min.support.qa.nhn.no

Issued by Buypass Class 2 CA 5

About this certificate

This digital certificate with serial number 12:a9:59:cd:29:1e:58:70:23:68 was issued on by Buypass AS-983163327.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=min.support.qa.nhn.no

Buypass AS-983163327

Organization: Buypass AS-983163327
Country: NO

This certificate has expire since

Certificate Details

Serial Number (hex): 12:a9:59:cd:29:1e:58:70:23:68
Serial Number (int): 88126567313560438842216
Serial Number lenght: 77 bits, 10 octets

SubjectKeyId: 0d:1c:0d:db:f0:07:a6:49:2e:4c:bc:30:00:d1:80:95:6e:84:bb:33
AuthorityKeyId: 27:52:a4:6f:2d:2a:ab:40:93:90:ec:d6:69:cb:fe:7c:61:3b:7c:42

Fingerprint (sha1): 69:0b:ee:5a:0e:b7:13:60:17:fe:d9:ef:06:fe:5e:78:f9:7c:40:48
Fingerprint (sha256): 06:7e:43:36:26:cd:97:98:9c:09:0d:03:67:3c:10:bd:5c:4c:bf:f5:91:72:13:28:b9:97:3a:b0:19:a6:4d:71

Issuing Certificate URL: http://crt.buypass.no/crt/BPClass2CA5.cer

Revocation information

OCSP Server: http://ocsp.buypass.com
CRL Distribution Point: http://crl.buypass.no/crl/BPClass2CA5.crl

Check the revocation status for certificate min.support.qa.nhn.no

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for min.support.qa.nhn.no

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

min.support.qa.nhn.no

Other certificates including the domain name nhn.no

(limited to 100 certificates)
amkstatus.nhn.no
configuration-utility.ncpeh.nhn.no
www.nhn.no
amkstatus.nhn.no
register.qa.nhn.no
sonarqube.utv.nhn.no
kot.nhn.no
amkstatus.nhn.no
utviklerportal-test-standby.plattform.nhn.no
hjelp.nhn.no
amkstatus.nhn.no
geoevent.test.gis.nhn.no
norcrin.fnsp.prep.nhn.no
ws.nhn.no
antibiotika.fnsp.nhn.no
min.support.qa.nhn.no
sonarqube.utv.nhn.no
amkstatus.nhn.no
mq.qa.amk.nhn.no
finnmark.klient.qa.amk.nhn.no
amkstatus.nhn.no
amkstatus.nhn.no
skde.fnsp.inte.nhn.no
test.sso.kj.nhn.no
na-test-oidc.d-rfi-000.osl1-rf-it.sky.nhn.no
portal.admin.qa.gis.nhn.no
amkstatus.nhn.no
www.nhn.no
argo.selvbetjening.utvikling.nhn.no
abrsonline.atostatus.com.au
helseid-admin.utvikling.nhn.no
ws-td.test.nhn.no
sikkerhet.nhn.no
medusa.nhn.no
ws-at.test.nhn.no
frontend-fest-test.nhn.no
holbergsplads.nhn.no
amkstatus.nhn.no
www.nhn.no
amkstatus.nhn.no
helse-midt.fnsp.inte.nhn.no
ws-web.test.nhn.no
dev.opplaering.kj.nhn.no
mrs-sts.nhn.no
iplos.skatteetaten.no
adresseregister-test.nhn.no
portal.admin.qa.gis.nhn.no
personregister-td.test.nhn.no
nyan.t-jonas-001.trd1-sky-test.sky.nhn.no
argo.utv.kj.nhn.no
prom.nhn.no
pvk-webimporter.shp-nav.test.nhn.no
amkstatus.nhn.no
www.nhn.no
mrs-sts.nhn.no
uonsket-hendelse.qa.nhn.no
helse-sorost.fnsp.inte.nhn.no
kafka-access-management-helper.internet.shp-nav.test.nhn.no
bergen.klient.qa.amk.nhn.no
vestreviken.klient.qa.amk.nhn.no
fs.tjenesteplattform.nhn.no
ehelse-portal.qa.nhn.no
amkstatus.nhn.no
fodselsmelding.nhn.no
eksternbruker.fs.nhn.no
producerapi-p.plattform.nhn.no
test.pmd.nhn.no
holbergsplads.nhn.no
portal.test.gis.nhn.no
*.qa.amk.nhn.no
configuration-utility.ncpeh.nhn.no
norcrin.fnsp.prep.nhn.no
personregister-web.test.nhn.no
amkstatus.nhn.no
fodselsmelding.test.nhn.no
personregister.nhn.no
amkstatus.nhn.no
auth.sky.nhn.no
abrsonline.atostatus.com.au
aviacme.cname4.test.nhn.no
nhnglobalconnectdata.iu.test.nhn.no
ror.sky.test.nhn.no
api.helsenettet.iu.qa.nhn.no
amkstatus.nhn.no
metrics.qa.amk.nhn.no
selvbetjening.qa.nhn.no
*.sdwan.nhn.no
personregister.test.nhn.no
*.hn.qa.nhn.no
nav-gateway.iu.test.nhn.no
amkstatus.nhn.no
blazing-kafka-browser.internet.shp-nav.test.nhn.no
helsenettet.iu.test.nhn.no
amkstatus.nhn.no
amkstatus.nhn.no
jdps.fnsp.test.nhn.no
*.artifactory.pasientreiser.nhn.no
nordtrond.klient.qa.amk.nhn.no
*.net.nhn.no
*.hn.at.nhn.no

Certificate

The complete raw certificate details for min.support.qa.nhn.no in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGYjCCBEqgAwIBAgIKEqlZzSkeWHAjaDANBgkqhkiG9w0BAQsFADBLMQswCQYD
VQQGEwJOTzEdMBsGA1UECgwUQnV5cGFzcyBBUy05ODMxNjMzMjcxHTAbBgNVBAMM
FEJ1eXBhc3MgQ2xhc3MgMiBDQSA1MB4XDTE5MDkxOTA4MjQwMloXDTIwMDMxNzIy
NTkwMFowIDEeMBwGA1UEAwwVbWluLnN1cHBvcnQucWEubmhuLm5vMIIBIjANBgkq
hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyXeNqChNkvn7uL8j1rpkSHQnBi0OB4Ok
fW5IJuQ7lF51CfU6qJFK4ub9YFLrphvmyB3L+mHxCqkfi+/RxvMZtUsddVAiO4Hl
hEgO9r/CFSVYZHUmuDo9lT8/tcBZvyXJidorVfb5lp4MlekvnYi8mDqY4d77eQJc
+91x4sOBQGr3u1XH/ChJE0ocC2EWcEJArL6G4jAVEUPuDswDJQ6+bnZuETjlLNBP
cjA0IQzu/uDsV9WLMpg+cTrPQ/K6UAGMYsL48HucARmKP2q+h44KE/O5hecnNGg8
qOA5wLLLFNKYDsf34cal9voChGB+Z6rqz5ZxzeQh5Z1D7Q12g8UGwwIDAQABo4IC
cTCCAm0wCQYDVR0TBAIwADAfBgNVHSMEGDAWgBQnUqRvLSqrQJOQ7NZpy/58YTt8
QjAdBgNVHQ4EFgQUDRwN2/AHpkkuTLwwANGAlW6EuzMwDgYDVR0PAQH/BAQDAgWg
MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAfBgNVHSAEGDAWMAoGCGCE
QgEaAQIHMAgGBmeBDAECATA6BgNVHR8EMzAxMC+gLaArhilodHRwOi8vY3JsLmJ1
eXBhc3Mubm8vY3JsL0JQQ2xhc3MyQ0E1LmNybDAgBgNVHREEGTAXghVtaW4uc3Vw
cG9ydC5xYS5uaG4ubm8wagYIKwYBBQUHAQEEXjBcMCMGCCsGAQUFBzABhhdodHRw
Oi8vb2NzcC5idXlwYXNzLmNvbTA1BggrBgEFBQcwAoYpaHR0cDovL2NydC5idXlw
YXNzLm5vL2NydC9CUENsYXNzMkNBNS5jZXIwggEEBgorBgEEAdZ5AgQCBIH1BIHy
APAAdgC72d+8H4pxtZOUI5eqkntHOFeVCqtS6BqQlmQ2jh7RhQAAAW1InwTzAAAE
AwBHMEUCIQCnFiJDxL2T/4XNvEemIdpMAGONdaGcEoVFEuitm6mpvgIgKb5eOeq9
T6NCQ+COQH5pCJO3Fgb9s/Nm0Y8ZQIOI9aEAdgBvU3asMfAxGdiZAKRRFf93FRwR
2QLBACkGjbIImjfZEwAAAW1InwVGAAAEAwBHMEUCIQDgj9hl4uucVPEo3JNie8ub
n150Y0mDPkTPKDevi5uv2AIgOZIgDNCNJ+T3vZwydNqalw0DCDnt4t+ppcmGARrp
mSwwDQYJKoZIhvcNAQELBQADggIBAK9bj0ZVxuV4ZIfFJhcZRbXcR/llQ8TURYo8
ppiikckizuokBw+JrgAtFtQWjQepqLfKC/km9MOmHRHgOX4EM8PJhj0t7tz7UVtI
nD+ER/qX7UlqJJOwFPx4xXm5+wjyedm3AE8Fg349HZmw8BKn5+lh7wZZ3pHRoClz
JmSXZdvucLFLjYStLvUXLI8PX0skkG5ESPbj5FqiG37rdB0KmKt7mEL1201WzQ1v
oHvnx3inE40jshD2ZxoBDs7Q0LCJ0EMatHrN7iDDUT+W3Spxz0MwEva0iOtUQ1oe
C2DgomxSsE1tFqF0thMFJR8jp8YRMMlD0IONK6q/x7UnijCs+aO1QQwYQykuGkrz
1eL1pC22PZCBc65aLVoe4LVDlftp+v8xSEkKSg4Sb3DsEbVuJgqDEoaWJU9t5gvV
pwBxuxbICaCS2olE7mMIp47i8ziXwYFqOi96En07mniqUkzHHwMGQaqs30OLJmNj
SxNNAuk5p+w3iqX0nOrZzXEDnLaGdNL2ZbFE4lf3dtcfqe6K6bYV6p5WO1b5Tptj
R+UblYbr7T2pItnZ5sEBjk6TzeBflrTVf6SVcEzvUsyHsumkaV85r/pAvyNzUcwU
/W2XN1wac6O+WW10kyX5YNjQlP2FEirDVT5AXfmlWzblCKduBjeiVQDWYMoue16i
yGA25NEO
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyXeNqChNkvn7uL8j1rpk
SHQnBi0OB4OkfW5IJuQ7lF51CfU6qJFK4ub9YFLrphvmyB3L+mHxCqkfi+/RxvMZ
tUsddVAiO4HlhEgO9r/CFSVYZHUmuDo9lT8/tcBZvyXJidorVfb5lp4MlekvnYi8
mDqY4d77eQJc+91x4sOBQGr3u1XH/ChJE0ocC2EWcEJArL6G4jAVEUPuDswDJQ6+
bnZuETjlLNBPcjA0IQzu/uDsV9WLMpg+cTrPQ/K6UAGMYsL48HucARmKP2q+h44K
E/O5hecnNGg8qOA5wLLLFNKYDsf34cal9voChGB+Z6rqz5ZxzeQh5Z1D7Q12g8UG
wwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 88126567313560438842216
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Buypass AS-983163327'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Buypass Class 2 CA 5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-19 08:24:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-17 22:59:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'min.support.qa.nhn.no'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25432853250890907202027762160228868814783404223724666764085770077195120412423064292918511137593106288531096062414467585232466038754844655056574778513518305454551091815552980107720062245942756176683281044134766153475377261365015212430785564235995989027031889730882711168748177713416523983699960748726603235986538086818680794090578216240258310214092295606421524462245687559334398187087462774052490488584648754943757917778817217864407051865605201204226663532764953852227573208192549181585721648115429886279147825853481105263113888995372155507993564300111954797045853239419959656113199325079017244555033534656081905911491
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 2752a46f2d2aab409390ecd669cbfe7c613b7c42
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0d1c0ddbf007a6492e4cbc3000d180956e84bb33
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.578.1.26.1.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.buypass.no/crl/BPClass2CA5.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'min.support.qa.nhn.no'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (94 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.buypass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.buypass.no/crt/BPClass2CA5.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed1850000016d489f04f30000040300473045022100a7162243c4bd93ff85cdbc47a621da4c00638d75a19c12854512e8ad9ba9a9be022029be5e39eabd4fa34243e08e407e690893b71606fdb3f366d18f19408388f5a10076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016d489f05460000040300473045022100e08fd865e2eb9c54f128dc93627bcb9b9f5e746349833e44cf2837af8b9bafd802203992200cd08d27e4f7bd9c3274da9a970d030839ede2dfa9a5c986011ae9992c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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