sip.sbm.no

- SPAREBANKEN MØRE -

Issued by Buypass Class 3 CA 2

About this certificate

This digital certificate with serial number 1e:48:9c:c2:7c:60:ce:fe:cf:04 was issued on by Buypass AS-983163327.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

SPAREBANKEN MØRE

Company registration number: 937899319
Organization: SPAREBANKEN MØRE
Postal code: 6003
Locality: ÅLESUND
Country: NO

Buypass AS-983163327

Organization: Buypass AS-983163327
Country: NO

This certificate has expire since

Certificate Details

Serial Number (hex): 1e:48:9c:c2:7c:60:ce:fe:cf:04
Serial Number (int): 143010455786967074262788
Serial Number lenght: 77 bits, 10 octets

SubjectKeyId: f9:fd:ce:51:f4:4e:f6:25:8a:d0:97:1d:ca:65:e5:f8:42:34:2f:98
AuthorityKeyId: 22:30:2e:d2:fb:f6:4b:ca:c0:b8:3b:d2:04:c4:e9:72:e6:97:9b:0c

Fingerprint (sha1): 4c:f5:7c:94:5a:93:1f:ec:87:95:8d:fb:fd:c3:58:80:b1:cf:4d:16
Fingerprint (sha256): ce:e5:dd:05:8a:cc:ff:87:9f:cf:19:87:2c:fd:c4:8c:42:22:d2:bb:06:ec:b1:08:56:a8:46:d0:ee:6e:d0:cf

Issuing Certificate URL: http://crt.buypass.no/crt/BPClass3CA2.cer

Revocation information

OCSP Server: http://ocsp.buypass.com
CRL Distribution Point: http://crl.buypass.no/crl/BPClass3CA2.crl

Check the revocation status for certificate sip.sbm.no

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sip.sbm.no

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sip.sbm.no
dialin.sbm.no
lyncdiscover.sbm.no
meet.sbm.no
wce.sbm.no
webext.sbm.no

Other certificates including the domain name sbm.no

(limited to 100 certificates)
mi.sbm.no
www.sbm.no
nettbank.sbm.no
www.sbm.no
sbm.sbm.no
mi.sbm.no
www.sbm.no
sip.sbm.no
www.sbm.no
post.sbm.no
www.sbm.no
sbm.sbm.no
sip.sbm.no
www.sbm.no
nettbank.sbm.no
rapporter.sbm.no
smartbank.sbm.no
gave.sbm.no
sentry.sbm.no
sbm.sbm.no
competella.sbm.no
www.sbm.no
www.sbm.no
www.sbm.no
nettbank.sbm.no
smartbank.sbm.no
www.sbm.no
sentry.sbm.no
www.sbm.no
nettbank.sbm.no
rp.sbm.no
www.sbm.no
www.sbm.no
smartbank.sbm.no
weboffice.sbm.no
rapporter.sbm.no
nettbank.sbm.no
rapporter.sbm.no
www.sbm.no
nettbank.sbm.no
nettbank.sbm.no
www.sbm.no
mi.sbm.no
sip.sbm.no
post.sbm.no
webmail.sbm.no
sts.sbm.no
forvaltning.sbm.no
post.sbm.no
kontor.sbm.no
rapporter.sbm.no
sip.sbm.no
rapporter.sbm.no
openbanking.sbm.no
www.sbm.no
nettbank.sbm.no
staging.sbm.no
epost.sbm.no
www.sbm.no
mi.sbm.no
sbm.sbm.no
forvaltning.sbm.no
www.sbm.no

Certificate

The complete raw certificate details for sip.sbm.no in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrbEMZiJ7zOzZZp2aMFB
iE4/R/OGNTKwqsxU26CKdCpPlcV1g8veN+MhZb3ioxpX04tszRxCAGPOvELgQEMG
r8KKiqmXWE2cGvOeTKDCCIpQoSw/6axgHst23ALCWgLw153GIClXQWXcOT5/70sQ
GmzM8N9ZEDU1JZdfjeQExpGZdZTOiDmpQQTbJHMqKqPUsXcU8LUL2AUc7lv/gH5s
7l692zD04HMMlxx3CbDVUPUrbxstUPH4C0qsYJO4u/7KTeBOkMjIdQ2CTPAU1xqL
h2r3g7YZb3qPmi1ImmpjcVs21NHTCrO2BDkuQn1S4mSclC8KxFrrnxlc7YDbLeTf
pQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 143010455786967074262788
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Buypass AS-983163327'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Buypass Class 3 CA 2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-13 13:07:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-13 22:59:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '6003'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'ÅLESUND'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SPAREBANKEN MØRE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'sip.sbm.no'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '937899319'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25085309845153682833558445131167744624120240764642191667806406444747558593231733080177021402737418257004431500439656297092151402514277209667225853116764109563293463549000571663087276898291691969614500775191550742723361011378639638650103122356209230594160348560923045260261979728525606289765858653809067481440337317312874039255495339413395077032109940222038261538671361490730719599286954124318007487002316091348666813268550881604386120091824285903568843815021877276867526469656359153335576081012084589243827319885669092085300858139599974275033090431064893024832009892755908575603204847870852257474062356663207549263781
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 22302ed2fbf64bcac0b83bd204c4e972e6979b0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f9fdce51f44ef6258ad0971dca65e5f842342f98
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.578.1.26.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.buypass.no/crl/BPClass3CA2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.sbm.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialin.sbm.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.sbm.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet.sbm.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wce.sbm.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webext.sbm.no'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (94 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.buypass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.buypass.no/crt/BPClass3CA2.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00a15309509a383e20dc212afaef8427b65e8edb817b5dd0d10cc7c5da26bf87596214701ac7658e919d552d21b0cb46ae760d2a84638b64531640f6396c402be316e084ac06d7c0c73b3ea722cf900c324558a445715ee59e69bcd38a602f3ee445a77128e057ac8f7050873ebc7c12d03fc585ef52e72135dcfd7490b009138b665c7e5e57dd0d7749bc93703e6f06722063f5d613f9bb0ecfb861f4ce639fa599b676301364b099d18b8b174b473100b3b407fb8ab14af28d837d1f530972e07a7f093d86aea785a135e742ac904354996ec29f4051ab0f23ca0640f459ea40d13e9b635a50a99550b37318bb124267e8d187552f4a37efe6630fd4337de135