078c7b06f51fb4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.578.1.26.1.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.buypass.no/crl/BPClass2CA5.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mdm.napma.nato.int'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (94 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.buypass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.buypass.no/crt/BPClass2CA5.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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