nshieldmonitor.osl.prod.buypass.no

- BUYPASS AS -

Issued by Buypass Class 3 CA 2

About this certificate

This digital certificate with serial number 4a:66:ad:ba:f8:d1:35:f3:9c:62 was issued on by Buypass AS-983163327.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

BUYPASS AS

Company registration number: 983163327
Organization: BUYPASS AS
Postal code: 0484
Locality: OSLO
Country: NO

Buypass AS-983163327

Organization: Buypass AS-983163327
Country: NO

This certificate will expire on

Certificate Details

Serial Number (hex): 4a:66:ad:ba:f8:d1:35:f3:9c:62
Serial Number (int): 351349206219563786804322
Serial Number lenght: 79 bits, 10 octets

SubjectKeyId: 9c:9a:ef:be:32:2f:00:84:48:4f:03:0a:32:60:3d:61:bf:8e:1b:a2
AuthorityKeyId: 22:30:2e:d2:fb:f6:4b:ca:c0:b8:3b:d2:04:c4:e9:72:e6:97:9b:0c

Fingerprint (sha1): 66:c0:f5:dd:31:a0:fc:65:29:f1:1b:12:7b:98:ac:99:03:f6:08:5b
Fingerprint (sha256): 0e:a3:87:79:ad:f2:b9:20:22:e1:c0:0f:92:62:6f:d6:fd:8c:a5:ef:6e:4e:ab:25:21:39:41:ed:f6:eb:af:ab

Issuing Certificate URL: http://crt.buypass.no/crt/BPClass3CA2.cer

Revocation information

OCSP Server: http://ocsp.buypass.com
CRL Distribution Point: http://crl.buypass.no/crl/BPClass3CA2.crl

Check the revocation status for certificate nshieldmonitor.osl.prod.buypass.no

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nshieldmonitor.osl.prod.buypass.no

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

nshieldmonitor.osl.prod.buypass.no

Other certificates including the domain name buypass.no

(limited to 100 certificates)
bp.crm.buypass.no
*.code.qa-04.buypass.no
www.test3.buypass.no
www.test11.buypass.no
www.test4.buypass.no
www.testnif.buypass.no
sts.test2.buypass.no
valid.business.ca22.ssl.buypass.no
win2008.ssltest.lab.buypass.no
customer.buypass.no
www.qa.buypass.no
*.nif.test4.buypass.no
customer.buypass.no
ips.test1.buypass.no
customer.buypass.no
www.buypass.no
www.test2.buypass.no
www.test12.buypass.no
expired.evident.ca13.ssl.buypass.no
customer.buypass.no
ocsp.test2.buypass.no
www.test3.buypass.no
customer.buypass.no
valid.businessplus.ca23.ssl.buypass.no
customer.buypass.no
secure.stage.buypass.no
ips.test5.buypass.no
osbig11pr-2.mgmt.buypass.no
www.test22.buypass.no
api.qa.buypass.no
vmtra21it.intra.buypass.no
nshieldmonitor.osl.prod.buypass.no
ocsp.qa.buypass.no
www.test4.buypass.no
www.prod.buypass.no
valid.business.ca22.ssl.buypass.no
valid.evident.ca23.ssl.buypass.no
www.test22.buypass.no
www.buypass.no
customer.buypass.no
www.test3.buypass.no
valid.evident.ca23.ssl.buypass.no
customer.buypass.no
customer.buypass.no
valid.business.ca22.ssl.buypass.no
*.intra.buypass.no
n30.guest.buypass.no
ocsp.test2.buypass.no
www.buypass.no
customer.buypass.no
n30.guest.buypass.no
www.buypass.no
secure.buypass.no
ocsp.prod.buypass.no
customer.buypass.no
www.test4.buypass.no
customer.buypass.no
valid.evident.ca23.ssl.buypass.no
secure.test2.buypass.no
ocsp.nhn.buypass.no
ocsp.test1.buypass.no
mobil.test5.buypass.no
www.prod.buypass.no
customer.buypass.no
valid.evident.ca23.ssl.buypass.no
customer.buypass.no
www.buypass.no
*.test4.buypass.no
www.buypass.no
www.test13.buypass.no
sissel.buypass.no
www.test13.buypass.no
fs.buypass.no
www.test11.buypass.no
customer.buypass.no
customer.buypass.no
*.intra.buypass.no
n30.guest.buypass.no
*.code.test4.buypass.no
customer.buypass.no
portal.buypass.no
secure.test4.buypass.no
ras.buypass.no
cppoll.intra.buypass.no
*.tsp.buypass.no
customer.buypass.no
ips.test4.buypass.no
customer.buypass.no
customer.buypass.no
valid.evident.ca13.ssl.buypass.no
www.test4.buypass.no
ips.test5.buypass.no
revoked.domainplus.ca12.ssl.buypass.no
customer.buypass.no
nshieldmonitor.gvk.prod.buypass.no
customer.buypass.no
business.ssl.buypass.no
*.nif.test4.buypass.no
secure.test4.buypass.no
ips.test3.buypass.no

Certificate

The complete raw certificate details for nshieldmonitor.osl.prod.buypass.no in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAr0IxMKhr1RYS3MDXiAk/
LAX0B77+6jYKGN0F5DPlz8kD/jGx6ASkNHj/e3sNHs7AkkTOnKmG5nzLdMzhgCBA
HxqdasOU8+ohsIGeOjssFokUqKrpJw2JmtOfXayYbThMvzfqJN5SZAbKQ+k0eLgm
THubggPbyb5tMkCZ43pWQ4yPh2GAVyqj5wP7cIYjDSAxPlDvse00LDA3QnjkZMMh
a9FTVzYVr2AnlJfugioQeGXdIb6j8Lg/B4JkU+o2ukpX2pgKmtJ0downVETFjz2A
AzLpSksaWjV0hCmqNdqSOBibNOIpsI+TxacIxhWXHUj8rcJx9odi70qsLgwVvHtR
G6Cju/jhPjqZvYiTINcughRZpEq1ioV82SlZwLthSEVUfvIok/YcNQIpM+hwTew9
gRKdOzZlMvybYShbzh/ITycqLzyVLnNbADBndbs7iYH8T92xk0vTuvHHUnsseOHI
TfL2bgwV+N+7O8JlVfb25syTd1r3sObzCzZtxDzaydLOl6vBmvjF693nL6VQo9ST
r5oOXlLb0Z6WwGNBd/IaMRU1XrabB4q9Nuc6ngYjxbQ7qMJkbnDKf23Q9/AnP3xR
hDYvRigX1KwEjn4RqyQtGGizQPcIwcI0XSva00/OMj/XSyBfQOkriL/J8x4ef98l
NWP6THPDCBF6b+Xjha8yti0CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 351349206219563786804322
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Buypass AS-983163327'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Buypass Class 3 CA 2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-14 11:20:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-05 21:59:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'OSLO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '0484'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'BUYPASS AS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'nshieldmonitor.osl.prod.buypass.no'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '983163327'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 714992557242727496246794283283755160845799649879129612598361293732356813636209898565006238095507117785109497355439285751976962871961334062081573197454010747454523087681057848756353972153395414075169773797060760911027347448545814100597498587261471522117020438383416122138521538044122979787943685378381494832042868042128135786867325227989846303338410294752954889936542004905189149115313550489246746840140411116097112067872322293698602025325105234094240595462222776844467739446166796191721854317181388648920300460233024493937656535693534652362862026122892567432409056497619748063435373750605767245905112856947659944259367461210177705504513393649320143109965259335449076197979935939951697042634865655529073064334570021106046685204525553485926863525121916431605795551894623885853043121220720846834764383474732525176091933882524052267970827583075412684153818909147342768937370211906050951085986816026728052793417654762307713083373276088749681114238075554848472340879793725940691992564350282676827984443463472005413845202587668803831032526541823433647109150263127540151282676128687072360133327572667148436788293783935256643759308167105044290304780511460073674178804943966736138625739747542230086557091367750494673008957770856469154587915821
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 22302ed2fbf64bcac0b83bd204c4e972e6979b0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9c9aefbe322f0084484f030a32603d61bf8e1ba2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.578.1.26.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.buypass.no/crl/BPClass3CA2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nshieldmonitor.osl.prod.buypass.no'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (94 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.buypass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.buypass.no/crt/BPClass3CA2.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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