api-preprod.nav.no

- ARBEIDS- OG VELFERDSETATEN -

Issued by Buypass Class 2 CA 2

About this certificate

This digital certificate with serial number 2c:7a:14:ee:a8:ba:b8:45:74:2f was issued on by Buypass AS-983163327.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

ARBEIDS- OG VELFERDSETATEN

Company registration number: 889640782
Organization: ARBEIDS- OG VELFERDSETATEN
Postal code: 0579
Locality: OSLO
Country: NO

Buypass AS-983163327

Organization: Buypass AS-983163327
Country: NO

This certificate has expire since

Certificate Details

Serial Number (hex): 2c:7a:14:ee:a8:ba:b8:45:74:2f
Serial Number (int): 210036136351702079337519
Serial Number lenght: 78 bits, 10 octets

SubjectKeyId: 55:e3:72:9f:f5:28:e6:98:e6:b0:96:a2:e5:aa:c8:7e:16:b2:06:b2
AuthorityKeyId: 92:ad:65:89:b2:00:0f:cb:51:0d:c1:23:ec:94:4e:8f:c1:04:3f:77

Fingerprint (sha1): ed:9a:4a:f3:84:0c:63:54:5e:4e:aa:40:4d:de:03:c1:8d:7e:ef:10
Fingerprint (sha256): e3:47:bb:70:90:b3:13:86:80:2f:82:fb:3b:61:be:0a:88:63:95:98:64:6b:71:43:3b:80:20:0d:b5:37:2e:0f

Issuing Certificate URL: http://crt.buypass.no/crt/BPClass2CA2.cer

Revocation information

OCSP Server: http://ocsp.buypass.com
CRL Distribution Point: http://crl.buypass.no/crl/BPClass2CA2.crl

Check the revocation status for certificate api-preprod.nav.no

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for api-preprod.nav.no

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api-preprod.nav.no

Other certificates including the domain name nav.no

(limited to 100 certificates)
data.nav.no
license.jetbrains.gc.nav.no
*.nav.no
pexmgr.dev.nav.no
repr-docs.intern.nav.no
nhn-gw.nav.no
peppol-ap-test.nav.no
sal.gc.nav.no
munki.gc.nav.no
*.nav.no
design.nav.no
tjenester.nav.no
wireless.nav.no
data.nav.no
tjenester.nav.no
sip.hot.nav.no
data.nav.no
*.nav.no
bekreftidentitet.nav.no
data.nav.no
nocf.gc.nav.no
sip.video.nav.no
*.dev.intern.nav.no
join.video.nav.no
smtp-pp.nav.no
zentral.gc.nav.no
sentry.gc.nav.no
www.nav.no
www.nav.no
www.nav.no
nhn-gw.nav.no
data.nav.no
data.nav.no
design.nav.no
begrepskatalog.intern.nav.no
data.nav.no
api-portal-preprod.nav.no
design.nav.no
*.nav.no
*.nav.no
*.nav.no
www.nav.no
aaregisteretsoknad.nav.no
design.nav.no
data.nav.no
sip.nav.no
depviz.intern.nav.no
sentry-dev.gc.nav.no
data.nav.no
svar.nav.no
opptak.nav.no
www.nav.no
edge.acano-t.nav.no
*.nav.no
opptak.nav.no
design.nav.no
saas-to-nav-api.preprod.nav.no
sykmelding.nav.no
mmdm.gc.nav.no
data.nav.no
portal.video.nav.no
nhn-gw.nav.no
trello.intern.nav.no
*.nav.no
*.nav.no
*.nav.no
data.nav.no
api.nav.no
m.vpn-t.nav.no
sykmelding.nav.no
api.nav.no
api-portal.nav.no
sip.hot.nav.no
data.nav.no
data.nav.no
innboks.nav.no
data.dev.intern.nav.no
sip.vk.nav.no
sentry.gc.nav.no
respons.nav.no
www.nav.no
data.nav.no
sip.video.nav.no
www.nav.no
sentry.gc.nav.no
etterlevelse.dev.intern.nav.no
fv-test.gc.nav.no
m.vpn.nav.no
mmdm.gc.nav.no
api-preprod.nav.no
api.nav.no
design.nav.no
peppol-ap-test.nav.no
data.nav.no
sykmelding.nav.no
*.intern.nav.no
tjenester.nav.no
saas-to-nav-api.nav.no
sykmelding.nav.no
mail.nav.no

Certificate

The complete raw certificate details for api-preprod.nav.no in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8AytDQ5Q+MyRnbeZ5om8
DrP2lKKDLBGLqige5m3xRI7UFkVUEWXtv+8BszESQZFCfskmjMllsgob28g0Flxc
wmqogOubpd3XQJCisPDtwnWRId8cqrnLzzDwSZyYnCalgJnl4t9ixOX/S6rGwLvo
WCrKSXvcMhkg4972NjSuFRMMnixwSU9WGY35MDkOY5vFiN+yfqQQgbv3giWU2Ec4
qCNB8RRaq9m5BWFKkGTL9U2yrEXW7em0hUDIkZnS8Bp2vjE7X+7LJq0eU4AP9PZU
QDaQr8z8+kOsWHymHsFt0AYXpjrjL6wY6bsjVA7Y9miIhi6HFNDihL8vNu0S7zia
pwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 210036136351702079337519
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Buypass AS-983163327'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Buypass Class 2 CA 2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-22 11:10:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-12-22 22:59:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '0579'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'OSLO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'ARBEIDS- OG VELFERDSETATEN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'api-preprod.nav.no'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '889640782'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30303443950791606873585934025412087915414490214955219305904702906323710209888359078208149748688527588704875294048832917232398924281718286583185508984851102020105498143269608917373270343655738249803963512371260952223557192479951615719354699006298458828275825973795213180598252489035444622516269899196832677470470899904836213069820707723029836709856736472912239765254757154189243575521120832647651348365899036823036657139304752072081763182914312984036052797726490131236825228074647450360799732294293698879711730882472025798770617221857659733391792446828850468478861883059511024022739685510631795764785995204232096553639
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 92ad6589b2000fcb510dc123ec944e8fc1043f77
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							55e3729ff528e698e6b096a2e5aac87e16b206b2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.578.1.26.1.2.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.buypass.no/crl/BPClass2CA2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-preprod.nav.no'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (94 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.buypass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.buypass.no/crt/BPClass2CA2.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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