*.nsd.no

Issued by Buypass Class 2 CA 2

About this certificate

This digital certificate with serial number 41:a4:4b:7e:51:1c:0f:78:72:39 was issued on by Buypass AS-983163327.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.nsd.no

Buypass AS-983163327

Organization: Buypass AS-983163327
Country: NO

This certificate has expire since

Certificate Details

Serial Number (hex): 41:a4:4b:7e:51:1c:0f:78:72:39
Serial Number (int): 309984527289196175979065
Serial Number lenght: 79 bits, 10 octets

SubjectKeyId: 12:7a:cc:71:ad:98:66:d6:a7:d0:0a:b7:a2:e3:93:16:f1:d2:c9:67
AuthorityKeyId: 92:ad:65:89:b2:00:0f:cb:51:0d:c1:23:ec:94:4e:8f:c1:04:3f:77

Fingerprint (sha1): d5:6c:3c:06:17:67:73:ad:3f:2c:65:ff:08:ee:6c:94:19:3e:73:3e
Fingerprint (sha256): 2a:12:88:dc:78:92:e6:66:b4:e5:d5:32:6e:8d:a3:7e:15:fe:bc:a6:d2:f4:4f:97:f7:e2:98:dc:95:31:66:b6

Issuing Certificate URL: http://crt.buypass.no/crt/BPClass2CA2.cer

Revocation information

OCSP Server: http://ocsp.buypass.com
CRL Distribution Point: http://crl.buypass.no/crl/BPClass2CA2.crl

Check the revocation status for certificate *.nsd.no

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.nsd.no

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.nsd.no
nsd.no

Other certificates including the domain name nsd.no

(limited to 100 certificates)
uhskypepool02.uhad.no
fagskole.nsd.no
surveybanken.nsd.no
uhskypepool02.uhad.no
sip.s2.l.uhad.no
fagskole.nsd.no
www.nsd.no
fagskole.nsd.no
uhskypepool02.uhad.no
uhskypepool01.uhad.no
*.nsd.no
uhskypepool02.uhad.no
uhskypepool02.uhad.no
sip.s2.l.uhad.no
*.nsd.no
uhad.no
uhskypepool01.uhad.no
uhskypepool01.uhad.no
ess.nsd.no
nsd.no
uhskypepool01.uhad.no
search.nsd.no
nsd.no
uhskypepool02.uhad.no
uhskypepool01.uhad.no
sip.s1.l.uhad.no
uhskypepool02.uhad.no
uhskypepool02.uhad.no
sip.s2.l.uhad.no
uhskypepool02.uhad.no
nsd.no
uhskypepool01.uhad.no
*.nsd.no
ess.nsd.no
fagskole.nsd.no
uhskypepool02.uhad.no
sip.s1.l.uhad.no
sip.s2.l.uhad.no
uhskypepool02.uhad.no
uhskypepool01.uhad.no
uhskypepool01.uhad.no
dlmessenger-eng.dealogic.com
www-stage.nsd.no
*.nsd.no
uhskypepool01.uhad.no
uhskypepool01.uhad.no
sip.s2.l.uhad.no
uhskypepool01.uhad.no
uhskypepool01.uhad.no
nsd.no
sip.s2.l.uhad.no
nsd.no
sip.s1.l.uhad.no
*.nsd.no
pvoportal.nsd.no
nsd.no
ess-usage.nsd.no
survey-sandbox-stage.nsd.no
sip.s1.l.uhad.no
uhskypepool02.uhad.no
sip.s1.l.uhad.no
uhskypepool01.uhad.no
skolevalg.nsd.no
sip.s1.l.uhad.no
uhskypepool02.uhad.no
fagskole.nsd.no
per.nsd.no
fagskole.nsd.no
ess-search.nsd.no
sip.s1.l.uhad.no
uhskypepool01.uhad.no
studio-stage.nsd.no
sip.s2.l.uhad.no
uhskypepool01.uhad.no
uhskypepool01.uhad.no
nsd.no
uhskypepool01.uhad.no
sip.s1.l.uhad.no
nsd.no
sip.s2.l.uhad.no
uhskypepool02.uhad.no
uhskypepool02.uhad.no

Certificate

The complete raw certificate details for *.nsd.no in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumS+JDliK5vlP1jdRCWY
OYdIUrvXv6xaxlF5DX/vNKjPgqHnu5PZ2qD69dqApfRLF1OSR4v6ZR5VjhKtzCtA
HkwyR5negZz6PNRtUPuE1y9hHvdG619G1risEekJmoJYbhUiqKGX41Nd8XdqtGRK
RtWlqx3CXdOrXu89286pGi2dgFcBGqj7Wl+blSA8391YM0b2KYv9rsd9I1vZfCAx
2ztWIGzel7gDD6T5Srzsd60xpyxSBgjhc9WVbbt9xanmXmTojdJhTme/iFnHVyTm
1DGdJJT0TSh7vfIIbBcEdrlAnpkDVCMTVEDhvVukdx2Drt2WOfH7oPCK8/p/YoyU
CwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 309984527289196175979065
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Buypass AS-983163327'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Buypass Class 2 CA 2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-26 12:39:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-26 21:59:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.nsd.no'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23530002820425655705106747747501260016104540844615559035392260526815676849048734100882552091586719532517031815928941328264667480587712182381542271229929645608646287075505980935095718245165343152307324045652532856370137302853618353848585447134680772954642845407989183059907861956633768626165843296776019235558496642547504486773837263306834970247221659106985778340830253987433661188934341794641553551313840830113823763382669464437121467891962045267283673637391783713078353282421483092359909012761467156636553286481967324227924729097320036258381091918240526304321037940446897582221289466563560203577849579337201662858251
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 92ad6589b2000fcb510dc123ec944e8fc1043f77
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							127acc71ad9866d6a7d00ab7a2e39316f1d2c967
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.578.1.26.1.2.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.buypass.no/crl/BPClass2CA2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nsd.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nsd.no'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (94 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.buypass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.buypass.no/crt/BPClass2CA2.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00712dfe6721f57748ea6aa41033b568836033ec9ecd4993c6cb71729fed4dec0ace63705cf3a1e3cc23c182bbd06fc89da25d84e5fb95620bf3106fb73a8ffba388118f2120f596ce2e98ac5b5d6466edbb29b4cc80640e1ad2deb97c401516faead83f6fa2c5d670973033d2cd6c474f5f2fba7216864b0873983243ad53d6affd4431bd4d344a97784ff5d1f8149ebf30a4ecbd4a06b23042a750e06ce74994e696f53a72a726ee841af90ecd568035ef0680dc9727820ce7797088846d3e72e399dd6658059dfe06f64dc42ba9e67177ac6a2ab593712ae24e1642b3ac071cdcb4b6fc27b5e345f1a9107ffe269e12bcb83afcd400a54c92f4c6f27d4e4295