mi.sbm.no

- SPAREBANKEN MØRE -

Issued by Buypass Class 3 CA 2

About this certificate

This digital certificate with serial number 1d:5b:e4:ea:fb:a9:14:da:39:ea was issued on by Buypass AS-983163327.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

SPAREBANKEN MØRE

Company registration number: 937899319
Organization: SPAREBANKEN MØRE
Postal code: 6003
Locality: ÅLESUND
Country: NO

Buypass AS-983163327

Organization: Buypass AS-983163327
Country: NO

This certificate has expire since

Certificate Details

Serial Number (hex): 1d:5b:e4:ea:fb:a9:14:da:39:ea
Serial Number (int): 138643776987216096147946
Serial Number lenght: 77 bits, 10 octets

SubjectKeyId: 2e:28:63:b0:7d:63:a8:e4:43:b8:11:8a:24:80:40:c5:23:39:b2:3a
AuthorityKeyId: 22:30:2e:d2:fb:f6:4b:ca:c0:b8:3b:d2:04:c4:e9:72:e6:97:9b:0c

Fingerprint (sha1): a9:40:22:00:68:a8:78:92:d4:ab:d3:b6:04:87:d2:a1:5e:15:64:3d
Fingerprint (sha256): f4:a2:23:7d:1d:a7:00:f0:c4:1b:f7:2e:99:21:b2:0e:72:8f:b6:2d:49:4a:2a:6a:42:35:2c:c6:60:ae:00:fb

Issuing Certificate URL: http://crt.buypass.no/crt/BPClass3CA2.cer

Revocation information

OCSP Server: http://ocsp.buypass.com
CRL Distribution Point: http://crl.buypass.no/crl/BPClass3CA2.crl

Check the revocation status for certificate mi.sbm.no

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mi.sbm.no

Public Key Algorithm

RSA

Key Size

3072

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mi.sbm.no

Other certificates including the domain name sbm.no

(limited to 100 certificates)

Certificate

The complete raw certificate details for mi.sbm.no in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 138643776987216096147946
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Buypass AS-983163327'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Buypass Class 3 CA 2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-12 13:24:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-12 22:59:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '6003'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'ÅLESUND'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SPAREBANKEN MØRE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'mi.sbm.no'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '937899319'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3184 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 3555094809333735577487592726634850313528324048377915089602789400072288649071026646849549511803700008343417702081387777450341154085114184579030049355235988267187346357493041530367600497330220430827521473765582166871830850660171846044188930761225090014721474914851509219631439151999353944241683536653998020740787488225742775537353068139262197435002952477718722314358966733633567890566881950719024486973426405985068553931352534758106794802043758419490293825200614238617618822745238733346513295350593402545748119445876239855534754577262314780059983773810094194659832669902869704329652200414139523640215691074362620011239978651008631367982418302908648653972032098650639212053838863331827513118149468377713033969773937646971591610837292149061109708780774989540657936409646633931846304719350711714384692809316846416053864715556313417661146149266654772856128504696355296118961541684299525280379191336386325983438993127073338298843419
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 22302ed2fbf64bcac0b83bd204c4e972e6979b0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2e2863b07d63a8e443b8118a248040c52339b23a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.578.1.26.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.buypass.no/crl/BPClass3CA2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mi.sbm.no'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (94 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.buypass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.buypass.no/crt/BPClass3CA2.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		009fc8ea844f2e618d0c97a8be3d99798fcdee48a850975c4fc4bf5d52acd4713041e1ea4c3c068e33eda721cbcc795b3da205fe9d649a49c445b32b183bb9ae9343e1b6e6770bc34c8bd7efc853b8d3fa09e124d02e7a37a55cd159d3ee9750b4cde6e8aa959d430517b98b5ea3b54e97dd0b864e95ebed412c25c85a849dbb37451d6e40265543134e321895bc344f3efa457c5985914f5bd67fa62bddfe98f3e7cedaf8b81c2e727c04ecc743de997ce820ded6370cdff9681d3c715f6159033aa6caab6b39c7fcb8959c7b32ff042e1ee5aa812609c52f7d48d0329d976f501e1722254e5934da082290032638a8eb8f85de6a825c45e73641f14d3d1f6603