nhn-gw-q.nav.no

- ARBEIDS- OG VELFERDSETATEN -

Issued by Buypass Class 2 CA 2

About this certificate

This digital certificate with serial number 8a:4e:b6:f6:1c:c2:d0:25:a7:5d was issued on by Buypass AS-983163327.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

ARBEIDS- OG VELFERDSETATEN

Company registration number: 889640782
Organization: ARBEIDS- OG VELFERDSETATEN
Postal code: 0661
Locality: OSLO
Country: NO

Buypass AS-983163327

Organization: Buypass AS-983163327
Country: NO

This certificate will expire on

Certificate Details

Serial Number (hex): 8a:4e:b6:f6:1c:c2:d0:25:a7:5d
Serial Number (int): 653138604430342599583581
Serial Number lenght: 80 bits, 10 octets

SubjectKeyId: 2a:84:f8:93:c9:5e:ee:f8:a7:41:7e:76:9a:c0:d6:cc:71:36:81:fd
AuthorityKeyId: 92:ad:65:89:b2:00:0f:cb:51:0d:c1:23:ec:94:4e:8f:c1:04:3f:77

Fingerprint (sha1): f3:2f:2e:3f:c2:09:b9:0b:47:7d:78:8c:67:16:a5:9b:7c:85:98:86
Fingerprint (sha256): 8d:3d:7d:89:31:33:00:42:e2:73:f3:35:07:95:a6:fe:f1:1a:24:4d:8a:b7:4f:fb:0a:19:c9:76:a6:f1:4f:9f

Issuing Certificate URL: http://crt.buypass.no/crt/BPClass2CA2.cer

Revocation information

OCSP Server: http://ocsp.buypass.com
CRL Distribution Point: http://crl.buypass.no/crl/BPClass2CA2.crl

Check the revocation status for certificate nhn-gw-q.nav.no

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nhn-gw-q.nav.no

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

nhn-gw-q.nav.no
nhn-gw-t.nav.no

Other certificates including the domain name nav.no

(limited to 100 certificates)
data.nav.no
license.jetbrains.gc.nav.no
*.nav.no
pexmgr.dev.nav.no
repr-docs.intern.nav.no
nhn-gw.nav.no
peppol-ap-test.nav.no
*.az.nav.no
sal.gc.nav.no
munki.gc.nav.no
tolkebestilling.nav.no
*.nav.no
design.nav.no
tjenester.nav.no
wireless.nav.no
api-gw.nav.no
data.nav.no
tjenester.nav.no
sip.hot.nav.no
data.nav.no
*.nav.no
bekreftidentitet.nav.no
data.nav.no
nocf.gc.nav.no
sip.video.nav.no
*.dev.intern.nav.no
join.video.nav.no
smtp-pp.nav.no
wireless.nav.no
zentral.gc.nav.no
sentry.gc.nav.no
saas-to-nav-api.nav.no
www.nav.no
www.nav.no
es-gw-q.nav.no
www.nav.no
nhn-gw.nav.no
data.nav.no
data.nav.no
design.nav.no
begrepskatalog.intern.nav.no
data.nav.no
saas-to-nav-api.preprod.nav.no
pexmgr.dev.nav.no
apno01-eessi-acc.nav.no
api-portal-preprod.nav.no
design.nav.no
*.nav.no
*.nav.no
*.nav.no
www.nav.no
aaregisteretsoknad.nav.no
design.nav.no
data.nav.no
sip.nav.no
depviz.intern.nav.no
sentry-dev.gc.nav.no
data.nav.no
svar.nav.no
partner-gw-q.nav.no
opptak.nav.no
www.nav.no
aaregisteretsoknad.nav.no
edge.acano-t.nav.no
*.nav.no
opptak.nav.no
design.nav.no
saas-to-nav-api.preprod.nav.no
sykmelding.nav.no
mmdm.gc.nav.no
data.nav.no
portal.video.nav.no
nhn-gw.nav.no
trello.intern.nav.no
apno01-eessi-test.nav.no
es-gw.nav.no
*.nav.no
*.nav.no
*.nav.no
data.nav.no
api.nav.no
m.vpn-t.nav.no
sykmelding.nav.no
api.nav.no
api-portal.nav.no
sip.hot.nav.no
data.nav.no
data.nav.no
innboks.nav.no
data.dev.intern.nav.no
sip.vk.nav.no
nhn-gw-q.nav.no
sentry.gc.nav.no
respons.nav.no
sip.hot.nav.no
www.nav.no
data.nav.no
sip.video.nav.no
www.nav.no
sentry.gc.nav.no

Certificate

The complete raw certificate details for nhn-gw-q.nav.no in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7bRX3Cb/Id6uNdPcS0mK
T0BQb1YcAUAe7O+LmJAhtQdiLRJTS70aGqJbKijdN/5ozO0ZCIWlGZ39/2rTATgO
2NjgsETtU9YQhZHIuvs7GeydNNsj/zy/8aRTYADS6g5ddFZX/ksS5uIMYd4wMFv0
bBDhb6kAFNXsUoc3ZgDN/EqSBoB5dKOxBrFhAbPG6/Y8/WlnV7xQ4N8Qo1la8cM/
auRNHIzh8/fTNG05a4vKr280etMUrwNJ5eKE7aRJ0rvWAWjQkn9GExeduWm93ViJ
kZrHaDV0x+f1qZhdq4naNG2LXQpFVwAF6osI8je1ACI0qgIHURY5js8FE5IZAAZ+
nQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 653138604430342599583581
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Buypass AS-983163327'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Buypass Class 2 CA 2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-22 14:52:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-26 22:59:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'OSLO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '0661'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'ARBEIDS- OG VELFERDSETATEN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'nhn-gw-q.nav.no'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '889640782'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30007408824846035273808103301079261707746919528226214637679709609330145899608292804838552736540533394021231000593526306848820580572927986023181918649895887759328892643674485089275462703221449903211469426417060893319350596937718329310662693133700235459796096692444908696285343211467457090106422895450241057073807748360666469521267096342813337918990994728414655964991487918081447902976878674628295108084754604601928460340571395970033702249480403876172928307380393311243727470719783766319686452863225143765820749318805986962048216189021720128562016331084538903118343679447395163160492795008770178068880619303698342248093
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 92ad6589b2000fcb510dc123ec944e8fc1043f77
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2a84f893c95eeef8a7417e769ac0d6cc713681fd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.578.1.26.1.2.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.buypass.no/crl/BPClass2CA2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nhn-gw-q.nav.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nhn-gw-t.nav.no'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (94 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.buypass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.buypass.no/crt/BPClass2CA2.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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