webext1.wow2.telenor.com

- TELENOR ASA -

Issued by Buypass Class 3 CA 2

About this certificate

This digital certificate with serial number 1b:77:35:8e:db:00:85:ce:db:06 was issued on by Buypass AS-983163327.

With 31 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

TELENOR ASA

Company registration number: 982463718
Organization: TELENOR ASA
Postal code: 1360
Locality: FORNEBU
Country: NO

Buypass AS-983163327

Organization: Buypass AS-983163327
Country: NO

This certificate has expire since

Certificate Details

Serial Number (hex): 1b:77:35:8e:db:00:85:ce:db:06
Serial Number (int): 129702916844977851915014
Serial Number lenght: 77 bits, 10 octets

SubjectKeyId: 97:23:ae:74:a3:83:98:5b:7f:7d:88:b5:e8:18:60:8b:53:f5:59:9c
AuthorityKeyId: 22:30:2e:d2:fb:f6:4b:ca:c0:b8:3b:d2:04:c4:e9:72:e6:97:9b:0c

Fingerprint (sha1): 1e:e0:d3:59:e0:54:71:9f:ce:c2:82:9e:65:d1:55:54:03:f0:a2:6b
Fingerprint (sha256): 79:d8:0e:60:c3:63:91:d2:42:35:97:15:0d:c0:aa:54:37:d0:1f:e5:f5:23:0b:da:77:8f:c6:c8:00:4a:a8:67

Issuing Certificate URL: http://crt.buypass.no/crt/BPClass3CA2.cer

Revocation information

OCSP Server: http://ocsp.buypass.com
CRL Distribution Point: http://crl.buypass.no/crl/BPClass3CA2.crl

Check the revocation status for certificate webext1.wow2.telenor.com

31

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for webext1.wow2.telenor.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

webext1.wow2.telenor.com
dialin.wow.telenor.com
dirwebext.wow2.telenor.com
lyncdiscover.bredband.com
lyncdiscover.canaldigital.com
lyncdiscover.canaldigital.dk
lyncdiscover.canaldigital.fi
lyncdiscover.canaldigital.no
lyncdiscover.canaldigital.se
lyncdiscover.canaldigitalkabel.se
lyncdiscover.cbb.dk
lyncdiscover.openuniverse.se
lyncdiscover.ownit.se
lyncdiscover.paysbuy.com
lyncdiscover.telenor.bg
lyncdiscover.telenor.com
lyncdiscover.telenor.com.pk
lyncdiscover.telenor.dk
lyncdiscover.telenor.hu
lyncdiscover.telenor.me
lyncdiscover.telenor.rs
lyncdiscover.telenor.se
lyncdiscover.telenorconnexion.com
lyncdiscover.telenorhealth.com
lyncdiscover.telway.no
lyncdiscover.valyou.com.my
lyowaext.wow2.telenor.com
lywebext.wow2.telenor.com
meet.wow.telenor.com
wacext.wow2.telenor.com
webext2.wow2.telenor.com

Other certificates including the domain name telenor.com

(limited to 100 certificates)
ave.asia.wow.telenor.com
ae.asia.wow.telenor.com
wnatest-ext.gcad.gc.telenor.com
partner.telenor.com
tkpservicestest.gitest.telenor.com
telenor.com
polaris.telenor.com
ae.asia.wow.telenor.com
polaris.gc.telenor.com
diversity-vpn.gc.telenor.com
capelladevrd.gitest.telenor.com
am.gc.telenor.com
telenor.com
securitychallenge.telenor.com
brandtracker.telenor.com
portal.ceetest.telenor.com
youthforumblog.telenor.com
ae.asia.wow.telenor.com
polaris.telenor.com
voyagerproxy.gc.telenor.com
*.col.asia.wow.telenor.com
wna-ext.gcad.gc.telenor.com
bmo.corp.telenor.com
odsmdev.gitest.telenor.com
telenor.com
asia.telenor.com
partner.access.telenor.com
*.col.wow.telenor.com
*.col.asia.wow.telenor.com
api.gcdev.telenor.com
tfs.gi.telenor.com
team.wow2.telenor.com
edoc360.corp.telenor.no
youthforum.wordpress.telenor.com
tlnpcfm03.gi.telenor.com
trainee-challenge.telenor.com
*.src.asia.wow.telenor.com
ignite.telenor.com
digitalhub.telenor.com
youthforum.wordpress.telenor.com
partnerportal.gi.telenor.com
sip.nordiccaas.telenor.com
wow.telenor.com
qa-portal.wow2.telenor.com
kunstsamlingen.telenor.com
youthforum.wordpress.telenor.com
i2dashboards.gc.telenor.com
amc.asia.wow.telenor.com
*.rec.asia.wow.telenor.com
teamsite.telenor.com
access.telenor.com
tiara.prod.telenor.com
cr.telenor.com
lyae.wow2.telenor.com
lywebext.wow2.telenor.com
digitalhub.telenor.com
startiot.telenor.com
handsettools.gc.telenor.com
kunstsamlingen.telenor.com
youthforum.wordpress.telenor.com
qa-team-sec.wow2.telenor.com
youthforumblog.telenor.com
workeri2.gc.telenor.com
ignite.telenor.com
qa-apps.wow2.telenor.com
cassiniz.gi.telenor.com
tlntcfm02.gitest.telenor.com
*.col.asia.wowqa.telenor.com
test.telenor.com
*.developer.iot.telenor.com
matrix.telenor.com
edoc360.corp.telenor.no
cockpit.gi.telenor.com
wnatest-int.gcad.gc.telenor.com
cwa.gc.telenor.com
youthforumblog.telenor.com
telenor.com
asia.telenor.com
cr.telenor.com
india.wow2.telenor.com
*.wow2.telenor.com
wf.gcad.gc.telenor.com
startiot.telenor.com
brand.telenor.com
youthforum.wordpress.telenor.com
test.telenor.com
digitalhub.telenor.com
qa-apps.wow2.telenor.com
ae.wowqa.telenor.com
pakistan-sec.wow2.telenor.com
ae.asia.wow.telenor.com
*.wow.telenor.com
polarisidm.gi.telenor.com
*.gc.telenor.com
capellasitrd.gitest.telenor.com
tlntcfm02.gitest.telenor.com
i2tnextproxy.gc.telenor.com
ae.wow.telenor.com
tkpservices.telenor.com
sip.telenor.com

Certificate

The complete raw certificate details for webext1.wow2.telenor.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApO8huQB4Ksl5BMnHg9vA
BbH1JoQ79TBrd6fvVsJmTUNtOCimMPeGdikYNDKtt9rKSV6MCnLlxXWmNWzbWigN
Jz8KBjKpL5ot05N9/2yjpwbk/lC0TDlqwC3x9379dz1b0x1zIYXn/QlUwpx5pco1
tG87Z3ciydklg3SyFtoNgaoqIBFhuiF8BVYwG4AgHI/Q9pYk0FKlSQ+ZlFEBJrtm
ABq0Y+Ooc7yDwAqzQbCu4tarmFuHVPQ/qdTpP9ksJhLC1NhJ8sxW7mUWPdAWzS0c
OkhGC+EjQiUZoAT9eRv3qBDSs1URawqhD/unud+5UOG6dSMZS16Z71bXDF1ESTMq
6wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 129702916844977851915014
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Buypass AS-983163327'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Buypass Class 3 CA 2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-18 13:28:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-14 21:59:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '1360'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'FORNEBU'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'TELENOR ASA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'webext1.wow2.telenor.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '982463718'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20821002265027355936305119395013055757904342286380625952181817246821530058998894421245754662650334427357188444129623178856543667944404199595927799598933857383593735246988965781348636320135075097986476416683869957700724218155072521351537215934551350088439633106430402123329940307816877139859343562407705469835480259002532853937321368685365305993206391897670988658112161818626591995435478319569540535740662555000916173944516402673443225281593733332072906903571411320472884379240445726035698167242495960763992018674213515668100249187277053704444514471929198503460267421066897100460804640237954700403703670846765086747371
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 22302ed2fbf64bcac0b83bd204c4e972e6979b0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9723ae74a383985b7f7d88b5e818608b53f5599c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.578.1.26.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.buypass.no/crl/BPClass3CA2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (846 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webext1.wow2.telenor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialin.wow.telenor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dirwebext.wow2.telenor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.bredband.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.canaldigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.canaldigital.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.canaldigital.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.canaldigital.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.canaldigital.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.canaldigitalkabel.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.cbb.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.openuniverse.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.ownit.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.paysbuy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.telenor.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.telenor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.telenor.com.pk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.telenor.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.telenor.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.telenor.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.telenor.rs'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.telenor.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.telenorconnexion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.telenorhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.telway.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.valyou.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyowaext.wow2.telenor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lywebext.wow2.telenor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet.wow.telenor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wacext.wow2.telenor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webext2.wow2.telenor.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (94 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.buypass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.buypass.no/crt/BPClass3CA2.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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