aaregisteretsoknad.nav.no

- ARBEIDS- OG VELFERDSETATEN -

Issued by Buypass Class 2 CA 2

About this certificate

This digital certificate with serial number 79:38:53:78:89:a8:87:a9:7b:41 was issued on by Buypass AS-983163327.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

ARBEIDS- OG VELFERDSETATEN

Company registration number: 889640782
Organization: ARBEIDS- OG VELFERDSETATEN
Postal code: 0661
Locality: OSLO
Country: NO

Buypass AS-983163327

Organization: Buypass AS-983163327
Country: NO

This certificate has expire since

Certificate Details

Serial Number (hex): 79:38:53:78:89:a8:87:a9:7b:41
Serial Number (int): 572445376804014082587457
Serial Number lenght: 79 bits, 10 octets

SubjectKeyId: 72:49:82:db:8c:a1:55:c2:e3:9a:5a:50:e0:ca:14:aa:03:1e:70:d4
AuthorityKeyId: 92:ad:65:89:b2:00:0f:cb:51:0d:c1:23:ec:94:4e:8f:c1:04:3f:77

Fingerprint (sha1): 82:24:64:fe:9f:d5:4f:a4:64:13:0f:ef:42:81:9b:78:65:1f:9a:da
Fingerprint (sha256): 51:2e:68:6b:3e:68:f4:c4:f8:98:b4:26:7b:78:cc:20:cc:5c:48:2d:31:ab:76:9b:4f:26:a4:1b:b8:35:9f:21

Issuing Certificate URL: http://crt.buypass.no/crt/BPClass2CA2.cer

Revocation information

OCSP Server: http://ocsp.buypass.com
CRL Distribution Point: http://crl.buypass.no/crl/BPClass2CA2.crl

Check the revocation status for certificate aaregisteretsoknad.nav.no

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aaregisteretsoknad.nav.no

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aaregisteretsoknad.nav.no

Other certificates including the domain name nav.no

(limited to 100 certificates)
data.nav.no
license.jetbrains.gc.nav.no
*.nav.no
pexmgr.dev.nav.no
repr-docs.intern.nav.no
nhn-gw.nav.no
peppol-ap-test.nav.no
sal.gc.nav.no
munki.gc.nav.no
*.nav.no
design.nav.no
tjenester.nav.no
wireless.nav.no
data.nav.no
tjenester.nav.no
sip.hot.nav.no
data.nav.no
*.nav.no
bekreftidentitet.nav.no
data.nav.no
nocf.gc.nav.no
sip.video.nav.no
*.dev.intern.nav.no
join.video.nav.no
smtp-pp.nav.no
wireless.nav.no
zentral.gc.nav.no
sentry.gc.nav.no
saas-to-nav-api.nav.no
www.nav.no
www.nav.no
www.nav.no
nhn-gw.nav.no
data.nav.no
data.nav.no
design.nav.no
begrepskatalog.intern.nav.no
data.nav.no
saas-to-nav-api.preprod.nav.no
pexmgr.dev.nav.no
apno01-eessi-acc.nav.no
api-portal-preprod.nav.no
design.nav.no
*.nav.no
*.nav.no
*.nav.no
www.nav.no
aaregisteretsoknad.nav.no
design.nav.no
data.nav.no
sip.nav.no
depviz.intern.nav.no
sentry-dev.gc.nav.no
data.nav.no
svar.nav.no
opptak.nav.no
www.nav.no
edge.acano-t.nav.no
*.nav.no
opptak.nav.no
design.nav.no
saas-to-nav-api.preprod.nav.no
sykmelding.nav.no
mmdm.gc.nav.no
data.nav.no
portal.video.nav.no
nhn-gw.nav.no
trello.intern.nav.no
apno01-eessi-test.nav.no
*.nav.no
*.nav.no
*.nav.no
data.nav.no
api.nav.no
m.vpn-t.nav.no
sykmelding.nav.no
api.nav.no
api-portal.nav.no
sip.hot.nav.no
data.nav.no
data.nav.no
innboks.nav.no
data.dev.intern.nav.no
sip.vk.nav.no
sentry.gc.nav.no
respons.nav.no
www.nav.no
data.nav.no
sip.video.nav.no
www.nav.no
sentry.gc.nav.no
etterlevelse.dev.intern.nav.no
fv-test.gc.nav.no
m.vpn.nav.no
mmdm.gc.nav.no
api-preprod.nav.no
api.nav.no
design.nav.no
peppol-ap-test.nav.no
data.nav.no

Certificate

The complete raw certificate details for aaregisteretsoknad.nav.no in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 572445376804014082587457
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Buypass AS-983163327'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Buypass Class 2 CA 2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-27 13:04:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-24 21:59:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '0661'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'OSLO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'ARBEIDS- OG VELFERDSETATEN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'aaregisteretsoknad.nav.no'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '889640782'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 762592850783524421315316205520675729795952238237337351235961214412944513018093689848601638494011505543716996560215126830276734372591980950379275564862524386712516030872030530473218674438527159547650986016484087955949738190775217298716311923122565432609200278333319745845289732858523951991294313685041276490265822093804518586581071320584918621023911472975234825779369204403798608682635805647935361685516089289605925914348489405207109748818661917137857725396856386669116606755319582793678124809969068467766231402797104428254472319745864285434787563456405796112009730720355100470912908354641335258104866453747542341970027395763546219906890122066075890645477408846773185250989257266405730723839006614312442365438061649969586157804367260079268651857839914809277868085469016323059616317456021123152335811026217998666989978418454637104429617533702656926790219900811400563667185811776872334098634750824851448973206944209189663819461483796837657190192690457388553523203365925571124680090581507656185464202648401013321545678778954917474765994174011358105964920048698780199689778016769873564408920018469746453823443305774078562772088488407519851128259303026911087984250454796620941319948664436031370065622613748527837965001968107053568580960521
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 92ad6589b2000fcb510dc123ec944e8fc1043f77
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							724982db8ca155c2e39a5a50e0ca14aa031e70d4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.578.1.26.1.2.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.buypass.no/crl/BPClass2CA2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aaregisteretsoknad.nav.no'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (94 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.buypass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.buypass.no/crt/BPClass2CA2.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		001bfd6baf2e6c88f1c305d6d1d3f637454237ace34429650b988f3e8e518f63da616fe8d9b519e9614b85ee20471001f79297ba402ae2f98728013766c8e34beabc3f772302c5119a9c194b8dde983a2b54c2582b52fe7cd7decd54379b6f41add3214ce2f91df765ec7724790a320a0a7cd20953ce4782f288c1f11e9c8bfc9ad254c779ff6c06f034d6c18341f085670ef9a1a16c9a93806f820bd012dc219a176bf5bb2c03859cd6c1d12ecabde0be186e1908c554443004ec4df8fe968e8eb022ee2f007fca0af0c7632a55882fcf7f3d912391567cd711cad3a873a577983cb7c21c167713fb7804784c5fc91b9d0ed46ea84535071d12ce45bdaa24c47b