mail.lunner.kommune.no

Issued by Buypass Class 2 CA 2

About this certificate

This digital certificate with serial number 2c:de:2d:ea:73:cd:49:7e:60:25 was issued on by Buypass AS-983163327.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mail.lunner.kommune.no

Buypass AS-983163327

Organization: Buypass AS-983163327
Country: NO

This certificate has expire since

Certificate Details

Serial Number (hex): 2c:de:2d:ea:73:cd:49:7e:60:25
Serial Number (int): 211882611014829705420837
Serial Number lenght: 78 bits, 10 octets

SubjectKeyId: 7d:99:db:40:bc:fa:71:88:29:cd:f7:59:ba:41:34:be:ff:0d:98:82
AuthorityKeyId: 92:ad:65:89:b2:00:0f:cb:51:0d:c1:23:ec:94:4e:8f:c1:04:3f:77

Fingerprint (sha1): 6f:1e:8f:b5:d7:55:43:53:dd:89:f4:cd:75:bc:fa:37:94:67:9e:31
Fingerprint (sha256): 45:ba:1c:90:f2:0e:70:87:de:f0:b3:da:72:54:fa:65:c2:f2:70:dc:7b:d8:73:c8:f2:e0:a5:d7:4d:6d:e2:98

Issuing Certificate URL: http://crt.buypass.no/crt/BPClass2CA2.cer

Revocation information

OCSP Server: http://ocsp.buypass.com
CRL Distribution Point: http://crl.buypass.no/crl/BPClass2CA2.crl

Check the revocation status for certificate mail.lunner.kommune.no

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mail.lunner.kommune.no

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mail.lunner.kommune.no
autodiscover.lunner.kommune.no
lkmail01.lunner.kommune.no
lkmail02.lunner.kommune.no
webmail.lunner.kommune.no
www.mail.lunner.kommune.no

Other certificates including the domain name lunner.kommune.no

(limited to 100 certificates)
lunner.kommune.no
k247.lunner.kommune.no
lunner.kommune.no
tilgang.lunner.kommune.no
bibliotek.lunner.kommune.no
bibliotek.lunner.kommune.no
k247.lunner.kommune.no
bibliotek.lunner.kommune.no
www.lunner.kommune.no
*.lunner.kommune.no
moteportal.lunner.kommune.no
stilling.lunner.kommune.no
mail.lunner.kommune.no
mail.lunner.kommune.no
mail.lunner.kommune.no
skjema.lunner.kommune.no
stilling.lunner.kommune.no
moteportal.lunner.kommune.no
lunner.kommune.no
bibliotek.lunner.kommune.no
skjema.lunner.kommune.no
tilgang.lunner.kommune.no
bibliotek.lunner.kommune.no
skjema.lunner.kommune.no
bibliotek.lunner.kommune.no
innsyn.lunner.kommune.no
www.lunner.kommune.no
k247.lunner.kommune.no
bibliotek.lunner.kommune.no
lunner.kommune.no
bibliotek.lunner.kommune.no
webmail.lunner.kommune.no
lunner.kommune.no
lunner.kommune.no
bibliotek.lunner.kommune.no
www.lunner.kommune.no
lunner.kommune.no
bibliotek.lunner.kommune.no
bibliotek.lunner.kommune.no
www.nordrefollobibliotek.no
k247.lunner.kommune.no
interactintegrasjoner.lunner.kommune.no
bibliotek.lunner.kommune.no
mpinternetserver.lunner.kommune.no
stilling.lunner.kommune.no
bibliotek.lunner.kommune.no
bibliotek.lunner.kommune.no
bibliotek.lunner.kommune.no
www.lunner.kommune.no

Certificate

The complete raw certificate details for mail.lunner.kommune.no in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQAoTCX+KGOGcZ4OvmYq
oDQGRshDRH5yN1tW74Sybnwhvl1ZkPQtDDJ6Xh4fxZMyaV0yIXoVKqNJyi8N/7Dm
sOMD5+D31B8XpEZfVFWK1W6oOvI+Z3TPb/xpXbUfI4qHhWWNB+T0ZQ0MdoSugxcS
pgNImfVjuUf8L3iE2AyePhZbb2FEV2jseJ2Z0mo2xao6Wtde5N9quyC8pJPo10Rz
kxVcLEUBk8IDSCyM9NCDBeyhy2VTVMv0Jkg3+HSIOrHaIwpqIdShs9xMXClk7WwK
K6PV5KwSdDQ0lCJXckhl4jJ2Q/YBj0A9fjTREOnaFzhqgsKx32VbSYvv2v75gELe
SwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 211882611014829705420837
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Buypass AS-983163327'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Buypass Class 2 CA 2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-11 10:21:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-11 22:59:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'mail.lunner.kommune.no'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22344257601709338220775239470926665380429895031484553702634716400324197586672825940577067497466665018398240359405069258619901292793787956035305708991913874313146749448182608364349326202237670529361659258318972453212693956546682940690411820245923194656859634338803782309897783728385706912906986014236612546003355361437300360417069231850054338187022793303319219149940369883470350695257465456530333002738147927220437930192551155025881367833684823855129083708654776392151659031038079070340842007328552378579696267215132874296845550768201199884604601001079900038858922990910433821349581310985794193743016718489255057481291
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 92ad6589b2000fcb510dc123ec944e8fc1043f77
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7d99db40bcfa718829cdf759ba4134beff0d9882
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.578.1.26.1.2.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.buypass.no/crl/BPClass2CA2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (170 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.lunner.kommune.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.lunner.kommune.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lkmail01.lunner.kommune.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lkmail02.lunner.kommune.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.lunner.kommune.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mail.lunner.kommune.no'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (94 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.buypass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.buypass.no/crt/BPClass2CA2.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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