post.sbm.no

- SPAREBANKEN MØRE -

Issued by Buypass Class 3 CA 2

About this certificate

This digital certificate with serial number 22:28:8e:e7:82:09:fc:5b:cf:88 was issued on by Buypass AS-983163327.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

SPAREBANKEN MØRE

Company registration number: 937899319
Organization: SPAREBANKEN MØRE
Postal code: 6003
Locality: ÅLESUND
Country: NO

Buypass AS-983163327

Organization: Buypass AS-983163327
Country: NO

This certificate has expire since

Certificate Details

Serial Number (hex): 22:28:8e:e7:82:09:fc:5b:cf:88
Serial Number (int): 161308627522568725450632
Serial Number lenght: 78 bits, 10 octets

SubjectKeyId: 9d:b1:79:bd:a3:8f:d0:d8:f1:44:34:78:91:42:43:25:bd:37:8a:c4
AuthorityKeyId: 22:30:2e:d2:fb:f6:4b:ca:c0:b8:3b:d2:04:c4:e9:72:e6:97:9b:0c

Fingerprint (sha1): 6c:fb:83:c5:09:43:ab:e8:ab:1f:d3:6f:82:06:03:4c:c6:92:24:cf
Fingerprint (sha256): a9:ae:23:ea:ef:19:45:ec:65:87:06:90:28:2c:ab:ce:f7:8a:99:33:02:da:b6:36:37:0c:f2:82:9e:69:e3:71

Issuing Certificate URL: http://crt.buypass.no/crt/BPClass3CA2.cer

Revocation information

OCSP Server: http://ocsp.buypass.com
CRL Distribution Point: http://crl.buypass.no/crl/BPClass3CA2.crl

Check the revocation status for certificate post.sbm.no

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for post.sbm.no

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

post.sbm.no
keys.sbm.no

Other certificates including the domain name sbm.no

(limited to 100 certificates)

Certificate

The complete raw certificate details for post.sbm.no in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzvp3I0YWwcz6jGz/ndf5
tCANIT0HwPpry8vu8HO9A4EUo0ZvEpFfQ7eRIt+HXL6LIHrz03LdTF20zWBa6CcS
2sZzGNIwLWgbOSt0No5e0pmyyA18U7bGsFVtlfOL5b/gdSjfjc7feLZBras1Nxxl
flNIbAAZjZBTNlMbPEBOPlgCB1Vukq58EUFJ0ULROQfx85m9QpiE4s3fD25aEUaT
84p+GycsFlvcuTa0qC6vJBisZ1YZh2AuI76LsuJo+HTp0Kr2PvI30IaTomjy05PN
hjcxiJ0M+iHSrbyAolcRoYPX1e3xfsbz3O6K2FmPDI5MIMqsKSoih1Rqoin02YSH
nwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 161308627522568725450632
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Buypass AS-983163327'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Buypass Class 3 CA 2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-28 12:32:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-22 21:59:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '6003'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'ÅLESUND'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SPAREBANKEN MØRE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'post.sbm.no'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '937899319'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26128599906111565252220058054319928145887180343097194728744424166443585829613064489544940223931612797364786742770670959050928150185848306158351139824407517195929904650831679764595862912878173942961206767736071370789139069103144979907321607325342406432489584420145130652023436358608899466173278673627291111914573619889460320806303170328549809648995243738886449684364605027846987087099037706612440887169948484898995202045090106751497869405384052920568345355613371729817618472341581061680950234733030104201606873891519686078772532413739195372377921714989371985590519922292489185958050791992752429251376305105918629283743
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 22302ed2fbf64bcac0b83bd204c4e972e6979b0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9db179bda38fd0d8f144347891424325bd378ac4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.578.1.26.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.buypass.no/crl/BPClass3CA2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'post.sbm.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keys.sbm.no'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (94 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.buypass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.buypass.no/crt/BPClass3CA2.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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