ess.nsd.no

Issued by Buypass Class 2 CA 2

About this certificate

This digital certificate with serial number 3d:57:32:32:34:cb:9e:de:b5:ee was issued on by Buypass AS-983163327.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ess.nsd.no

Buypass AS-983163327

Organization: Buypass AS-983163327
Country: NO

This certificate has expire since

Certificate Details

Serial Number (hex): 3d:57:32:32:34:cb:9e:de:b5:ee
Serial Number (int): 289672839200960969356782
Serial Number lenght: 78 bits, 10 octets

SubjectKeyId: 28:ea:42:44:4e:97:10:51:39:af:81:1b:78:ab:94:2c:0c:60:57:be
AuthorityKeyId: 92:ad:65:89:b2:00:0f:cb:51:0d:c1:23:ec:94:4e:8f:c1:04:3f:77

Fingerprint (sha1): ee:cb:fc:2f:40:0e:c2:de:2c:3b:66:28:28:a7:55:72:cc:cb:39:f3
Fingerprint (sha256): 36:08:dc:a9:ac:66:6a:2c:d8:a6:86:61:04:a9:6b:c0:0b:16:14:8a:17:60:db:20:bd:b0:53:d9:79:e0:19:7c

Issuing Certificate URL: http://crt.buypass.no/crt/BPClass2CA2.cer

Revocation information

OCSP Server: http://ocsp.buypass.com
CRL Distribution Point: http://crl.buypass.no/crl/BPClass2CA2.crl

Check the revocation status for certificate ess.nsd.no

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ess.nsd.no

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ess.nsd.no
ess-test.nsd.no

Other certificates including the domain name nsd.no

(limited to 100 certificates)
uhskypepool02.uhad.no
fagskole.nsd.no
surveybanken.nsd.no
uhskypepool02.uhad.no
sip.s2.l.uhad.no
fagskole.nsd.no
www.nsd.no
fagskole.nsd.no
uhskypepool02.uhad.no
uhskypepool01.uhad.no
*.nsd.no
uhskypepool02.uhad.no
uhskypepool02.uhad.no
sip.s2.l.uhad.no
*.nsd.no
uhad.no
uhskypepool01.uhad.no
uhskypepool01.uhad.no
ess.nsd.no
nsd.no
uhskypepool01.uhad.no
search.nsd.no
nsd.no
uhskypepool02.uhad.no
uhskypepool01.uhad.no
sip.s1.l.uhad.no
uhskypepool02.uhad.no
uhskypepool02.uhad.no
sip.s2.l.uhad.no
uhskypepool02.uhad.no
nsd.no
uhskypepool01.uhad.no
*.nsd.no
ess.nsd.no
fagskole.nsd.no
uhskypepool02.uhad.no
sip.s1.l.uhad.no
sip.s2.l.uhad.no
uhskypepool02.uhad.no
uhskypepool01.uhad.no
uhskypepool01.uhad.no
dlmessenger-eng.dealogic.com
www-stage.nsd.no
*.nsd.no
uhskypepool01.uhad.no
uhskypepool01.uhad.no
sip.s2.l.uhad.no
uhskypepool01.uhad.no
uhskypepool01.uhad.no
nsd.no
sip.s2.l.uhad.no
nsd.no
sip.s1.l.uhad.no
*.nsd.no
pvoportal.nsd.no
nsd.no
ess-usage.nsd.no
survey-sandbox-stage.nsd.no
sip.s1.l.uhad.no
uhskypepool02.uhad.no
sip.s1.l.uhad.no
uhskypepool01.uhad.no
skolevalg.nsd.no
sip.s1.l.uhad.no
uhskypepool02.uhad.no
fagskole.nsd.no
per.nsd.no
fagskole.nsd.no
ess-search.nsd.no
sip.s1.l.uhad.no
uhskypepool01.uhad.no
studio-stage.nsd.no
sip.s2.l.uhad.no
uhskypepool01.uhad.no
uhskypepool01.uhad.no
nsd.no
uhskypepool01.uhad.no
sip.s1.l.uhad.no
nsd.no
sip.s2.l.uhad.no
uhskypepool02.uhad.no
uhskypepool02.uhad.no

Certificate

The complete raw certificate details for ess.nsd.no in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBn/fAMPr/axnpJGKJg3
4ICUkj7UxJ/fh8Lsln6NRW9PsRrVC823flZi+G9h6PWCtW7yXO+P4Z+wlWLdxKpt
2P/Cz/dF+EUn3eoPsOs3kW7lbKuUM/0rc/u66FIe6eN5PYVJYrFVuIBvC1bAgWOS
h6apGx2htyqP/8Sbp2to1BExLhLqi00juUS5ytyALC9mK5Uwe9WmPWBlad2Pg+QB
fgGVtAwQsyAjJxDV1oP0NXv/b/7R5h2rdAsxYn20LkDpown+C/1kZqMZJ2+SFbH9
v7yx6sV938SqNgjvW1JpKyRwGi5gUnOGMFzt9kInF73Js077KdapAhgFgyhJd44p
ZwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 289672839200960969356782
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Buypass AS-983163327'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Buypass Class 2 CA 2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-17 11:10:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-17 22:59:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'ess.nsd.no'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22735714978609254047746205914134776842091896703468997030148430349306456915842018809520355373034142476416592093789908978432719493872727515000598100510407222226795437490129454882677998644494626313619324679978900979998934213207723608426915112873601390090980784906690197724220426135218663484741266215644641222910066347186313519812789537470607167712902479481908888086540155796948061087261518051358798855436793837267502452343377095417504620126621441064766107816832929629741916291159772706564794046908242380406567088924141370079888897628254233978171587812649170456149712357880067810030365518750520236901197767899496137501031
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 92ad6589b2000fcb510dc123ec944e8fc1043f77
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							28ea42444e97105139af811b78ab942c0c6057be
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.578.1.26.1.2.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.buypass.no/crl/BPClass2CA2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ess.nsd.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ess-test.nsd.no'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (94 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.buypass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.buypass.no/crt/BPClass2CA2.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							0169007600bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed18500000170e82ff89c0000040300473045022043fb40b850ef70a0daa59d901d6f37fb8099c2b52c0ed125e5196a7b22d00d3d022100be844810e24e102ddecd78276e8f7c288c2c45c59bba59ae0c8945cd8d562f06007700a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000170e82ff8990000040300483046022100f24e5a044be6edfd3a3329a8c36de84fded78203b9b76508211d37c4bf6b2e4e02210096357d808a7abb7551b898f365bf70fc8609b8f5010aa06755ce0335d79055250076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000170e82ff8a7000004030047304502205c0d51ccf7d43715fda800764a21b0c4bbf7ff16544d01b37e56a31118c306b90221009a443c5e7a39638491a956aab548b87ccd2f5b6597aa0d8b76a8505ddf5f50ec
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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