www.test2.buypass.no

- BUYPASS AS -

Issued by Buypass Class 3 CA 2

About this certificate

This digital certificate with serial number 14:21:80:f4:f7:dc:02:ae:d0:12 was issued on by Buypass AS-983163327.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

BUYPASS AS

Company registration number: 983163327
Organization: BUYPASS AS
Postal code: 0484
Locality: OSLO
Country: NO

Buypass AS-983163327

Organization: Buypass AS-983163327
Country: NO

This certificate has expire since

Certificate Details

Serial Number (hex): 14:21:80:f4:f7:dc:02:ae:d0:12
Serial Number (int): 95065364536280801529874
Serial Number lenght: 77 bits, 10 octets

SubjectKeyId: 42:4c:d8:1e:67:1a:72:42:8b:41:3c:6d:37:49:82:5a:1d:41:9a:a1
AuthorityKeyId: 22:30:2e:d2:fb:f6:4b:ca:c0:b8:3b:d2:04:c4:e9:72:e6:97:9b:0c

Fingerprint (sha1): 1d:85:f5:3f:d8:9a:7d:c3:c4:1e:00:72:5b:0b:5b:c7:da:0c:a0:41
Fingerprint (sha256): 06:9c:10:2f:a7:1e:8d:e8:46:4a:ee:04:31:69:44:8a:ec:11:b9:81:49:f2:96:c4:39:b9:08:c4:bd:5d:60:d3

Issuing Certificate URL: http://crt.buypass.no/crt/BPClass3CA2.cer

Revocation information

OCSP Server: http://ocsp.buypass.com
CRL Distribution Point: http://crl.buypass.no/crl/BPClass3CA2.crl

Check the revocation status for certificate www.test2.buypass.no

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.test2.buypass.no

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.test2.buypass.no
api.test2.buypass.no
ips.test2.buypass.no
ocsp.test2.buypass.no
ras.test2.buypass.no
secure.test2.buypass.no
sts.test2.buypass.no
test2.buypass.no

Other certificates including the domain name buypass.no

(limited to 100 certificates)
bp.crm.buypass.no
*.code.qa-04.buypass.no
www.test3.buypass.no
www.test11.buypass.no
www.test4.buypass.no
www.testnif.buypass.no
sts.test2.buypass.no
valid.business.ca22.ssl.buypass.no
win2008.ssltest.lab.buypass.no
customer.buypass.no
www.qa.buypass.no
*.nif.test4.buypass.no
customer.buypass.no
ips.test1.buypass.no
customer.buypass.no
www.buypass.no
www.test2.buypass.no
www.test12.buypass.no
expired.evident.ca13.ssl.buypass.no
customer.buypass.no
ocsp.test2.buypass.no
www.test3.buypass.no
customer.buypass.no
valid.businessplus.ca23.ssl.buypass.no
customer.buypass.no
secure.stage.buypass.no
ips.test5.buypass.no
osbig11pr-2.mgmt.buypass.no
www.test22.buypass.no
api.qa.buypass.no
vmtra21it.intra.buypass.no
nshieldmonitor.osl.prod.buypass.no
ocsp.qa.buypass.no
www.test4.buypass.no
www.prod.buypass.no
valid.business.ca22.ssl.buypass.no
valid.evident.ca23.ssl.buypass.no
www.test22.buypass.no
www.buypass.no
customer.buypass.no
www.test3.buypass.no
valid.evident.ca23.ssl.buypass.no
customer.buypass.no
customer.buypass.no
valid.business.ca22.ssl.buypass.no
*.intra.buypass.no
n30.guest.buypass.no
ocsp.test2.buypass.no
www.buypass.no
customer.buypass.no
n30.guest.buypass.no
www.buypass.no
secure.buypass.no
ocsp.prod.buypass.no
customer.buypass.no
www.test4.buypass.no
customer.buypass.no
valid.evident.ca23.ssl.buypass.no
secure.test2.buypass.no
ocsp.nhn.buypass.no
ocsp.test1.buypass.no
mobil.test5.buypass.no
www.prod.buypass.no
customer.buypass.no
valid.evident.ca23.ssl.buypass.no
customer.buypass.no
www.buypass.no
*.test4.buypass.no
www.buypass.no
www.test13.buypass.no
sissel.buypass.no
www.test13.buypass.no
fs.buypass.no
www.test11.buypass.no
customer.buypass.no
customer.buypass.no
*.intra.buypass.no
n30.guest.buypass.no
*.code.test4.buypass.no
customer.buypass.no
portal.buypass.no
secure.test4.buypass.no
ras.buypass.no
cppoll.intra.buypass.no
*.tsp.buypass.no
customer.buypass.no
ips.test4.buypass.no
customer.buypass.no
customer.buypass.no
valid.evident.ca13.ssl.buypass.no
www.test4.buypass.no
ips.test5.buypass.no
revoked.domainplus.ca12.ssl.buypass.no
customer.buypass.no
nshieldmonitor.gvk.prod.buypass.no
customer.buypass.no
business.ssl.buypass.no
*.nif.test4.buypass.no
secure.test4.buypass.no
ips.test3.buypass.no

Certificate

The complete raw certificate details for www.test2.buypass.no in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHKTCCBhGgAwIBAgIKFCGA9PfcAq7QEjANBgkqhkiG9w0BAQsFADBLMQswCQYD
VQQGEwJOTzEdMBsGA1UECgwUQnV5cGFzcyBBUy05ODMxNjMzMjcxHTAbBgNVBAMM
FEJ1eXBhc3MgQ2xhc3MgMyBDQSAyMB4XDTE3MDQyODA1MzkzOVoXDTE5MDYxNjIx
NTkwMFowgacxDTALBgNVBBEMBDA0ODQxDTALBgNVBAcMBE9TTE8xHTAbBgNVBA8M
FFByaXZhdGUgT3JnYW5pemF0aW9uMRMwEQYLKwYBBAGCNzwCAQMTAk5PMQswCQYD
VQQGEwJOTzETMBEGA1UECgwKQlVZUEFTUyBBUzEdMBsGA1UEAwwUd3d3LnRlc3Qy
LmJ1eXBhc3Mubm8xEjAQBgNVBAUTCTk4MzE2MzMyNzCCASIwDQYJKoZIhvcNAQEB
BQADggEPADCCAQoCggEBAKXQB/1GehtM+6u8biwgCA6Wta0IsDB72/3BBWKA+ah+
swnH0aYATv+MfOsGJwIHkE7zee2n9T4y+5jhvWSAYxb4ANJshEHMwIF0jHEZTXHS
xFCY9+hm0R5SV8QpZvrHhoZV7MtBvRcyZqeVbsKcEPi+wOEN38rGe/lVgh0Dte/9
tTFA5bzX7Tx9dTUdwMVM75NTAGu8lWzfx9GpmpjlK+RNip+7i3MYDCFowZrB1atD
fP8jXTr2vIUlWMj6Dle7jNdWKQae3pFpAB0IVS9wV/cIweLTYdiFqrrshTFVw8hT
BCCxOVFgiqkMt3qbveb7QMZeBTI0fR4SIk6ZoF3aNXUCAwEAAaOCA7AwggOsMAkG
A1UdEwQCMAAwHwYDVR0jBBgwFoAUIjAu0vv2S8rAuDvSBMTpcuaXmwwwHQYDVR0O
BBYEFEJM2B5nGnJCi0E8bTdJglodQZqhMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUE
FjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwSAYDVR0gBEEwPzA0BghghEIBGgEDAzAo
MCYGCCsGAQUFBwIBFhpodHRwczovL3d3dy5idXlwYXNzLm5vL2NwczAHBgVngQwB
ATA6BgNVHR8EMzAxMC+gLaArhilodHRwOi8vY3JsLmJ1eXBhc3Mubm8vY3JsL0JQ
Q2xhc3MzQ0EyLmNybDCBuwYDVR0RBIGzMIGwghR3d3cudGVzdDIuYnV5cGFzcy5u
b4IUYXBpLnRlc3QyLmJ1eXBhc3Mubm+CFGlwcy50ZXN0Mi5idXlwYXNzLm5vghVv
Y3NwLnRlc3QyLmJ1eXBhc3Mubm+CFHJhcy50ZXN0Mi5idXlwYXNzLm5vghdzZWN1
cmUudGVzdDIuYnV5cGFzcy5ub4IUc3RzLnRlc3QyLmJ1eXBhc3Mubm+CEHRlc3Qy
LmJ1eXBhc3Mubm8wagYIKwYBBQUHAQEEXjBcMCMGCCsGAQUFBzABhhdodHRwOi8v
b2NzcC5idXlwYXNzLmNvbTA1BggrBgEFBQcwAoYpaHR0cDovL2NydC5idXlwYXNz
Lm5vL2NydC9CUENsYXNzM0NBMi5jZXIwggF+BgorBgEEAdZ5AgQCBIIBbgSCAWoB
aAB2AN3rHSt6DU+mIIuBrYFocH4ujp0B1VyIjT0RxM227L7MAAABW7MSasEAAAQD
AEcwRQIgacBLMWyDNn2ehdpgzbyFEooX2iaSe2B4SAXhfX2aHTkCIQDbpqHWojWO
/W8UomFD6XIYsj/BHenuP3PPeVjeo9xIUwB2ALvZ37wfinG1k5Qjl6qSe0c4V5UK
q1LoGpCWZDaOHtGFAAABW7MSbhMAAAQDAEcwRQIgFLng9GnLqM0mZFs2YF+sljxb
nMk7J27Px7Nyk5IYNBACIQC2nX4d7UAkm5GvmTWq2ctXKj1rzN5S1ys11QNTa1Xe
iQB2AKS5CZC0GFgUh7sTosxncAo8NZgE+RvfuON3zQ7IDdwQAAABW7MScZMAAAQD
AEcwRQIhANQJdBaS4eGSl1hiKH8fqBmUaBz8Ga6CT3LZz/upZwTgAiAaUHTpr6qu
MhHEnUe5uUyjT591FNnlHzCOVwxmkdTTyDANBgkqhkiG9w0BAQsFAAOCAQEAgyiS
L406gbUHY3exQWpkESe4VIDF27GhWxYEpYix3gCc6qj3umS8LsV7+2MChXUxGIOR
KqHgSMDIdr2YUKPaxBn5nGC9G0J/jYlCQ8sugXjPANs0rvWnC2snKM5GaDLxGS/j
a3ufe+LWCKQtv8RcQeSL4p8Otys4J0QxyRur82z8xILOjinU8F1gUiYr2KD7+BjD
CKg0KArWC63acjwhCedt0uAqdv5Vv56DHUCUGpe7PzT1dk+gyvs82D8CB/sH7G1N
OJOcLihfLVZLTGI3CsUeMqpM0uM0IFrRIQ1AAYr9z0rxw6Vcb1pIpyfPRR2kMQNf
SgU0dB151vMvO81KQA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdAH/UZ6G0z7q7xuLCAI
Dpa1rQiwMHvb/cEFYoD5qH6zCcfRpgBO/4x86wYnAgeQTvN57af1PjL7mOG9ZIBj
FvgA0myEQczAgXSMcRlNcdLEUJj36GbRHlJXxClm+seGhlXsy0G9FzJmp5VuwpwQ
+L7A4Q3fysZ7+VWCHQO17/21MUDlvNftPH11NR3AxUzvk1MAa7yVbN/H0amamOUr
5E2Kn7uLcxgMIWjBmsHVq0N8/yNdOva8hSVYyPoOV7uM11YpBp7ekWkAHQhVL3BX
9wjB4tNh2IWquuyFMVXDyFMEILE5UWCKqQy3epu95vtAxl4FMjR9HhIiTpmgXdo1
dQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 95065364536280801529874
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Buypass AS-983163327'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Buypass Class 3 CA 2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-04-28 05:39:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-16 21:59:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '0484'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'OSLO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'BUYPASS AS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.test2.buypass.no'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '983163327'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20931904331632233652783883004041127620204104429744098292512258009437859069991637839320906743806498324848024019846507403616554229354807204112588420341966424962449412133133948047888569520891729583604087241872197111149898833587613654125735268488633761148491002174600011530495015580860431436275769010846664473976038380900032476735090881393973207722816127612090196485140571018599995659685547728101483967460436656006237677415015818733123737730484655849832768354904440262650659619881082571670925633176220187146333988433257035390442721940116447303384431054676377271440595916593404825128177474317930581374084224944014762849653
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 22302ed2fbf64bcac0b83bd204c4e972e6979b0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							424cd81e671a72428b413c6d3749825a1d419aa1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.578.1.26.1.3.3 (BuyPass EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.buypass.no/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.buypass.no/crl/BPClass3CA2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (179 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.test2.buypass.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.test2.buypass.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ips.test2.buypass.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ocsp.test2.buypass.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ras.test2.buypass.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.test2.buypass.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sts.test2.buypass.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test2.buypass.no'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (94 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.buypass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.buypass.no/crt/BPClass3CA2.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							0168007600ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc0000015bb3126ac10000040300473045022069c04b316c83367d9e85da60cdbc85128a17da26927b60784805e17d7d9a1d39022100dba6a1d6a2358efd6f14a26143e97218b23fc11de9ee3f73cf7958dea3dc4853007600bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed1850000015bb3126e130000040300473045022014b9e0f469cba8cd26645b36605fac963c5b9cc93b276ecfc7b3729392183410022100b69d7e1ded40249b91af9935aad9cb572a3d6bccde52d72b35d503536b55de89007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000015bb31271930000040300473045022100d409741692e1e192975862287f1fa81994681cfc19ae824f72d9cffba96704e002201a5074e9afaaae3211c49d47b9b94ca34f9f7514d9e51f308e570c6691d4d3c8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		008328922f8d3a81b5076377b1416a641127b85480c5dbb1a15b1604a588b1de009ceaa8f7ba64bc2ec57bfb63028575311883912aa1e048c0c876bd9850a3dac419f99c60bd1b427f8d894243cb2e8178cf00db34aef5a70b6b2728ce466832f1192fe36b7b9f7be2d608a42dbfc45c41e48be29f0eb72b38274431c91babf36cfcc482ce8e29d4f05d6052262bd8a0fbf818c308a834280ad60badda723c2109e76dd2e02a76fe55bf9e831d40941a97bb3f34f5764fa0cafb3cd83f0207fb07ec6d4d38939c2e285f2d564b4c62370ac51e32aa4cd2e334205ad1210d40018afdcf4af1c3a55c6f5a48a727cf451da431035f4a0534741d79d6f32f3bcd4a40