gw.coop.no

Issued by Buypass Class 2 CA 2

About this certificate

This digital certificate with serial number 8c:58:8c:6a:e6:04:5e:bf:f1:9a was issued on by Buypass AS-983163327.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=gw.coop.no

Buypass AS-983163327

Organization: Buypass AS-983163327
Country: NO

This certificate will expire on

Certificate Details

Serial Number (hex): 8c:58:8c:6a:e6:04:5e:bf:f1:9a
Serial Number (int): 662764739232656055595418
Serial Number lenght: 80 bits, 10 octets

SubjectKeyId: ae:7e:41:2d:2d:8c:24:e0:b0:b8:e3:ef:cf:ef:59:60:85:08:63:03
AuthorityKeyId: 92:ad:65:89:b2:00:0f:cb:51:0d:c1:23:ec:94:4e:8f:c1:04:3f:77

Fingerprint (sha1): ef:13:6c:9f:8c:e3:ca:9d:27:2b:7b:3d:06:42:62:eb:de:bf:c1:20
Fingerprint (sha256): 07:30:9d:c0:dd:a7:97:2f:70:00:44:82:49:62:cc:62:dc:c3:c1:55:60:a2:eb:4d:ac:27:3e:48:8a:7d:6a:6b

Issuing Certificate URL: http://crt.buypass.no/crt/BPClass2CA2.cer

Revocation information

OCSP Server: http://ocsp.buypass.com
CRL Distribution Point: http://crl.buypass.no/crl/BPClass2CA2.crl

Check the revocation status for certificate gw.coop.no

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gw.coop.no

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gw.coop.no

Other certificates including the domain name coop.no

(limited to 100 certificates)
ssl3.ipaper.io
ssl2.ipaper.io
ssl3.ipaper.io
ssl2.ipaper.io
ssl10.ipaper.io
ssl9.ipaper.io
ssl9.ipaper.io
ssl9.ipaper.io
ssl3.ipaper.io
ssl2.ipaper.io
ssl2.ipaper.io
ssl2.ipaper.io
medlemspanel.coop.no
ssl3.ipaper.io
ssl3.ipaper.io
coop.no
ssl2.ipaper.io
ssl9.ipaper.io
dittfordelslan.coop.no
ssl2.ipaper.io
vpn.coop.no
ssl2.ipaper.io
ssl10.ipaper.io
gw.coop.no
ssl9.ipaper.io
ssl3.ipaper.io
*.coop.no
ssl2.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl2.ipaper.io
mobile.coop.no
helloworld2.staging.coop.no
coop.no
ssl2.ipaper.io
ssl10.ipaper.io
kompetanse.coop.no
ssl9.ipaper.io
ssl2.ipaper.io
ssl3.ipaper.io
lsrp3.coop.no
ssl9.ipaper.io
ssl9.ipaper.io
*.coop.no
auth.coop.no
ssl5.ipaper.io
ssl10.ipaper.io
ssl3.ipaper.io
ssl9.ipaper.io
ssl9.ipaper.io
ssl1.ipaper.io
ssl9.ipaper.io
kampanje.coop.no
ssl3.ipaper.io
nettbank.coop.no
ssl3.ipaper.io
coop.no
api.coop.no
ssl2.ipaper.io
coop.no
ssl3.ipaper.io
ssl9.ipaper.io
ssl9.ipaper.io
ssl9.ipaper.io
ssl9.ipaper.io
ssl9.ipaper.io
ssl2.ipaper.io
cdcapp.coop.no
ssl9.ipaper.io
ssl2.ipaper.io
ssl3.ipaper.io
webapps.coop.no
ssl3.ipaper.io
sni.cloudflaressl.com
sni116f0gl.wpc.edgecastcdn.net
dittfordelslan.coop.no
ssl9.ipaper.io
ssl3.ipaper.io
ssl9.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl2.ipaper.io
ssl10.ipaper.io
coop.no
ssl10.ipaper.io
kompetanse.coop.no
ssl2.ipaper.io
ssl10.ipaper.io
ssl1.ipaper.io
ssl9.ipaper.io
ssl2.ipaper.io
ssl10.ipaper.io
ssl10.ipaper.io
ssl2.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl1.ipaper.io
srvnib03.coop.no
edge1.coop.no

Certificate

The complete raw certificate details for gw.coop.no in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4xo6QLPlRj5ZAOx2LIW3
f5ECeUUcoVYR8FY1/83pMxRjUHyBkAh/Pim5/PnC9Q6YCc09oSfkuahgO72e5VNZ
a9QIGDeBaQjz/d47Jdv0ggXuAfSD14tXz85nnLpX/K1Jfag59phhgTJi8YsFDQYW
WUTTOs3h4gbIRSZ5tPe7loNEsC3xCoSBV3wZJGVH9iV7CBaIBWEi5egRg5mhi3gk
tVBMDrWjBslURMgtJzTrmchy7lewm0tHgtX08vUKcqJxpibGEr7SqIXg6lg5Pmx/
cz4TYAQ+eCYOvY0yEDpjhkk8SFlbKGeVTtelDPdsNmyArmyU7DpzL9gELEEZphF/
kQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 662764739232656055595418
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Buypass AS-983163327'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Buypass Class 2 CA 2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-23 09:14:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-22 22:59:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'gw.coop.no'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28669028514124548058101095555082720856134593088242171826758126085402972604297241863239486623093907412188917019997635542215502543539825645926186703458944600656015269603521611778699448739521709929902365060968206171733359040644311923178180315348428691878308545001969750373519324304708088791288878767029831162600866429484182120299644199885235641978324119647393640728354220032454556724556814955553189019244425173972757827094027270021856008878760117162018051582474661942354041715413817143019938568884760458924262365517782692950489954463857741159430050456319845688392673905447799181031847285675082468235818223278118438797201
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 92ad6589b2000fcb510dc123ec944e8fc1043f77
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ae7e412d2d8c24e0b0b8e3efcfef596085086303
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.578.1.26.1.2.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.buypass.no/crl/BPClass2CA2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gw.coop.no'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (94 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.buypass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.buypass.no/crt/BPClass2CA2.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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