api.nav.no

- ARBEIDS- OG VELFERDSETATEN -

Issued by Buypass Class 2 CA 2

About this certificate

This digital certificate with serial number 73:f8:3e:aa:da:a1:dc:3d:8d:f0 was issued on by Buypass AS-983163327.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

ARBEIDS- OG VELFERDSETATEN

Company registration number: 889640782
Organization: ARBEIDS- OG VELFERDSETATEN
Postal code: 0661
Locality: OSLO
Country: NO

Buypass AS-983163327

Organization: Buypass AS-983163327
Country: NO

This certificate has expire since

Certificate Details

Serial Number (hex): 73:f8:3e:aa:da:a1:dc:3d:8d:f0
Serial Number (int): 547651453722254280330736
Serial Number lenght: 79 bits, 10 octets

SubjectKeyId: 14:8b:c1:95:4f:ee:6e:18:22:b5:5b:4c:f8:31:b5:a6:34:79:78:3d
AuthorityKeyId: 92:ad:65:89:b2:00:0f:cb:51:0d:c1:23:ec:94:4e:8f:c1:04:3f:77

Fingerprint (sha1): 4e:31:14:df:a0:4d:9c:30:fb:93:b5:63:2f:e4:02:da:17:85:12:13
Fingerprint (sha256): a6:cb:24:d7:ab:52:43:e5:5c:bc:ca:db:6a:54:a8:bb:34:2e:e8:38:37:13:6e:e8:c2:09:5b:f9:4d:16:38:ab

Issuing Certificate URL: http://crt.buypass.no/crt/BPClass2CA2.cer

Revocation information

OCSP Server: http://ocsp.buypass.com
CRL Distribution Point: http://crl.buypass.no/crl/BPClass2CA2.crl

Check the revocation status for certificate api.nav.no

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for api.nav.no

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api.nav.no
api-portal.nav.no

Other certificates including the domain name nav.no

(limited to 100 certificates)
data.nav.no
license.jetbrains.gc.nav.no
*.nav.no
pexmgr.dev.nav.no
repr-docs.intern.nav.no
nhn-gw.nav.no
peppol-ap-test.nav.no
sal.gc.nav.no
munki.gc.nav.no
*.nav.no
design.nav.no
tjenester.nav.no
wireless.nav.no
data.nav.no
tjenester.nav.no
sip.hot.nav.no
data.nav.no
*.nav.no
bekreftidentitet.nav.no
data.nav.no
nocf.gc.nav.no
sip.video.nav.no
*.dev.intern.nav.no
join.video.nav.no
smtp-pp.nav.no
wireless.nav.no
zentral.gc.nav.no
sentry.gc.nav.no
saas-to-nav-api.nav.no
www.nav.no
www.nav.no
www.nav.no
nhn-gw.nav.no
data.nav.no
data.nav.no
design.nav.no
begrepskatalog.intern.nav.no
data.nav.no
saas-to-nav-api.preprod.nav.no
pexmgr.dev.nav.no
apno01-eessi-acc.nav.no
api-portal-preprod.nav.no
design.nav.no
*.nav.no
*.nav.no
*.nav.no
www.nav.no
aaregisteretsoknad.nav.no
design.nav.no
data.nav.no
sip.nav.no
depviz.intern.nav.no
sentry-dev.gc.nav.no
data.nav.no
svar.nav.no
opptak.nav.no
www.nav.no
edge.acano-t.nav.no
*.nav.no
opptak.nav.no
design.nav.no
saas-to-nav-api.preprod.nav.no
sykmelding.nav.no
mmdm.gc.nav.no
data.nav.no
portal.video.nav.no
nhn-gw.nav.no
trello.intern.nav.no
apno01-eessi-test.nav.no
*.nav.no
*.nav.no
*.nav.no
data.nav.no
api.nav.no
m.vpn-t.nav.no
sykmelding.nav.no
api.nav.no
api-portal.nav.no
sip.hot.nav.no
data.nav.no
data.nav.no
innboks.nav.no
data.dev.intern.nav.no
sip.vk.nav.no
sentry.gc.nav.no
respons.nav.no
www.nav.no
data.nav.no
sip.video.nav.no
www.nav.no
sentry.gc.nav.no
etterlevelse.dev.intern.nav.no
fv-test.gc.nav.no
m.vpn.nav.no
mmdm.gc.nav.no
api-preprod.nav.no
api.nav.no
design.nav.no
peppol-ap-test.nav.no
data.nav.no

Certificate

The complete raw certificate details for api.nav.no in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4QS7hkCaYMMygqIt282
xM+rXvHbum48/bHPB9CdKDg+A4SCjAp4TLQblvXpL2GcQNHPuEtKgEXURlEAVR1s
36bvtMqChqW+kUN+RfnvCDs4XLy6Gv+Mm7WsQt1IB5YSm0nQCs0Ah74U9R7YIvGL
kG+oVZIWwp2cpLD7ak8bCBBZv/EfZusi8xgxCfk4OPwlXT7HMM06lzLCdEwGx8N1
kn3EczYLYvWAuGHaO5BUXo4Cwbm5IkRYPdsY7Tmh7IxSZDWuNxxr8VeT1KvAP2uZ
1qQR4TZWwnrI4KNjFMY/7kD3E2DocXqGImylwZ3An7dgeiH9KUA+V7NH950OGHxQ
pwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 547651453722254280330736
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Buypass AS-983163327'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Buypass Class 2 CA 2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-30 11:20:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-02 22:59:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '0661'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'OSLO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'ARBEIDS- OG VELFERDSETATEN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'api.nav.no'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '889640782'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25186550778169537166694046877044430080356526958413535955137446884527207015399237568341359607527056083961225458155869918691286437411521488676677727193260888470645380337961474566152718358564310044829686099591520710269752425118561643472324249289242353108398227931224629595575773509490918085496718969034355601650140939904926913600531520785061554271800539454441420377025157684060913471735498836764460521133830030828177374455652296337366276926441600650325827560084807956844666704028613366014314829285586350241152046930745283963255848170181444438390748295182373032594778397139873815151430686640047638595380462700105404534951
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 92ad6589b2000fcb510dc123ec944e8fc1043f77
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							148bc1954fee6e1822b55b4cf831b5a63479783d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.578.1.26.1.2.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.buypass.no/crl/BPClass2CA2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.nav.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-portal.nav.no'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (94 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.buypass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.buypass.no/crt/BPClass2CA2.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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