www.nav.no

- ARBEIDS- OG VELFERDSETATEN -

Issued by Buypass Class 3 CA 2

About this certificate

This digital certificate with serial number 3a:6b:bf:b2:02:1c:39:18:7b:cc was issued on by Buypass AS-983163327.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

ARBEIDS- OG VELFERDSETATEN

Company registration number: 889640782
Organization: ARBEIDS- OG VELFERDSETATEN
Postal code: 0661
Locality: OSLO
Country: NO

Buypass AS-983163327

Organization: Buypass AS-983163327
Country: NO

This certificate has expire since

Certificate Details

Serial Number (hex): 3a:6b:bf:b2:02:1c:39:18:7b:cc
Serial Number (int): 275884870727653683395532
Serial Number lenght: 78 bits, 10 octets

SubjectKeyId: 38:5e:63:17:5d:4b:32:46:f0:a4:16:23:28:f3:86:16:83:62:53:da
AuthorityKeyId: 22:30:2e:d2:fb:f6:4b:ca:c0:b8:3b:d2:04:c4:e9:72:e6:97:9b:0c

Fingerprint (sha1): 13:6a:3b:7f:a9:fc:4c:9e:1c:aa:8d:43:d7:58:bd:a8:4c:e2:69:d6
Fingerprint (sha256): 36:9b:4f:8d:1c:c6:bd:41:b3:62:a8:64:93:c8:c0:0f:8d:b7:c0:32:09:f2:07:45:51:c2:60:26:0e:70:28:8c

Issuing Certificate URL: http://crt.buypass.no/crt/BPClass3CA2.cer

Revocation information

OCSP Server: http://ocsp.buypass.com
CRL Distribution Point: http://crl.buypass.no/crl/BPClass3CA2.crl

Check the revocation status for certificate www.nav.no

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.nav.no

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.nav.no
appres.nav.no
kommune.nav.no
nav.no

Other certificates including the domain name nav.no

(limited to 100 certificates)
data.nav.no
license.jetbrains.gc.nav.no
*.nav.no
pexmgr.dev.nav.no
repr-docs.intern.nav.no
nhn-gw.nav.no
peppol-ap-test.nav.no
sal.gc.nav.no
munki.gc.nav.no
*.nav.no
design.nav.no
tjenester.nav.no
wireless.nav.no
data.nav.no
tjenester.nav.no
sip.hot.nav.no
data.nav.no
*.nav.no
bekreftidentitet.nav.no
data.nav.no
nocf.gc.nav.no
sip.video.nav.no
*.dev.intern.nav.no
join.video.nav.no
smtp-pp.nav.no
zentral.gc.nav.no
sentry.gc.nav.no
www.nav.no
www.nav.no
www.nav.no
nhn-gw.nav.no
data.nav.no
data.nav.no
design.nav.no
begrepskatalog.intern.nav.no
data.nav.no
api-portal-preprod.nav.no
design.nav.no
*.nav.no
*.nav.no
*.nav.no
www.nav.no
aaregisteretsoknad.nav.no
design.nav.no
data.nav.no
sip.nav.no
depviz.intern.nav.no
sentry-dev.gc.nav.no
data.nav.no
svar.nav.no
opptak.nav.no
www.nav.no
edge.acano-t.nav.no
*.nav.no
opptak.nav.no
design.nav.no
saas-to-nav-api.preprod.nav.no
sykmelding.nav.no
mmdm.gc.nav.no
data.nav.no
portal.video.nav.no
nhn-gw.nav.no
trello.intern.nav.no
*.nav.no
*.nav.no
*.nav.no
data.nav.no
api.nav.no
m.vpn-t.nav.no
sykmelding.nav.no
api.nav.no
api-portal.nav.no
sip.hot.nav.no
data.nav.no
data.nav.no
innboks.nav.no
data.dev.intern.nav.no
sip.vk.nav.no
sentry.gc.nav.no
respons.nav.no
www.nav.no
data.nav.no
sip.video.nav.no
www.nav.no
sentry.gc.nav.no
etterlevelse.dev.intern.nav.no
fv-test.gc.nav.no
m.vpn.nav.no
mmdm.gc.nav.no
api-preprod.nav.no
api.nav.no
design.nav.no
peppol-ap-test.nav.no
data.nav.no
sykmelding.nav.no
*.intern.nav.no
tjenester.nav.no
saas-to-nav-api.nav.no
sykmelding.nav.no
mail.nav.no

Certificate

The complete raw certificate details for www.nav.no in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIG2DCCBcCgAwIBAgIKOmu/sgIcORh7zDANBgkqhkiG9w0BAQsFADBLMQswCQYD
VQQGEwJOTzEdMBsGA1UECgwUQnV5cGFzcyBBUy05ODMxNjMzMjcxHTAbBgNVBAMM
FEJ1eXBhc3MgQ2xhc3MgMyBDQSAyMB4XDTIyMDIxMTE0MzczOVoXDTIzMDMwODIy
NTkwMFowgaoxDTALBgNVBBEMBDA2NjExDTALBgNVBAcMBE9TTE8xGjAYBgNVBA8M
EUdvdmVybm1lbnQgRW50aXR5MRMwEQYLKwYBBAGCNzwCAQMTAk5PMQswCQYDVQQG
EwJOTzEjMCEGA1UECgwaQVJCRUlEUy0gT0cgVkVMRkVSRFNFVEFURU4xEzARBgNV
BAMMCnd3dy5uYXYubm8xEjAQBgNVBAUTCTg4OTY0MDc4MjCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBANqNBXA2hykYuX0MAtjStGB1KBU5RR1IsdvSpGRd
+WL0c30TfMnemnM263dJEov+KYzfB/wfcH2MpbnDYjW18bSGmMGuNvTvvYatChMJ
uL6A/a6/Xu8/jhANsxedE9hHTcNu7BTy32POqkLZtqc6DgU5Pxucdsn+LDIzeYHB
Qj19Wjv4VSL65G41Lp11PAdfN9VtsNfMIKIiHFTOIMP81Ol28alnX8XG9CjOKifv
fBLdegaForCjTQFtKUhcWcTNQ9AjBIR7NGTdm/Ep0ogIv082B3vrK2mL7ToQ4KAs
dDIPpFLKAVT+HFetvQkAKtbGArUq5mv4awotwq6mi+Ao9LkCAwEAAaOCA1wwggNY
MAkGA1UdEwQCMAAwHwYDVR0jBBgwFoAUIjAu0vv2S8rAuDvSBMTpcuaXmwwwHQYD
VR0OBBYEFDheYxddSzJG8KQWIyjzhhaDYlPaMA4GA1UdDwEB/wQEAwIFoDAdBgNV
HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwcgYDVR0gBGswaTA0BghghEIBGgED
AzAoMCYGCCsGAQUFBwIBFhpodHRwczovL3d3dy5idXlwYXNzLm5vL2NwczAxBgVn
gQwBATAoMCYGCCsGAQUFBwIBFhpodHRwczovL3d3dy5idXlwYXNzLm5vL2NwczA6
BgNVHR8EMzAxMC+gLaArhilodHRwOi8vY3JsLmJ1eXBhc3Mubm8vY3JsL0JQQ2xh
c3MzQ0EyLmNybDA8BgNVHREENTAzggp3d3cubmF2Lm5vgg1hcHByZXMubmF2Lm5v
gg5rb21tdW5lLm5hdi5ub4IGbmF2Lm5vMGoGCCsGAQUFBwEBBF4wXDAjBggrBgEF
BQcwAYYXaHR0cDovL29jc3AuYnV5cGFzcy5jb20wNQYIKwYBBQUHMAKGKWh0dHA6
Ly9jcnQuYnV5cGFzcy5uby9jcnQvQlBDbGFzczNDQTIuY2VyMIIBgAYKKwYBBAHW
eQIEAgSCAXAEggFsAWoAdwDoPtDaPvUGNTLnVyi8iWvJA9PL0RFr7Otp4Xd9bQa9
bgAAAX7pN+onAAAEAwBIMEYCIQD1DPOCuRKUjdoXZKgbmaC6IzzrYeOQpp+HOMiG
Zohq6wIhAOjbU8PvYbauqQazXqoYeDFlaW6bDkxFaPC02qLr4841AHYArfe++nz/
EMiLnT2cHj4YarRnKV3PsQwkyoWGNOvcgooAAAF+6Tfp7wAABAMARzBFAiEAy8Ww
gX9k/5HLUI0NemZ54wdkwSIg2QigMwbteOzQqkICIAlkS3qRr1bOW9vGwqlYZ9OV
D8IqKU0dDQ3teHXQEi0DAHcAejKMVNi3LbYg6jjgUh7phBZwMhOFTTvSK8E6V6NS
61IAAAF+6TfqRAAABAMASDBGAiEAt79gx+eiQIColBjM4D7hU8XOlDCpN1KUHE2A
isQEX5MCIQDavtsEH4a+WqtrD8/cBpBHq9kRbKPoHK8hS3CPeI1ieTANBgkqhkiG
9w0BAQsFAAOCAQEAFX9cnke7T4/6uR82LnwZNG5BkN3zIOs6CzOLT2BA0k2JlStE
1X+eSOez2OP0lC8U0YCXEOun9P/rZeAuX7M2IUly2Z9dQcf16DcSHm9n9kA2AsE3
9HA1h2whD8FLTBjN4+wK4+cOhxUbri2WqxarIpTV7NOHYMmJMR5R3f3Qsze1Ha8m
TZuW0cPew+S/iXEXVH07OpVBANz2oKh3Itkjtz/9hYPFeTbNvErXUsiAQt7zyBNW
UwrwodX4+GwB3CXhn8aqIiWPDjHpeP6Cwtq6jmqlrNjaVwtFQ2EqaBXc5t2kwQt0
5rbPwS9ZIvKUyztGxOvTJyz2EJH8RR1pvbViAA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2o0FcDaHKRi5fQwC2NK0
YHUoFTlFHUix29KkZF35YvRzfRN8yd6aczbrd0kSi/4pjN8H/B9wfYylucNiNbXx
tIaYwa429O+9hq0KEwm4voD9rr9e7z+OEA2zF50T2EdNw27sFPLfY86qQtm2pzoO
BTk/G5x2yf4sMjN5gcFCPX1aO/hVIvrkbjUunXU8B1831W2w18wgoiIcVM4gw/zU
6XbxqWdfxcb0KM4qJ+98Et16BoWisKNNAW0pSFxZxM1D0CMEhHs0ZN2b8SnSiAi/
TzYHe+sraYvtOhDgoCx0Mg+kUsoBVP4cV629CQAq1sYCtSrma/hrCi3CrqaL4Cj0
uQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 275884870727653683395532
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Buypass AS-983163327'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Buypass Class 3 CA 2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-11 14:37:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-08 22:59:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '0661'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'OSLO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Government Entity'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'ARBEIDS- OG VELFERDSETATEN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.nav.no'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '889640782'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27589490649560500471641853953272165657630235270369832882971527944972696557309800335815833356448952850672275573185619572380514573916966066210564028791078922125674410148267260736995675047754652378389476699001273700378012226740098043591441584255584370780223063697337783948287563188975005872731779751716471875993111985876141647659148321294690914308297729004508563899722556080535207390717144446356324722646149304103077782573049540805911095148410743866124027639200282629319615677992759849982704122073872251455926009188413939862442034792252313350019974814178229087480901184077002032579922586822753600888097239411887950066873
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 22302ed2fbf64bcac0b83bd204c4e972e6979b0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							385e63175d4b3246f0a4162328f38616836253da
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (107 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.578.1.26.1.3.3 (BuyPass EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.buypass.no/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.buypass.no/cps'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.buypass.no/crl/BPClass3CA2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nav.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appres.nav.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kommune.nav.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nav.no'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (94 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.buypass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.buypass.no/crt/BPClass3CA2.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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