vmtra21it.intra.buypass.no

Issued by Buypass Class 2 CA 2

About this certificate

This digital certificate with serial number 90:e1:6e:5b:86:53:3a:e2:04:c9 was issued on by Buypass AS-983163327.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=vmtra21it.intra.buypass.no

Buypass AS-983163327

Organization: Buypass AS-983163327
Country: NO

This certificate will expire on

Certificate Details

Serial Number (hex): 90:e1:6e:5b:86:53:3a:e2:04:c9
Serial Number (int): 684179243047072640926921
Serial Number lenght: 80 bits, 10 octets

SubjectKeyId: 55:55:4c:6a:03:97:8d:f3:60:4f:9c:25:fb:61:ad:a2:03:17:cc:7e
AuthorityKeyId: 92:ad:65:89:b2:00:0f:cb:51:0d:c1:23:ec:94:4e:8f:c1:04:3f:77

Fingerprint (sha1): 6e:81:cc:1f:d6:70:8d:9f:b6:8a:7b:c2:d2:6a:22:3f:fe:ae:07:e9
Fingerprint (sha256): 0e:77:7d:c8:6c:0a:a7:a5:43:0a:19:b0:29:17:99:bc:2f:90:4c:a6:6f:35:cf:05:5f:6c:4b:e9:cc:86:a7:17

Issuing Certificate URL: http://crt.buypass.no/crt/BPClass2CA2.cer

Revocation information

OCSP Server: http://ocsp.buypass.com
CRL Distribution Point: http://crl.buypass.no/crl/BPClass2CA2.crl

Check the revocation status for certificate vmtra21it.intra.buypass.no

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for vmtra21it.intra.buypass.no

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

vmtra21it.intra.buypass.no
traka.intra.buypass.no
trakaweb.intra.buypass.no

Other certificates including the domain name buypass.no

(limited to 100 certificates)
bp.crm.buypass.no
*.code.qa-04.buypass.no
www.test3.buypass.no
www.test11.buypass.no
www.test4.buypass.no
www.testnif.buypass.no
sts.test2.buypass.no
valid.business.ca22.ssl.buypass.no
win2008.ssltest.lab.buypass.no
customer.buypass.no
www.qa.buypass.no
*.nif.test4.buypass.no
customer.buypass.no
ips.test1.buypass.no
customer.buypass.no
www.buypass.no
www.test2.buypass.no
www.test12.buypass.no
expired.evident.ca13.ssl.buypass.no
customer.buypass.no
ocsp.test2.buypass.no
www.test3.buypass.no
customer.buypass.no
valid.businessplus.ca23.ssl.buypass.no
customer.buypass.no
secure.stage.buypass.no
ips.test5.buypass.no
osbig11pr-2.mgmt.buypass.no
www.test22.buypass.no
api.qa.buypass.no
vmtra21it.intra.buypass.no
nshieldmonitor.osl.prod.buypass.no
ocsp.qa.buypass.no
www.test4.buypass.no
www.prod.buypass.no
valid.business.ca22.ssl.buypass.no
valid.evident.ca23.ssl.buypass.no
www.test22.buypass.no
www.buypass.no
customer.buypass.no
www.test3.buypass.no
valid.evident.ca23.ssl.buypass.no
customer.buypass.no
customer.buypass.no
valid.business.ca22.ssl.buypass.no
*.intra.buypass.no
n30.guest.buypass.no
ocsp.test2.buypass.no
www.buypass.no
customer.buypass.no
n30.guest.buypass.no
www.buypass.no
secure.buypass.no
ocsp.prod.buypass.no
customer.buypass.no
www.test4.buypass.no
customer.buypass.no
valid.evident.ca23.ssl.buypass.no
secure.test2.buypass.no
ocsp.nhn.buypass.no
ocsp.test1.buypass.no
mobil.test5.buypass.no
www.prod.buypass.no
customer.buypass.no
valid.evident.ca23.ssl.buypass.no
customer.buypass.no
www.buypass.no
*.test4.buypass.no
www.buypass.no
www.test13.buypass.no
sissel.buypass.no
www.test13.buypass.no
fs.buypass.no
www.test11.buypass.no
customer.buypass.no
customer.buypass.no
*.intra.buypass.no
n30.guest.buypass.no
*.code.test4.buypass.no
customer.buypass.no
portal.buypass.no
secure.test4.buypass.no
ras.buypass.no
cppoll.intra.buypass.no
*.tsp.buypass.no
customer.buypass.no
ips.test4.buypass.no
customer.buypass.no
customer.buypass.no
valid.evident.ca13.ssl.buypass.no
www.test4.buypass.no
ips.test5.buypass.no
revoked.domainplus.ca12.ssl.buypass.no
customer.buypass.no
nshieldmonitor.gvk.prod.buypass.no
customer.buypass.no
business.ssl.buypass.no
*.nif.test4.buypass.no
secure.test4.buypass.no
ips.test3.buypass.no

Certificate

The complete raw certificate details for vmtra21it.intra.buypass.no in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3LuxL/7jMCbWItVwjgCI
XUop/BYrCN13tcWalTGiM7hEQIDeY9JdpEZbwrBCc9qGdE3SwsDNTpHBoU0XIaGd
stCGTrW2ul1BxxhoybMMFUWY3mZOQJKjMvhcrGZHJiCvm1bc6yD0ZjoPUY90rMar
noUjNr85X0vLTkN6Uxwf0/2hwkNVjnLQ8mGsPtJS+BLtpR8plDinRebV53f+JlUH
Vw6tvPY8/3mSq0taPConufdrSWC71Nw6Q1JZEqO8LniFGQHAYJfoiluR7Shn/BNr
H/LN3G/lDs7HwOLDooRVrDho70zaLzp+0bx5ekAKz/Jr4S6WCaTWLYwQPPUG8O5L
zQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 684179243047072640926921
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Buypass AS-983163327'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Buypass Class 2 CA 2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-21 12:51:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-05 21:59:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'vmtra21it.intra.buypass.no'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27864981535630633962677989610952727701027978775184696031995636512931978661185693622429795296055290208333702312222176585199533612948932043888927010362354404150374617575525507080140060048497684311914429063255682436303209333658927450753510626364719202798402685729876651104857548289673655442234182225447494149680714203553528740023909497751213447679830377495101921743293393435127839446945826731660519013388907139432103876634293885558452276895429668118654479183615194063734197168597591809893618816370880398242076652645305174531493458929600103620290435976793613864530817362947027077574827811930122563098713448059717288872909
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 92ad6589b2000fcb510dc123ec944e8fc1043f77
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							55554c6a03978df3604f9c25fb61ada20317cc7e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.578.1.26.1.2.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.buypass.no/crl/BPClass2CA2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (81 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vmtra21it.intra.buypass.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'traka.intra.buypass.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trakaweb.intra.buypass.no'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (94 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.buypass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.buypass.no/crt/BPClass2CA2.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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