peppol-ap-test.nav.no

- ARBEIDS- OG VELFERDSETATEN -

Issued by Buypass Class 2 CA 2

About this certificate

This digital certificate with serial number 3d:61:1d:40:60:47:49:d0:ac:73 was issued on by Buypass AS-983163327.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

ARBEIDS- OG VELFERDSETATEN

Company registration number: 889640782
Organization: ARBEIDS- OG VELFERDSETATEN
Postal code: 0579
Locality: OSLO
Country: NO

Buypass AS-983163327

Organization: Buypass AS-983163327
Country: NO

This certificate has expire since

Certificate Details

Serial Number (hex): 3d:61:1d:40:60:47:49:d0:ac:73
Serial Number (int): 289855797420683091291251
Serial Number lenght: 78 bits, 10 octets

SubjectKeyId: a2:e5:d7:71:5a:ad:24:f4:fd:7f:17:c4:42:14:5d:1d:cf:2b:c1:84
AuthorityKeyId: 92:ad:65:89:b2:00:0f:cb:51:0d:c1:23:ec:94:4e:8f:c1:04:3f:77

Fingerprint (sha1): 31:f0:63:6f:70:97:d8:26:b1:78:de:19:9f:40:aa:16:7c:4b:ed:ed
Fingerprint (sha256): a9:92:2e:7f:5d:f6:f2:fc:be:b8:9c:62:46:e8:6e:25:b2:e4:6d:e3:73:ec:73:fe:91:63:31:5d:c3:3a:94:75

Issuing Certificate URL: http://crt.buypass.no/crt/BPClass2CA2.cer

Revocation information

OCSP Server: http://ocsp.buypass.com
CRL Distribution Point: http://crl.buypass.no/crl/BPClass2CA2.crl

Check the revocation status for certificate peppol-ap-test.nav.no

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for peppol-ap-test.nav.no

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

peppol-ap-test.nav.no

Other certificates including the domain name nav.no

(limited to 100 certificates)
data.nav.no
license.jetbrains.gc.nav.no
*.nav.no
pexmgr.dev.nav.no
repr-docs.intern.nav.no
nhn-gw.nav.no
peppol-ap-test.nav.no
sal.gc.nav.no
munki.gc.nav.no
*.nav.no
design.nav.no
tjenester.nav.no
wireless.nav.no
data.nav.no
tjenester.nav.no
sip.hot.nav.no
data.nav.no
*.nav.no
bekreftidentitet.nav.no
data.nav.no
nocf.gc.nav.no
sip.video.nav.no
*.dev.intern.nav.no
join.video.nav.no
smtp-pp.nav.no
wireless.nav.no
zentral.gc.nav.no
sentry.gc.nav.no
saas-to-nav-api.nav.no
www.nav.no
www.nav.no
www.nav.no
nhn-gw.nav.no
data.nav.no
data.nav.no
design.nav.no
begrepskatalog.intern.nav.no
data.nav.no
saas-to-nav-api.preprod.nav.no
pexmgr.dev.nav.no
apno01-eessi-acc.nav.no
api-portal-preprod.nav.no
design.nav.no
*.nav.no
*.nav.no
*.nav.no
www.nav.no
aaregisteretsoknad.nav.no
design.nav.no
data.nav.no
sip.nav.no
depviz.intern.nav.no
sentry-dev.gc.nav.no
data.nav.no
svar.nav.no
opptak.nav.no
www.nav.no
edge.acano-t.nav.no
*.nav.no
opptak.nav.no
design.nav.no
saas-to-nav-api.preprod.nav.no
sykmelding.nav.no
mmdm.gc.nav.no
data.nav.no
portal.video.nav.no
nhn-gw.nav.no
trello.intern.nav.no
apno01-eessi-test.nav.no
*.nav.no
*.nav.no
*.nav.no
data.nav.no
api.nav.no
m.vpn-t.nav.no
sykmelding.nav.no
api.nav.no
api-portal.nav.no
sip.hot.nav.no
data.nav.no
data.nav.no
innboks.nav.no
data.dev.intern.nav.no
sip.vk.nav.no
sentry.gc.nav.no
respons.nav.no
www.nav.no
data.nav.no
sip.video.nav.no
www.nav.no
sentry.gc.nav.no
etterlevelse.dev.intern.nav.no
fv-test.gc.nav.no
m.vpn.nav.no
mmdm.gc.nav.no
api-preprod.nav.no
api.nav.no
design.nav.no
peppol-ap-test.nav.no
data.nav.no

Certificate

The complete raw certificate details for peppol-ap-test.nav.no in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6w3Q3fDyux2XHV8h6m8A
N1oiuUZJbZu331vAepr2H+37fG55/zSkykEEam8OxGZwzmehouAvVfW/UsfZTISj
iqexesjVgnDKlHYD5z1HSbwbHdaxjh+Mwpc6PPLWsQOHnkg8WIjnkIYmK8tN3Qr+
dlq6gTdYb5MAMDLNoacz6Bnkl6BxzhQQiu0j6Si34o/4hyBj6NDCYQ0rqoel/lhO
mqOfLOrbHeBEBrGhjIcr2b7HI6XRdXYletC2dl8m2ahhMrfybxG7thra2Z8C2a7U
Y1tGx0Xvg10ZSQBpgZv7YH5wMM/GnK6mDyiJq5lgk+k4lu87AtQlSY7w8NoS+nMs
uwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 289855797420683091291251
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Buypass AS-983163327'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Buypass Class 2 CA 2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-18 08:00:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-18 22:59:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '0579'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'OSLO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'ARBEIDS- OG VELFERDSETATEN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'peppol-ap-test.nav.no'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '889640782'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29672814534602611900712784625641274701783654920741662164671209898104917434000884762298184740813796351961564020846977604783816722004196214632432756559044629074765821894361076593539917536069358151692445125182342895179061270881547020475605305168729531496102677222725518622578589671593458072286058889844096938603762595929515291159653039396917872505087594156472052202002035248986694666599685011430493737075735953500628416931627653139502846150520087046947057223354869722497509524642040975259114572972240748120008040114585012823212721150802087667831922533403418783586464016675881107758292641487746781019224637592323203738811
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 92ad6589b2000fcb510dc123ec944e8fc1043f77
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a2e5d7715aad24f4fd7f17c442145d1dcf2bc184
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.578.1.26.1.2.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.buypass.no/crl/BPClass2CA2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peppol-ap-test.nav.no'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (94 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.buypass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.buypass.no/crt/BPClass2CA2.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							0169007700bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed18500000170eca8e14e0000040300483046022100c8a100f7351fdb9d163efb5590e744698b28306be9d7c3bd8027ce08a1ad53a702210087cc3620628517ddcd61cf8686ef8aa4aaab835f194f380df8d0ba62d2a4a65d007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000170eca8e1530000040300473045022100fb758c5479c7597b9f606f00ec4670528813b287c87b8ba8a41dd4e5e84cd2210220743a788b070ca7e2581bdcbfd36d85aabe6bedd0f151b20c47b37a26dd9561d40076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000170eca8e128000004030047304502204f5c0c69995ca099d0d6e615d25a69c6128d2b99d8704a5b6442606e84a2b93f022100b8543de9594bcadcbc8b8b9decce82f4d0bb6e4f95806a1ba6f99c4cfe86a652
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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