uonsket-hendelse.qa.nhn.no

Issued by Buypass Class 2 CA 5

About this certificate

This digital certificate with serial number 08:71:e5:97:17:d7:24:82:15:40:3f was issued on by Buypass AS-983163327.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=uonsket-hendelse.qa.nhn.no

Buypass AS-983163327

Organization: Buypass AS-983163327
Country: NO

This certificate has expire since

Certificate Details

Serial Number (hex): 08:71:e5:97:17:d7:24:82:15:40:3f
Serial Number (int): 10209269161281358786805823
Serial Number lenght: 84 bits, 11 octets

SubjectKeyId: 00:23:98:cc:5b:4d:6f:20:5b:f6:d8:83:75:25:d6:e1:8c:92:93:29
AuthorityKeyId: 27:52:a4:6f:2d:2a:ab:40:93:90:ec:d6:69:cb:fe:7c:61:3b:7c:42

Fingerprint (sha1): 9a:c4:ab:6a:73:15:7b:ca:1d:bc:7f:8c:6c:ee:36:3e:06:6f:be:0f
Fingerprint (sha256): 15:64:a8:00:2b:8c:e4:a0:9e:e7:72:00:a8:ec:af:24:4a:53:48:7f:19:40:44:a3:f6:48:3c:95:fa:1b:2a:1e

Issuing Certificate URL: http://crt.buypass.no/crt/BPClass2CA5.cer

Revocation information

OCSP Server: http://ocsp.buypass.com
CRL Distribution Point: http://crl.buypass.no/crl/BPClass2CA5.crl

Check the revocation status for certificate uonsket-hendelse.qa.nhn.no

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for uonsket-hendelse.qa.nhn.no

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

uonsket-hendelse.qa.nhn.no
uonsket-hendelse-backend.qa.nhn.no

Other certificates including the domain name nhn.no

(limited to 100 certificates)
amkstatus.nhn.no
configuration-utility.ncpeh.nhn.no
www.nhn.no
amkstatus.nhn.no
register.qa.nhn.no
sonarqube.utv.nhn.no
kot.nhn.no
amkstatus.nhn.no
utviklerportal-test-standby.plattform.nhn.no
hjelp.nhn.no
amkstatus.nhn.no
geoevent.test.gis.nhn.no
norcrin.fnsp.prep.nhn.no
ws.nhn.no
antibiotika.fnsp.nhn.no
min.support.qa.nhn.no
sonarqube.utv.nhn.no
amkstatus.nhn.no
mq.qa.amk.nhn.no
finnmark.klient.qa.amk.nhn.no
amkstatus.nhn.no
amkstatus.nhn.no
skde.fnsp.inte.nhn.no
test.sso.kj.nhn.no
na-test-oidc.d-rfi-000.osl1-rf-it.sky.nhn.no
portal.admin.qa.gis.nhn.no
amkstatus.nhn.no
www.nhn.no
argo.selvbetjening.utvikling.nhn.no
abrsonline.atostatus.com.au
helseid-admin.utvikling.nhn.no
ws-td.test.nhn.no
sikkerhet.nhn.no
medusa.nhn.no
ws-at.test.nhn.no
frontend-fest-test.nhn.no
holbergsplads.nhn.no
amkstatus.nhn.no
www.nhn.no
amkstatus.nhn.no
helse-midt.fnsp.inte.nhn.no
ws-web.test.nhn.no
dev.opplaering.kj.nhn.no
mrs-sts.nhn.no
iplos.skatteetaten.no
adresseregister-test.nhn.no
portal.admin.qa.gis.nhn.no
personregister-td.test.nhn.no
nyan.t-jonas-001.trd1-sky-test.sky.nhn.no
argo.utv.kj.nhn.no
prom.nhn.no
pvk-webimporter.shp-nav.test.nhn.no
amkstatus.nhn.no
www.nhn.no
mrs-sts.nhn.no
uonsket-hendelse.qa.nhn.no
helse-sorost.fnsp.inte.nhn.no
kafka-access-management-helper.internet.shp-nav.test.nhn.no
bergen.klient.qa.amk.nhn.no
vestreviken.klient.qa.amk.nhn.no
fs.tjenesteplattform.nhn.no
ehelse-portal.qa.nhn.no
amkstatus.nhn.no
fodselsmelding.nhn.no
eksternbruker.fs.nhn.no
producerapi-p.plattform.nhn.no
test.pmd.nhn.no
holbergsplads.nhn.no
portal.test.gis.nhn.no
*.qa.amk.nhn.no
configuration-utility.ncpeh.nhn.no
norcrin.fnsp.prep.nhn.no
personregister-web.test.nhn.no
amkstatus.nhn.no
fodselsmelding.test.nhn.no
personregister.nhn.no
amkstatus.nhn.no
auth.sky.nhn.no
abrsonline.atostatus.com.au
aviacme.cname4.test.nhn.no
nhnglobalconnectdata.iu.test.nhn.no
ror.sky.test.nhn.no
api.helsenettet.iu.qa.nhn.no
amkstatus.nhn.no
metrics.qa.amk.nhn.no
selvbetjening.qa.nhn.no
*.sdwan.nhn.no
personregister.test.nhn.no
*.hn.qa.nhn.no
nav-gateway.iu.test.nhn.no
amkstatus.nhn.no
blazing-kafka-browser.internet.shp-nav.test.nhn.no
helsenettet.iu.test.nhn.no
amkstatus.nhn.no
amkstatus.nhn.no
jdps.fnsp.test.nhn.no
*.artifactory.pasientreiser.nhn.no
nordtrond.klient.qa.amk.nhn.no
*.net.nhn.no
*.hn.at.nhn.no

Certificate

The complete raw certificate details for uonsket-hendelse.qa.nhn.no in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFoTCCA4mgAwIBAgILCHHllxfXJIIVQD8wDQYJKoZIhvcNAQELBQAwSzELMAkG
A1UEBhMCTk8xHTAbBgNVBAoMFEJ1eXBhc3MgQVMtOTgzMTYzMzI3MR0wGwYDVQQD
DBRCdXlwYXNzIENsYXNzIDIgQ0EgNTAeFw0yMzEwMjQwNDIyMjVaFw0yNDA0MjAy
MTU5MDBaMCUxIzAhBgNVBAMMGnVvbnNrZXQtaGVuZGVsc2UucWEubmhuLm5vMIIB
IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0OwgVPPbqf0Rx3rysa/usm6D
Y18m7Ar9oKww6T8xchPjcPRP+FnRSHJ+86kAhO+yq8PsllSlL4sDiov+Bz89A6ah
TR/ku6edwdd4GZSFQ/QD9y25LhR71r661rH+ulFw05ZgYhYpVW/1C3P/6p+gfDaW
lXu1qIBNfWrG/+vw/i+qQ/vh9ifhZFN2kI2HbPVUkDXsn1HoharuJ1q/dI+iqce8
um3Rkfe0SgLT/6wKeuZOA1cH3l0g75EvlxKjSktAHStu1kBs0ayAeeZ6KVsrVFx3
9NYIDRyHqukWaR6rVM+r0MtjgoLahUV659X6pDmAh+WOx6ERv+2WF9P5XwCgkwID
AQABo4IBqjCCAaYwDAYDVR0TAQH/BAIwADAfBgNVHSMEGDAWgBQnUqRvLSqrQJOQ
7NZpy/58YTt8QjAdBgNVHQ4EFgQUACOYzFtNbyBb9tiDdSXW4YySkykwDgYDVR0P
AQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAfBgNVHSAE
GDAWMAoGCGCEQgEaAQIHMAgGBmeBDAECATA6BgNVHR8EMzAxMC+gLaArhilodHRw
Oi8vY3JsLmJ1eXBhc3Mubm8vY3JsL0JQQ2xhc3MyQ0E1LmNybDBJBgNVHREEQjBA
ghp1b25za2V0LWhlbmRlbHNlLnFhLm5obi5ub4IidW9uc2tldC1oZW5kZWxzZS1i
YWNrZW5kLnFhLm5obi5ubzBqBggrBgEFBQcBAQReMFwwIwYIKwYBBQUHMAGGF2h0
dHA6Ly9vY3NwLmJ1eXBhc3MuY29tMDUGCCsGAQUFBzAChilodHRwOi8vY3J0LmJ1
eXBhc3Mubm8vY3J0L0JQQ2xhc3MyQ0E1LmNlcjATBgorBgEEAdZ5AgQDAQH/BAIF
ADANBgkqhkiG9w0BAQsFAAOCAgEATVNoNG92fb983yBPdMQ0CsIdENf0LuZASi7S
iHcrDL/IHdrIAP2ArN82wHyt93TTPUx8s0WW2SR/hQ5+EyYENe82eiznptAkZYNw
jaSTN34lnQc2M58gFhKxAzYt7knGokMrolj2jy7tH21BMt98VVR0HQ9t00mnTuVs
IlOvNKUabRbshPYemn6w5HjvAd08IJMxhbQizcEgW1d+e8aQRW1uySSLaX+5tvyx
20LruFezZ2YLH8kuoMmCi/kdKzIUy9JTRdbFTUW74gmYEoiojIMtlcAJ2qf39pe0
G5j1lfOgCdWtqLoeJvh9WsgZUBNy6q7L/axecouTllU6aj4fr93jpwy8VghddrI4
yJ+18NP8wVGjaOjeNL7NBiT4bohQbP0u+lb9K/btdF1GaKoQod/WsQqRDEhEEYR7
812tobq7xeSG18EGpWrpVndZUS6GXfmpk9K+kVT/cFOh1B+UrADLaeyf6fN2id6L
e3STr5Xt0ZO1rp7O7u0q/Np1lxFm9mawsoQ9oZ9yzmCEgvWhSmL+ckd50/p+F54a
E4/zP42oleEdG7ds+oYBP0dS5JmBpgm13fNZ0/PRDFMeVAy419dW5sUD1Y/IAuJM
tl10iKYVHy1GkNksiRSH9uXNj3F18VG/IVI4qXh7XqIwPbEw1NUg9whCW7Cnqgtn
EWLTj6I=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0OwgVPPbqf0Rx3rysa/u
sm6DY18m7Ar9oKww6T8xchPjcPRP+FnRSHJ+86kAhO+yq8PsllSlL4sDiov+Bz89
A6ahTR/ku6edwdd4GZSFQ/QD9y25LhR71r661rH+ulFw05ZgYhYpVW/1C3P/6p+g
fDaWlXu1qIBNfWrG/+vw/i+qQ/vh9ifhZFN2kI2HbPVUkDXsn1HoharuJ1q/dI+i
qce8um3Rkfe0SgLT/6wKeuZOA1cH3l0g75EvlxKjSktAHStu1kBs0ayAeeZ6KVsr
VFx39NYIDRyHqukWaR6rVM+r0MtjgoLahUV659X6pDmAh+WOx6ERv+2WF9P5XwCg
kwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10209269161281358786805823
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Buypass AS-983163327'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Buypass Class 2 CA 5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-24 04:22:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-20 21:59:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'uonsket-hendelse.qa.nhn.no'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26374005649344340424000479702431975957623184428046092492508134430721539962736980993520145034574744461710429784399704773003207013357449875863071419154873626119930337435192479660860738730825277484449545535076026559129123232252927830679313975437200976449263425968369745786673816469145083775500400444480791632329278443615849545318741719113030659115191579941751403255718229337683660192370194937419617073930417450810582234644497848196436888315987048608616876881164002022762429506183112521496979034308535731359185682835267723473971512952683904457268012733521763828475014069040076766809627978954967595535589724393345741004947
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 2752a46f2d2aab409390ecd669cbfe7c613b7c42
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							002398cc5b4d6f205bf6d8837525d6e18c929329
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.578.1.26.1.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.buypass.no/crl/BPClass2CA5.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uonsket-hendelse.qa.nhn.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uonsket-hendelse-backend.qa.nhn.no'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (94 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.buypass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.buypass.no/crt/BPClass2CA5.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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