workbench.posit.sbm.no

- SPAREBANKEN MØRE -

Issued by Buypass Class 3 CA 2

About this certificate

This digital certificate with serial number 4d:9d:fb:5b:f5:e3:58:4a:67:5c was issued on by Buypass AS-983163327.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

SPAREBANKEN MØRE

Company registration number: 937899319
Organization: SPAREBANKEN MØRE
Postal code: 6003
Locality: ÅLESUND
Country: NO

Buypass AS-983163327

Organization: Buypass AS-983163327
Country: NO

This certificate will expire on

Certificate Details

Serial Number (hex): 4d:9d:fb:5b:f5:e3:58:4a:67:5c
Serial Number (int): 366536470341218269292380
Serial Number lenght: 79 bits, 10 octets

SubjectKeyId: f0:62:ea:53:d0:fb:d5:9d:04:77:b4:bd:7e:13:50:5d:01:7d:1a:00
AuthorityKeyId: 22:30:2e:d2:fb:f6:4b:ca:c0:b8:3b:d2:04:c4:e9:72:e6:97:9b:0c

Fingerprint (sha1): 51:1b:d4:ab:5f:c6:58:22:8f:74:78:41:a0:1f:fb:aa:8a:59:08:a4
Fingerprint (sha256): 23:2b:ec:63:95:dd:b1:60:41:fa:8f:79:89:0a:45:87:2e:57:28:80:5c:92:20:c1:ff:aa:87:cc:84:65:72:be

Issuing Certificate URL: http://crt.buypass.no/crt/BPClass3CA2.cer

Revocation information

OCSP Server: http://ocsp.buypass.com
CRL Distribution Point: http://crl.buypass.no/crl/BPClass3CA2.crl

Check the revocation status for certificate workbench.posit.sbm.no

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for workbench.posit.sbm.no

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

workbench.posit.sbm.no

Other certificates including the domain name sbm.no

(limited to 100 certificates)
mi.sbm.no
www.sbm.no
nettbank.sbm.no
www.sbm.no
sbm.sbm.no
mi.sbm.no
www.sbm.no
sip.sbm.no
www.sbm.no
pureservice.sbm.no
post.sbm.no
www.sbm.no
sbm.sbm.no
workbench.posit.sbm.no
sip.sbm.no
pureservice.sbm.no
khb.sbm.no
www.sbm.no
nettbank.sbm.no
rapporter.sbm.no
smartbank.sbm.no
gave.sbm.no
gave.sbm.no
smartbank.sbm.no
sentry.sbm.no
sbm.sbm.no
competella.sbm.no
www.sbm.no
www.sbm.no
www.sbm.no
nettbank.sbm.no
smartbank.sbm.no
www.sbm.no
sentry.sbm.no
www.sbm.no
nettbank.sbm.no
rp.sbm.no
www.sbm.no
www.sbm.no
smartbank.sbm.no
www.sbm.no
weboffice.sbm.no
rapporter.sbm.no
smartbank.sbm.no
rapporter.sbm.no
gave.sbm.no
nettbank.sbm.no
rapporter.sbm.no
www.sbm.no
post.sbm.no
kontor.sbm.no
packagemanager.posit.sbm.no
nettbank.sbm.no
nettbank.sbm.no
www.sbm.no
mi.sbm.no
sip.sbm.no
post.sbm.no
webmail.sbm.no
sts.sbm.no
gave.sbm.no
connect.posit.sbm.no
forvaltning.sbm.no
post.sbm.no
kontor.sbm.no
rapporter.sbm.no
post.sbm.no
sip.sbm.no
rapporter.sbm.no
openbanking.sbm.no
www.sbm.no
nettbank.sbm.no
staging.sbm.no
wealthmapper.sbm.no
epost.sbm.no
post.sbm.no
rapporter.sbm.no
www.sbm.no
pureservice.sbm.no
mi.sbm.no
sbm.sbm.no
forvaltning.sbm.no
www.sbm.no

Certificate

The complete raw certificate details for workbench.posit.sbm.no in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5W0sDH5DRLF/drp2V8Bm
3zPCGKSI5934Oc/Cp7YTUmNUnKYT7CxWbCf5ujSGWG7jJEGnSn+I6pLl8YIwlJwa
hAKfBVjqSXtjFW60TsKQeWpGzw6YbwIUZxh5c6ciuA4i/MZvhw3oFTpokVzXUdrS
k8aZdCrmH8lHVdzhWF/Yyk8w/zWx88lSS0oPY0RsD99ooiNP8bFctEEpO0+0puRQ
OwvX/gbkjO5J5/gYzTn4Ildhzs6GOGqVPnUcRZtymA9Nk91/qKR5pNzKAmWt1Zb4
IcO+SCJzAHCeUYyBr9CytUMgKEOvbnwqlXfrMn/qqFWlIoB7nDSkS8cGn4Nyzw11
TwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 366536470341218269292380
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Buypass AS-983163327'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Buypass Class 3 CA 2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-24 13:50:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-04-24 21:59:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'ÅLESUND'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '6003'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SPAREBANKEN MØRE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'workbench.posit.sbm.no'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '937899319'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28962406589238911420267746778246625516205787359621639958153914116663890764992237799138595223111347714703414128218322096098277445503459924762321844230543292517568303694943778166928987677932814976145526976797359376641897942274142344427236843789470504913237558039395387831476107686947137564378324274776298483314136949125616633407119719038769674669239829417829180625579055044228100710053854749071128046796667545470383299822027980721721416948967032624712286396805482587494532950201601395653795651069428814952581683147381423813544100387711398288735812703678464430194962912040931555821794930909588114924347900274415210689871
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 22302ed2fbf64bcac0b83bd204c4e972e6979b0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f062ea53d0fbd59d0477b4bd7e13505d017d1a00
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.578.1.26.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.buypass.no/crl/BPClass3CA2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'workbench.posit.sbm.no'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (94 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.buypass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.buypass.no/crt/BPClass3CA2.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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