nshieldmonitor.gvk.prod.buypass.no
- BUYPASS AS -
Issued by Buypass Class 3 CA 2
About this certificate
This digital certificate with serial number 4a:65:d6:71:36:dd:70:31:c8:59 was issued on by Buypass AS-983163327.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
BUYPASS AS
Company registration number:
983163327
Organization: BUYPASS AS
Organization: BUYPASS AS
Postal code:
0484
Locality: OSLO
Country: NO
Locality: OSLO
Country: NO
Buypass AS-983163327
Organization:
Buypass AS-983163327
Country:
NO
This certificate will expire on
Certificate Details
Serial Number (hex): 4a:65:d6:71:36:dd:70:31:c8:59Serial Number (int): 351333693075919593392217
Serial Number lenght: 79 bits, 10 octets
SubjectKeyId: a3:e8:5f:6b:61:ad:fc:50:f5:23:ba:fd:34:62:f5:bd:f9:59:4e:1d
AuthorityKeyId: 22:30:2e:d2:fb:f6:4b:ca:c0:b8:3b:d2:04:c4:e9:72:e6:97:9b:0c
Fingerprint (sha1): 2d:cd:02:e4:59:7c:95:e6:be:11:e3:8c:ab:82:3c:9d:5f:93:78:58
Fingerprint (sha256): 36:33:24:91:f1:49:cc:6a:88:19:2f:2f:2b:c0:a0:e3:46:e1:cd:93:eb:1e:fe:12:2e:97:b4:1d:ea:58:bd:5f
Issuing Certificate URL: http://crt.buypass.no/crt/BPClass3CA2.cer
Revocation information
OCSP Server: http://ocsp.buypass.comCRL Distribution Point: http://crl.buypass.no/crl/BPClass3CA2.crl
Check the revocation status for certificate nshieldmonitor.gvk.prod.buypass.no
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for nshieldmonitor.gvk.prod.buypass.no
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
nshieldmonitor.gvk.prod.buypass.no
Other certificates including the domain name buypass.no
(limited to 100 certificates)
bp.crm.buypass.no
*.code.qa-04.buypass.no
www.test3.buypass.no
www.test11.buypass.no
www.test4.buypass.no
www.testnif.buypass.no
sts.test2.buypass.no
valid.business.ca22.ssl.buypass.no
win2008.ssltest.lab.buypass.no
customer.buypass.no
www.qa.buypass.no
*.nif.test4.buypass.no
customer.buypass.no
ips.test1.buypass.no
customer.buypass.no
www.buypass.no
www.test2.buypass.no
www.test12.buypass.no
expired.evident.ca13.ssl.buypass.no
customer.buypass.no
ocsp.test2.buypass.no
www.test3.buypass.no
customer.buypass.no
valid.businessplus.ca23.ssl.buypass.no
customer.buypass.no
secure.stage.buypass.no
ips.test5.buypass.no
osbig11pr-2.mgmt.buypass.no
www.test22.buypass.no
api.qa.buypass.no
vmtra21it.intra.buypass.no
nshieldmonitor.osl.prod.buypass.no
ocsp.qa.buypass.no
www.test4.buypass.no
www.prod.buypass.no
valid.business.ca22.ssl.buypass.no
valid.evident.ca23.ssl.buypass.no
www.test22.buypass.no
www.buypass.no
customer.buypass.no
www.test3.buypass.no
valid.evident.ca23.ssl.buypass.no
customer.buypass.no
customer.buypass.no
valid.business.ca22.ssl.buypass.no
*.intra.buypass.no
n30.guest.buypass.no
ocsp.test2.buypass.no
www.buypass.no
customer.buypass.no
n30.guest.buypass.no
www.buypass.no
secure.buypass.no
ocsp.prod.buypass.no
customer.buypass.no
www.test4.buypass.no
customer.buypass.no
valid.evident.ca23.ssl.buypass.no
secure.test2.buypass.no
ocsp.nhn.buypass.no
ocsp.test1.buypass.no
mobil.test5.buypass.no
www.prod.buypass.no
customer.buypass.no
valid.evident.ca23.ssl.buypass.no
customer.buypass.no
www.buypass.no
*.test4.buypass.no
www.buypass.no
www.test13.buypass.no
sissel.buypass.no
www.test13.buypass.no
fs.buypass.no
www.test11.buypass.no
customer.buypass.no
customer.buypass.no
*.intra.buypass.no
n30.guest.buypass.no
*.code.test4.buypass.no
customer.buypass.no
portal.buypass.no
secure.test4.buypass.no
ras.buypass.no
cppoll.intra.buypass.no
*.tsp.buypass.no
customer.buypass.no
ips.test4.buypass.no
customer.buypass.no
customer.buypass.no
valid.evident.ca13.ssl.buypass.no
www.test4.buypass.no
ips.test5.buypass.no
revoked.domainplus.ca12.ssl.buypass.no
customer.buypass.no
nshieldmonitor.gvk.prod.buypass.no
customer.buypass.no
business.ssl.buypass.no
*.nif.test4.buypass.no
secure.test4.buypass.no
ips.test3.buypass.no
*.code.qa-04.buypass.no
www.test3.buypass.no
www.test11.buypass.no
www.test4.buypass.no
www.testnif.buypass.no
sts.test2.buypass.no
valid.business.ca22.ssl.buypass.no
win2008.ssltest.lab.buypass.no
customer.buypass.no
www.qa.buypass.no
*.nif.test4.buypass.no
customer.buypass.no
ips.test1.buypass.no
customer.buypass.no
www.buypass.no
www.test2.buypass.no
www.test12.buypass.no
expired.evident.ca13.ssl.buypass.no
customer.buypass.no
ocsp.test2.buypass.no
www.test3.buypass.no
customer.buypass.no
valid.businessplus.ca23.ssl.buypass.no
customer.buypass.no
secure.stage.buypass.no
ips.test5.buypass.no
osbig11pr-2.mgmt.buypass.no
www.test22.buypass.no
api.qa.buypass.no
vmtra21it.intra.buypass.no
nshieldmonitor.osl.prod.buypass.no
ocsp.qa.buypass.no
www.test4.buypass.no
www.prod.buypass.no
valid.business.ca22.ssl.buypass.no
valid.evident.ca23.ssl.buypass.no
www.test22.buypass.no
www.buypass.no
customer.buypass.no
www.test3.buypass.no
valid.evident.ca23.ssl.buypass.no
customer.buypass.no
customer.buypass.no
valid.business.ca22.ssl.buypass.no
*.intra.buypass.no
n30.guest.buypass.no
ocsp.test2.buypass.no
www.buypass.no
customer.buypass.no
n30.guest.buypass.no
www.buypass.no
secure.buypass.no
ocsp.prod.buypass.no
customer.buypass.no
www.test4.buypass.no
customer.buypass.no
valid.evident.ca23.ssl.buypass.no
secure.test2.buypass.no
ocsp.nhn.buypass.no
ocsp.test1.buypass.no
mobil.test5.buypass.no
www.prod.buypass.no
customer.buypass.no
valid.evident.ca23.ssl.buypass.no
customer.buypass.no
www.buypass.no
*.test4.buypass.no
www.buypass.no
www.test13.buypass.no
sissel.buypass.no
www.test13.buypass.no
fs.buypass.no
www.test11.buypass.no
customer.buypass.no
customer.buypass.no
*.intra.buypass.no
n30.guest.buypass.no
*.code.test4.buypass.no
customer.buypass.no
portal.buypass.no
secure.test4.buypass.no
ras.buypass.no
cppoll.intra.buypass.no
*.tsp.buypass.no
customer.buypass.no
ips.test4.buypass.no
customer.buypass.no
customer.buypass.no
valid.evident.ca13.ssl.buypass.no
www.test4.buypass.no
ips.test5.buypass.no
revoked.domainplus.ca12.ssl.buypass.no
customer.buypass.no
nshieldmonitor.gvk.prod.buypass.no
customer.buypass.no
business.ssl.buypass.no
*.nif.test4.buypass.no
secure.test4.buypass.no
ips.test3.buypass.no
Certificate
The complete raw certificate details for nshieldmonitor.gvk.prod.buypass.no in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF4TCCBMmgAwIBAgIKSmXWcTbdcDHIWTANBgkqhkiG9w0BAQsFADBLMQswCQYD VQQGEwJOTzEdMBsGA1UECgwUQnV5cGFzcyBBUy05ODMxNjMzMjcxHTAbBgNVBAMM FEJ1eXBhc3MgQ2xhc3MgMyBDQSAyMB4XDTIzMTExNDExMjAxM1oXDTI0MTAwNTIx NTkwMFowgYExCzAJBgNVBAYTAk5PMQ0wCwYDVQQHDARPU0xPMQ0wCwYDVQQRDAQw NDg0MRMwEQYDVQQKDApCVVlQQVNTIEFTMSswKQYDVQQDDCJuc2hpZWxkbW9uaXRv ci5ndmsucHJvZC5idXlwYXNzLm5vMRIwEAYDVQQFEwk5ODMxNjMzMjcwggIiMA0G CSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDBNp1oHZU3H2p5xkvr+MpZhQFxJI+5 C9EXSmYNQ8nQran/9u0Rm6POhnAqfCA4vHm6Wyp3uZxoH1SQTvI//HcPwh6PUAbO PHqBT7PzApLpbTqgPBlNlYndQoEcj5+PBnCY1hM4jNbll5akCDtOYuTYs8sTHKpS V1y/44O3qfsHZX2d4/mgLTnPY35ce7bZ0v8LIg1lp61mjECYLCdK3/MdGAhyDLi2 5evj04/wmDYF2uo8lJZtDbIs4BSE6fbRVDJYZCSh9lAEfmnJTq6ZxPrSCPRSAhSJ I7SN012fanLq+VpDnCuosv/S0f7g2M4s6us9vUnBN943BnvzwQ+6Q7B0Kr5QdSfi TAFo0CPfmIW/ThMXXIpX1dH4B43Ja4DOSl6rDcMnTYAyiDSZ49b9yzVlXeDaUY5t cUWtuogJEd8MG1YpzUvh5bH053LGRW/EWCSAxg4aMh8qGYn2Cw83ufM0HbrF82dh UMFjchJzAUoTatp0usjOkl8QQhh1NZYqVW/5y25waZIQqAVdrjS1GICWQWcpCRSO GX4KhV5x6+99ET01pL0lELCa2rea6EMscw6vks0dwM1a5ylkiGUVLu/WSW4cfODS qJ8w3C2xc5JggRPNLSxTgde1nSo6EYXkbeIeDLZ4qCFlgFrrbM3WWZuRhSyjvCEb sToBWmg+lIIahwIDAQABo4IBjjCCAYowDAYDVR0TAQH/BAIwADAfBgNVHSMEGDAW gBQiMC7S+/ZLysC4O9IExOly5pebDDAdBgNVHQ4EFgQUo+hfa2Gt/FD1I7r9NGL1 vflZTh0wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEF BQcDAjAfBgNVHSAEGDAWMAoGCGCEQgEaAQMEMAgGBmeBDAECAjA6BgNVHR8EMzAx MC+gLaArhilodHRwOi8vY3JsLmJ1eXBhc3Mubm8vY3JsL0JQQ2xhc3MzQ0EyLmNy bDAtBgNVHREEJjAkgiJuc2hpZWxkbW9uaXRvci5ndmsucHJvZC5idXlwYXNzLm5v MGoGCCsGAQUFBwEBBF4wXDAjBggrBgEFBQcwAYYXaHR0cDovL29jc3AuYnV5cGFz cy5jb20wNQYIKwYBBQUHMAKGKWh0dHA6Ly9jcnQuYnV5cGFzcy5uby9jcnQvQlBD bGFzczNDQTIuY2VyMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUA A4IBAQCm2I1QJKNyCMuRe4zsT+ggQXTeZ72+vDn2shj9t1+MKOPna2LzLSNJwbTX uw0kZAClpIcRl1QXgZiit/Wh0cc0EQkJoLjZGAWjjOvNN0kKEBGxH6xh7RE2merQ MQ5oLIdHZ8kUU46JZ9fj1GCT3zWltlxdjNVF5kNCs7I89xYRf9brFa519Veulo7k VoJgnnZqNF5FFdexinCBF9PtbeVCH2N6d4pi6CRgToTNIsjHA2GR6Nfh7F4QeL/y gzVRTzowWD1FLpLeHdwecgNFrVFGJ7UOasG8pgnCLkkt41R8suIrAqVJ6kLKt/AS WEPQPzVsL5Wm4shKpSlw9aenpQIe -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAwTadaB2VNx9qecZL6/jK WYUBcSSPuQvRF0pmDUPJ0K2p//btEZujzoZwKnwgOLx5ulsqd7mcaB9UkE7yP/x3 D8Iej1AGzjx6gU+z8wKS6W06oDwZTZWJ3UKBHI+fjwZwmNYTOIzW5ZeWpAg7TmLk 2LPLExyqUldcv+ODt6n7B2V9neP5oC05z2N+XHu22dL/CyINZaetZoxAmCwnSt/z HRgIcgy4tuXr49OP8Jg2BdrqPJSWbQ2yLOAUhOn20VQyWGQkofZQBH5pyU6umcT6 0gj0UgIUiSO0jdNdn2py6vlaQ5wrqLL/0tH+4NjOLOrrPb1JwTfeNwZ788EPukOw dCq+UHUn4kwBaNAj35iFv04TF1yKV9XR+AeNyWuAzkpeqw3DJ02AMog0mePW/cs1 ZV3g2lGObXFFrbqICRHfDBtWKc1L4eWx9OdyxkVvxFgkgMYOGjIfKhmJ9gsPN7nz NB26xfNnYVDBY3IScwFKE2radLrIzpJfEEIYdTWWKlVv+ctucGmSEKgFXa40tRiA lkFnKQkUjhl+CoVecevvfRE9NaS9JRCwmtq3muhDLHMOr5LNHcDNWucpZIhlFS7v 1kluHHzg0qifMNwtsXOSYIETzS0sU4HXtZ0qOhGF5G3iHgy2eKghZYBa62zN1lmb kYUso7whG7E6AVpoPpSCGocCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 351333693075919593392217 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NO' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Buypass AS-983163327' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Buypass Class 3 CA 2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-14 11:20:13 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-05 21:59:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NO' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'OSLO' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '0484' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'BUYPASS AS' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'nshieldmonitor.gvk.prod.buypass.no' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '983163327' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 788241653683059349870720003303918338584560589230333573893881945584173651623705386952819042852666500278283186189724311502895680657699796921747032323158836536538107581887733697290698335166550396072714990120484632254235818717498403306854640379775915569025484195955484889987709762623923514358496324331548765970772110571816965693255652735982103567401459099907980434953461821409084688480809134969670301819138564899409842542137855352101759755264380906434699733088549221355825371650264576346454532117083519385294020012435556960903516835258409462145017969292943972450829539177599342899044984974181594590320653751307707255238736472818715413594442649555072575342365286162962384759658990060244924270326103778448861751483491362224790937117255277235101115577734584248594685731669417122429701372855935727073427799540349677937418633550868897710061940671764730560865112767242552557932433151898277949555070148080077822984980328988889581533358424661275541677717121030744989513604081901411314228359023347400569919715961385758475594125372430238480283363604878930248795118107102402127458030022991324258008931690843760327191052098234067307015477367392105192185934116440290639683518367218068549688029345622749605267490557075609617382122111302103649904368263 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 22302ed2fbf64bcac0b83bd204c4e972e6979b0c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) a3e85f6b61adfc50f523bafd3462f5bdf9594e1d . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.578.1.26.1.3.4 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.buypass.no/crl/BPClass3CA2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nshieldmonitor.gvk.prod.buypass.no' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (94 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.buypass.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.buypass.no/crt/BPClass3CA2.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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