NORGE (NORWAY) : Trusted List

Transcription

1 RGE (RWAY) : Trusted List Tsl Id: TrustServiceStatusList-1 Valid until nextupdate value: T22:00:00Z TSL signed on: T12:35:38.683Z PDF generated on: Fri May 29 14:52:50 CEST 2015 RGE (RWAY) - Trusted List ID: TrustServiceStatusList-1 Page 1

2 TSL Scheme Information TSL Id TSLTag TrustServiceStatusList-1 TSL Version Identifier 4 TSL Sequence Number 22 TSL Type Scheme Operator Name NASJONAL KOMMUNIKASJONSMYNDIGHET NASJONAL KOMMUNIKASJONSMYNDIGHET PostalAddress Street Address [ no ] Nygård 1 Locality [ no ] Lillesand Postal Code [ no ] 4791 Country PostalAddress Street Address [ en ] Nygård 1 Locality [ en ] Lillesand Postal Code [ en ] 4791 Country ElectronicAddress URI mailto:[email protected] URI Scheme Name :Supervision/Accreditation Status List of certification services from Certification Service Providers, which are supervised/accredited by the referenced Scheme Operator s Member State for compliance with the relevant provisions laid down in Directive 1999/93/EC of the European Parliament and of the Council of 13 December 1999 on a Community framework for electronic signatures. RGE (RWAY) - Trusted List ID: TrustServiceStatusList-1 Page 2

3 :Tilsyn/akkreditering status liste over tjenester fra sertifikatutstedere, som er under tilsyn/godkjent av EØS-medlemsstat til ansvarlig organ i samsvar med de relevante bestemmelser fastsatt i Europaparlaments- og rådsdirektiv 1999/93/EF av 13. desember 1999 om en fellesskapsramme for elektroniske signaturer. Scheme Information URI URI [ en ] URI [ no ] Status Determination Approach Scheme Type Community Rules URI [ en ] URI [ en ] Scheme Territory Policy Or Legal Notice TSL Legal Notice [ en ] The applicable legal framework for the present TSL implementation of the Trusted List of supervised/accredited Certification Service Providers for Norway is Directive 1999/93/EC of the European Parliament and of the Council of 13 December 1999 on a Community framework for electronic signatures and its implementation in Norway laws. TSL Legal Notice [ no ] Gjeldende regelverk for den nåværende TSL implementering av trusted liste over sertifikatutstedere under tilsyn/godkjenning for Norge er Europaparlaments- og rådsdirektiv 1999/93/EF av 13. desember 1999 om en fellesskapsramme for elektroniske signaturer og dets implementering i norsk regelverk. Historical Information Period Pointer to other TSL - EUROPEAN UNION 1.EU TSL - MimeType: application/vnd.etsi.tsl+xml TSL Location EU TSL digital identities TSL Scheme Operator certificate fields details Version: 3 Serial Number: 114 RGE (RWAY) - Trusted List ID: TrustServiceStatusList-1 Page 3

4 X509 Certificate -----BEGIN CERTIFICATE----- MIIHPDCCBSSgAwIBAgIBcjANBgkqhkiG9w0BAQsFADAxMQswCQYDVQQGEwJFUzERMA8GA1UECgwI Rk5NVC1SQ00xDzANBgNVBAMMBklTQSBDQTAeFw0xMTExMTYxNTExMDdaFw0xNTExMTYxNTExMDda ME0xCzAJBgNVBAYTAkJFMRwwGgYDVQQKDBNFVVJPUEVBTiBDT01NSVNTSU9OMSAwHgYDVQQDDBco U0lHTikgQU5ORUxJIEFORFJFU1NPTjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMw8 81fbxBn5Eq64Hf6pqEqn0Intg49k5D+E2JBMcyeOMYE4WwuzVqs7fuKMX5mhiFw7llVx42S7GIDn Ka6ascF7irISsYTGOtD6dGt8OEOQkG5i24wxT3we63VW1W/PEO0WoRjkPDBqgljnqcLn+WJLr3Yl 9fpkxyT+H3pl0jnGkGi7UUKEDuoCglFy9Tb1TE+eVNiGWmfskRy6q9Pioujp2FqrwNm95VAkLFGo NF4iZQda79bgjvAYnA5p4QXgr/5sWZjgsa3Ea9PlRwEvO7C8ndnRE/PTUNwaSmOZsmPH/ksCCnfT DqqehHVnry3K6QIUKhRsoT1m60qv4UKrvrsCAwEAAaOCA0EwggM9MF0GA1UdEQRWMFSBHUFOTkVM SS5BTkRSRVNTT05ARUMuRVVST1BBLkVVpDMwMTEYMBYGCSsGAQQBrGYBAgwJQU5EUkVTU09OMRUw EwYJKwYBBAGsZgEBDAZBTk5FTEkwCQYDVR0TBAIwADAOBgNVHQ8BAf8EBAMCBkAwHQYDVR0OBBYE FEoUEf+0Oe59fVRs/rW2M0KhmlDsMB8GA1UdIwQYMBaAFEft+GPwma9e/n4OXFjL/uI1N6a9MIHg BgNVHSAEgdgwgdUwgcgGCisGAQQBrGYDBAEwgbkwKQYIKwYBBQUHAgEWHWh0dHA6Ly93d3cuY2Vy dc5mbm10lmvzl2rwy3mvmiglbggrbgefbqccajb/dh1rdwfsawzpzwqgy2vydglmawnhdguuifvu ZGVyIHRoZSB1c2FnZSBjb25kaXRpb25zIGFzc2VydGVkIGluIHRoZSBGTk1ULVJDTSBDUFMgKDEw NiwgSm9yZ2UgSnVhbiBzdHJlZXQsMjgwMDksIE1hZHJpZCwgU3BhaW4pLjAIBgYEAIswAQEwgYYG CCsGAQUFBwEBBHoweDBBBggrBgEFBQcwAYY1aHR0cDovL29jc3BJU0FjYS5jZXJ0LmZubXQuZXMv b2nzceltqwnhl09jc3bszxnwb25kzxiwmwyikwybbquhmakgj2h0dha6ly93d3cuy2vydc5mbm10 LmVzL2NlcnRzL0lTQUNBLmNydDBGBggrBgEFBQcBAwQ6MDgwCAYGBACORgEBMAsGBgQAjkYBAwIB DzAVBgYEAI5GAQIwCxMDRVVSAgECAgECMAgGBgQAjkYBBDCBzAYDVR0fBIHEMIHBMIG+oIG7oIG4 hogibgrhcdovl2xkyxbju0fjys5jzxj0lmzubxquzxmvq049q1jmmixjbj1ju0elmjbdqsxvpuzo TVQtUkNNLEM9RVM/Y2VydGlmaWNhdGVSZXZvY2F0aW9uTGlzdDtiaW5hcnk/YmFzZT9vYmplY3Rj bgfzcz1jukxeaxn0cmlidxrpb25qb2ludiyrahr0cdovl3d3dy5jzxj0lmzubxquzxmvy3jsc19j U0FjYS9DUkwyLmNybDANBgkqhkiG9w0BAQsFAAOCAgEALIKumRPBo9NIYyzm4LSJklE9CmsirJC8 9MPcFiC9+vg4YrO9Mmakr8G5ZAVZf+Zr6HgLcIf93/BSgE4UDFD9mAROPDElqx2ppg1+foIvlqg5 7EiHH2kOS4IYJEJpWCs4IqcBkSKcS5vJ5XVpNJL4elpeMQjsGoqjmkKDr1IeZQVOxOiW/bNhM9Fw 6R1aMMLbnziwAgHWDpmIj2Se74HuS3ca0ctm9fAPp/2Y87bgZ1ETs9A6wc4GxYEuGTwh1HPbDB6t gjsnjh0hy3qbitjb8im0xgvur9dqkt8ez4dvyxcaflycmflaemf8jljov4uu1yrrt9wesij5gcoe 43cy1cuvRMifqYhoi3KPojJaLTV7ASy1X0yuBWyg0jGyvE6aTIAu3XGCwdGYB1WnSzEUPJboqcyJ ydkxxxnbkfchw602pvb0ituqitgh+kfix2mqqf+v0rdewqu3wdadnhc+cqoc7sxkjxko657dyzt/ Ey5MR+gXRm6oK52iXIqjM8kbDqCqAOHVC73u+bUvh0y5B5PjGYuE2K9xK36ooavh5ytF/kY+y0Ju 804CRF00b4wKcibGxplOrU1g+ncONNmBHGbsLULXrum8+fsD3O04Mf0t0O9Mt/ZwAZTa8Cwq/0pq OWdRqucV7pq/A7fEnRb5AdBaAzxqrXVaa92NkScAm80= -----END CERTIFICATE----- Signature algorithm: SHA256withRSA Issuer CN: ISA CA Issuer O: FNMT-RCM Issuer C: ES (SIGN) ANNELI ANDRESSON EUROPEAN COMMISSION BE Valid from: Wed Nov 16 16:11:07 CET 2011 Valid to: Mon Nov 16 16:11:07 CET 2015 Public Key: Subject Alternative Name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asic Constraints IsCA: false Subject Key Identifier 4A:14:11:FF:B4:39:EE:7D:7D:54:6C:FE:B5:B6:33:42:A1:9A:50:EC Authority Key Identifier 47:ED:F8:63:F0:99:AF:5E:FE:7E:0E:5C:58:CB:FE:E2:35:37:A6:BD Certificate Policies Policy OID: CPS pointer: CPS text: [Qualified certificate. Under the usage conditions asserted in the FNMT-RCM CPS (106, Jorge Juan street,28009, Madrid, Spain).] Policy OID: Authority Info Access RGE (RWAY) - Trusted List ID: TrustServiceStatusList-1 Page 4

5 QCStatements - crit. = false id_etsi_qcs_qccompliance id_etsi_qcs_retentionperiod: 15 id_etsi_qcs_limitevalue Value: 200 Currency: EUR id_etsi_qcs_qcsscd CRL Distribution Points ldap://ldapisaca.cert.fnmt.es/cn=crl2,cn=isa%20ca,o=fnmt- RCM,C=ES?certificateRevocationList;binary?base?objectclass=cRLDistributionPoint Key Usage: nonrepudiation Thumbprint algorithm: SHA-256 Thumbprint: 5D:39:E8:F1:16:69:50:E9:97:38:32:AD:26:6F:06:74:2C:C4:A9:48:48:69:DF:61:EF:CB:84:9D:B2:F C:60:4A (SIGN) ANNELI ANDRESSON EUROPEAN COMMISSION BE EU TSL digital identities TSL Scheme Operator certificate fields details Version: 3 Serial Number: X509 Certificate -----BEGIN CERTIFICATE----- MIIHSDCCBTCgAwIBAgIQHaaUHzn5vENUk+T/aHIefTANBgkqhkiG9w0BAQsFADAxMQswCQYDVQQG EwJFUzERMA8GA1UECgwIRk5NVC1SQ00xDzANBgNVBAMMBklTQSBDQTAeFw0xNDEyMTkwODQyMzla Fw0xODEyMTkwODQyMzlaMEwxCzAJBgNVBAYTAkJFMRwwGgYDVQQKDBNFVVJPUEVBTiBDT01NSVNT SU9OMR8wHQYDVQQDDBYoU0lHTikgQUdOSUVTWktBIEJBSk5PMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAog6nQQcoPlHOrwXYDD+wj38lwn1zbalTTJL7yW3N7OgO9/eSCIY5nGgfnsla pc36vso9rbsxw3cv4cjcf2ngzdszhxnjpf4ig4cesbyui30ugfantbplfj/r5avf0ordgkti2h/6 sn2swgs43grcrfq5yt/zphoigjxjzk4s36ifmbg1ggrqusdjo+uv3cbubcnjdfro3zmm9typdv19 4f1NwXRbFOon1WtaIsJNKzw4+MKCAyD9BBVATQxGLYeCT2tZt3DFbSSXZbBfSnfwGe7eMc99S12H r/mwapjhuwzzpienadvnlmnwxwutxcdo5hrmodtxv8vh9mklawvn4qidaqabo4idpzccazswwwyd VR0RBFQwUoEcQUdOSUVTWktBLkJBSk5PQEVDLkVVUk9QQS5FVaQyMDAxFDASBgkrBgEEAaxmAQIM BUJBSk5PMRgwFgYJKwYBBAGsZgEBDAlBR05JRVNaS0EwCQYDVR0TBAIwADAOBgNVHQ8BAf8EBAMC BkAwHQYDVR0OBBYEFIe8EqP5sxbiNrSKwgNC00FsSfkjMB8GA1UdIwQYMBaAFEft+GPwma9e/n4O XFjL/uI1N6a9MIHgBgNVHSAEgdgwgdUwgcgGCisGAQQBrGYDBAEwgbkwKQYIKwYBBQUHAgEWHWh0 dha6ly93d3cuy2vydc5mbm10lmvzl2rwy3mvmiglbggrbgefbqccajb/dh1rdwfsawzpzwqgy2vy dglmawnhdguuifvuzgvyihrozsb1c2fnzsbjb25kaxrpb25zigfzc2vydgvkigluihrozsbgtk1u LVJDTSBDUFMgKDEwNiwgSm9yZ2UgSnVhbiBzdHJlZXQsMjgwMDksIE1hZHJpZCwgU3BhaW4pLjAI BgYEAIswAQEwgYYGCCsGAQUFBwEBBHoweDBBBggrBgEFBQcwAYY1aHR0cDovL29jc3BJU0FjYS5j ZXJ0LmZubXQuZXMvb2NzcElTQWNhL09jc3BSZXNwb25kZXIwMwYIKwYBBQUHMAKGJ2h0dHA6Ly93 d3cuy2vydc5mbm10lmvzl2nlcnrzl0ltqunblmnyddbgbggrbgefbqcbawq6mdgwcaygbacorgeb MAsGBgQAjkYBAwIBDzAVBgYEAI5GAQIwCxMDRVVSAgECAgECMAgGBgQAjkYBBDCBzAYDVR0fBIHE MIHBMIG+oIG7oIG4hoGIbGRhcDovL2xkYXBJU0FjYS5jZXJ0LmZubXQuZXMvQ049Q1JMMSxjbj1J U0ElMjBDQSxvPUZOTVQtUkNNLEM9RVM/Y2VydGlmaWNhdGVSZXZvY2F0aW9uTGlzdDtiaW5hcnk/ YmFzZT9vYmplY3RjbGFzcz1jUkxEaXN0cmlidXRpb25Qb2ludIYraHR0cDovL3d3dy5jZXJ0LmZu bxquzxmvy3jsc19ju0fjys9dukwxlmnybdanbgkqhkig9w0baqsfaaocagead2cyyrljkbr+hxmw njwzne9q6nw29ulwx4c/kwfwgnxyjo/mbe2khgxfum7e441ih87px1p8jpteohtfvl8cxmsqydg5 6GBNq5NprbagpmKHiNCP77baZiLMFfEvc915ktLlYQEH+wIe5i0gMPmRWjA2urB/M+fXwLgqQdOE e4e0nslr7yjqhel1swqss4r1zk8zgv1uj0v+vamyxwftayyht/c9x+qtvxyafldcbvnpbxj3xug7 vqhe7g5/rpx4vvzaznv9d5ibk+scx05drfrqsym4qw1sw4j0w2nxafqwk3bfw6np5sgohfc9sh2l rc3f/wlvepy8pitxfukrzlseb8zwm2vfz3qrnggbxcz3dy3kfavdel/gnnhog5q4tn2tvv7yfxle gu7zn+iqbodlatbjxeu60fif9cs35igqwwlbeok8qvogfydxlgiprs3ijea1whyy+gh1mofsa7u3 0wEvooCzohFf4DBv06I4q9aCNBnTo4yki1yFhBm71r60hlAas6aK6TZ+NUoFWwPypMP617SlHdy8 QlFx1s3V+rIt2hxUUGddid/FXDKtuUCRqKqx6x8J8bI7DecZsCS7ijPCApjJ84HB8UASRzdGtEwc 97hvnAqXjpCS/tHAVcVvmP3isNDu4WtV2LQfL/TIY8zMxUebv/E5JyB3KAw= -----END CERTIFICATE----- Signature algorithm: SHA256withRSA Issuer CN: ISA CA Issuer O: FNMT-RCM RGE (RWAY) - Trusted List ID: TrustServiceStatusList-1 Page 5

6 Issuer C: ES (SIGN) AGNIESZKA BAJ EUROPEAN COMMISSION BE Valid from: Fri Dec 19 09:42:39 CET 2014 Valid to: Wed Dec 19 09:42:39 CET 2018 Public Key: Subject Alternative Name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asic Constraints IsCA: false Subject Key Identifier 87:BC:12:A3:F9:B3:16:E2:36:B4:8A:C2:03:42:D3:41:6C:49:F9:23 Authority Key Identifier 47:ED:F8:63:F0:99:AF:5E:FE:7E:0E:5C:58:CB:FE:E2:35:37:A6:BD Certificate Policies Policy OID: CPS pointer: CPS text: [Qualified certificate. Under the usage conditions asserted in the FNMT-RCM CPS (106, Jorge Juan street,28009, Madrid, Spain).] Policy OID: Authority Info Access QCStatements - crit. = false id_etsi_qcs_qccompliance id_etsi_qcs_retentionperiod: 15 id_etsi_qcs_limitevalue Value: 200 Currency: EUR id_etsi_qcs_qcsscd CRL Distribution Points ldap://ldapisaca.cert.fnmt.es/cn=crl1,cn=isa%20ca,o=fnmt- RCM,C=ES?certificateRevocationList;binary?base?objectclass=cRLDistributionPoint Key Usage: nonrepudiation Thumbprint algorithm: SHA-256 Thumbprint: 55:F5:07:DE:3A:84:C6:3F:29:F0:46:93:F7:30:AD:D1:73:CA:DF:A0:9B:76:AB:07:F5:F9:74:84:12: FD:9A:AA RGE (RWAY) - Trusted List ID: TrustServiceStatusList-1 Page 6

7 (SIGN) AGNIESZKA BAJ EUROPEAN COMMISSION BE EU TSL digital identities TSL Scheme Operator certificate fields details Version: 3 Serial Number: X509 Certificate -----BEGIN CERTIFICATE----- MIIHYDCCBUigAwIBAgIQLc4fd1CtIihUFtlELwMLDDANBgkqhkiG9w0BAQsFADAxMQswCQYDVQQG EwJFUzERMA8GA1UECgwIRk5NVC1SQ00xDzANBgNVBAMMBklTQSBDQTAeFw0xNDA5MTUxMjE5MTVa Fw0xODA5MTUxMjE5MTVaMFQxCzAJBgNVBAYTAkJFMRwwGgYDVQQKDBNFVVJPUEVBTiBDT01NSVNT SU9OMScwJQYDVQQDDB4oU0lHTikgSk9MQU5EQSBWQU4gRUlKTkRUSE9WRU4wggEiMA0GCSqGSIb3 DQEBAQUAA4IBDwAwggEKAoIBAQC0sin8VvNtcuOnUuGDWtXjZlTx5SoZzJiDG4/6bOt3geyPIvqH zci8hslijb1yqjnimglti6blhelr/skf8regueyn/ijgio2/89b82rsfm1r+ehsjklmvuu+kj7uu nhrcdlahgnohmpwide3dixy4jw0rbdjtyewv7cndedoc4le9iuj71zlsphmedtlfldwif0ay/r5b x1vaiapmzxjdicarsqlhnmnpk3yshw+poahzn8tj9vowjhtdsw/ftbnbqaszuk0l2iwd0pxrszso +yw86dx0kan1qsmwxdwz0pax+n39ml2ggug8stirpvlmzdggn6g52msz2grniaulagmbaagjggnp MIIDSzBrBgNVHREEZDBigSRKT0xBTkRBLlZBTi1FSUpORFRIT1ZFTkBFQy5FVVJPUEEuRVWkOjA4 MR4wHAYJKwYBBAGsZgECDA9WQU4gRUlKTkRUSE9WRU4xFjAUBgkrBgEEAaxmAQEMB0pPTEFOREEw CQYDVR0TBAIwADAOBgNVHQ8BAf8EBAMCBkAwHQYDVR0OBBYEFIz+jZkpky2xCorjhNpu1m1pDZ76 MB8GA1UdIwQYMBaAFEft+GPwma9e/n4OXFjL/uI1N6a9MIHgBgNVHSAEgdgwgdUwgcgGCisGAQQB rgydbaewgbkwkqyikwybbquhagewhwh0dha6ly93d3cuy2vydc5mbm10lmvzl2rwy3mvmiglbggr BgEFBQcCAjB/DH1RdWFsaWZpZWQgY2VydGlmaWNhdGUuIFVuZGVyIHRoZSB1c2FnZSBjb25kaXRp b25zigfzc2vydgvkigluihrozsbgtk1ulvjdtsbdufmgkdewniwgsm9yz2ugsnvhbibzdhjlzxqs MjgwMDksIE1hZHJpZCwgU3BhaW4pLjAIBgYEAIswAQEwgYYGCCsGAQUFBwEBBHoweDBBBggrBgEF BQcwAYY1aHR0cDovL29jc3BJU0FjYS5jZXJ0LmZubXQuZXMvb2NzcElTQWNhL09jc3BSZXNwb25k ZXIwMwYIKwYBBQUHMAKGJ2h0dHA6Ly93d3cuY2VydC5mbm10LmVzL2NlcnRzL0lTQUNBLmNydDBG BggrBgEFBQcBAwQ6MDgwCAYGBACORgEBMAsGBgQAjkYBAwIBDzAVBgYEAI5GAQIwCxMDRVVSAgEC AgECMAgGBgQAjkYBBDCBzAYDVR0fBIHEMIHBMIG+oIG7oIG4hoGIbGRhcDovL2xkYXBJU0FjYS5j ZXJ0LmZubXQuZXMvQ049Q1JMNixjbj1JU0ElMjBDQSxvPUZOTVQtUkNNLEM9RVM/Y2VydGlmaWNh dgvszxzvy2f0aw9utglzddtiaw5hcnk/ymfzzt9vymply3rjbgfzcz1jukxeaxn0cmlidxrpb25q b2ludiyrahr0cdovl3d3dy5jzxj0lmzubxquzxmvy3jsc19ju0fjys9dukw2lmnybdanbgkqhkig 9w0BAQsFAAOCAgEAYnVYxWe3b57eq6qGlVE9f7tiEPUGqmKm2cXlRLY50Hat4O/dVDv9teyNd/fv cak4uhdhraf+ehoodsm9rtkrkc4vzwiua8xbgjl8nljd1odvgdik0kui7qvqq/x4c9ptyk0ucbw5 MNWyr97UO68rOBNiF+tS2mrOMJqjQS6vX7tf/HOvyPg9dLY/+KiiuijnAFS9+DPJNWQh8UkvSEqg Bkydy0pDFLLOREFHiBY7cOflfjoQm+tKxsPt8Mw/z/p5OLeg8cMyVprtVZ2LohgkJP/Do0SB1lge nlvway7f/7swsgn4y6yd99hb74mkdgreqpbvin5syrgpfzfkyyelz9/q7fhddr3tvxlsdcjlia5+ 5D8iprdw70vstU9p3mMPXCZNvBFSmVeGNDVm2jszt7oD254nj5dm/8tXdXqeq4MEi1wHRposKRc6 pptapfrtcizrlq8brkteka6subeshjyiia0942/zefro/h+cemtqz1zuchos3mwm6qjh0cesz0tm UpHzrNltR5WPo0IKiqqaDxdxN/9OuTId+P5zLRdwsVSduvUm+5krW8Pxn2pkyTg16NN2wLQ7p/Xn sepwbvv2leujt8n0obhvyzvbzsuchbcplqaqxmbig5dpzfxxbygxsumhuf3seoauomhxpm9n2uyf J5fwcoXHZPNI1Uw= -----END CERTIFICATE----- Signature algorithm: SHA256withRSA Issuer CN: ISA CA Issuer O: FNMT-RCM Issuer C: ES (SIGN) JOLANDA VAN EIJNDTHOVEN EUROPEAN COMMISSION BE Valid from: Mon Sep 15 14:19:15 CEST 2014 Valid to: Sat Sep 15 14:19:15 CEST 2018 Public Key: Subject Alternative Name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email protected] RGE (RWAY) - Trusted List ID: TrustServiceStatusList-1 Page 7

8 Basic Constraints IsCA: false Subject Key Identifier 8C:FE:8D:99:29:93:2D:B1:0A:8A:E3:84:DA:6E:D6:6D:69:0D:9E:FA Authority Key Identifier 47:ED:F8:63:F0:99:AF:5E:FE:7E:0E:5C:58:CB:FE:E2:35:37:A6:BD Certificate Policies Policy OID: CPS pointer: CPS text: [Qualified certificate. Under the usage conditions asserted in the FNMT-RCM CPS (106, Jorge Juan street,28009, Madrid, Spain).] Policy OID: Authority Info Access QCStatements - crit. = false id_etsi_qcs_qccompliance id_etsi_qcs_retentionperiod: 15 id_etsi_qcs_limitevalue Value: 200 Currency: EUR id_etsi_qcs_qcsscd CRL Distribution Points ldap://ldapisaca.cert.fnmt.es/cn=crl6,cn=isa%20ca,o=fnmt- RCM,C=ES?certificateRevocationList;binary?base?objectclass=cRLDistributionPoint Key Usage: nonrepudiation Thumbprint algorithm: SHA-256 Thumbprint: F0:E7:C9:5C:09:A5:F6:79:91:A0:35:3E:BB:DC:E8:20:13:39:49:EB:1F:F5:7E:6D:2D:F9:62:E8:02: A2:E4:0C (SIGN) JOLANDA VAN EIJNDTHOVEN EUROPEAN COMMISSION BE TSL Type Scheme Operator Name European Commission Scheme Type Community Rules RGE (RWAY) - Trusted List ID: TrustServiceStatusList-1 Page 8

9 URI [ en ] Scheme Territory EU Mime Type application/vnd.etsi.tsl+xml 2.EU TSL - MimeType: application/pdf TSL Location EU TSL digital identities TSL Scheme Operator certificate fields details Version: 3 Serial Number: X509 Certificate -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgISESFCgSJf+NfOVIYHRWWewAm0MA0GCSqGSIb3DQEBCwUAMGYxCzAJBgNV BAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMTwwOgYDVQQDEzNHbG9iYWxTaWduIE9y Z2FuaXphdGlvbiBWYWxpZGF0aW9uIENBIC0gU0hBMjU2IC0gRzIwHhcNMTUwMzAzMDg1MTAyWhcN MTgwNDIwMTAwNTA1WjBnMQswCQYDVQQGEwJCRTEQMA4GA1UECBMHQmVsZ2l1bTERMA8GA1UEBxMI QnJ1c3NlbHMxHDAaBgNVBAoTE0V1cm9wZWFuIENvbW1pc3Npb24xFTATBgNVBAMTDGVjLmV1cm9w YS5ldTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMFBF1FjO2VA4nIvT3MtXToyfWMN FYRvJc2SIJF3pcZNZcUK9wwNL3j/lOB5+eABCTDShJf8fQgmyEcAU7gXhFw9DFgfnXsmmA1a79zz bs5kwzkmawee4lfsycbjocuuavd79oar4v3yv7gzmvab8nxuqwvecwzqwt6sl+rx0ogh1bbeko9w Q5lbEgRw1MLlyFH2kUieMhjCwO2nQJ9UMTaLu7px4LpZ7tlaVetY7UpMPiGAD34kct1YIoJWJllY bbz7jmalmradlvvu5y6ice4h4j0kdj/l3zliveciorqrx8ngiis1lfnsckvz2sbzjvjvxbqxyaey tzqvwxexdpmcaweaaaocadawgghmma4ga1uddweb/wqeawifodbjbgnvhsaeqjbamd4gbmebdaec AjA0MDIGCCsGAQUFBwIBFiZodHRwczovL3d3dy5nbG9iYWxzaWduLmNvbS9yZXBvc2l0b3J5LzAX BgNVHREEEDAOggxlYy5ldXJvcGEuZXUwCQYDVR0TBAIwADAdBgNVHSUEFjAUBggrBgEFBQcDAQYI KwYBBQUHAwIwSQYDVR0fBEIwQDA+oDygOoY4aHR0cDovL2NybC5nbG9iYWxzaWduLmNvbS9ncy9n c29yz2fuaxphdglvbnzhbhnoytjnmi5jcmwwgaagccsgaqufbwebbigtmigqme0gccsgaqufbzac hkfodhrwoi8vc2vjdxjllmdsb2jhbhnpz24uy29tl2nhy2vydc9nc29yz2fuaxphdglvbnzhbhno YTJnMnIxLmNydDA/BggrBgEFBQcwAYYzaHR0cDovL29jc3AyLmdsb2JhbHNpZ24uY29tL2dzb3Jn YW5pemF0aW9udmFsc2hhMmcyMB0GA1UdDgQWBBQ9lw0pOEotT5cKTF8vxu3W6ZCUhzAfBgNVHSME GDAWgBSW3mHxvRwWKVMcwMx9O4MAQOYafDANBgkqhkiG9w0BAQsFAAOCAQEArSonov8KbE8+5Vwe wgbhhilhanliirmlvj1siarxvxl6abmmo8cjw2+vtzaqdndkzuy6cnats0y0qkbecs7fvtvp8qqa iv71+jij6idt9r9ij1sundeqwz6mng98ecmvsduzlyieezxh049ta3hranscvrtu7kpt06cgbcjn ondg7yvxx2bs9civbexrqkmppvhwup23hw/iphhmifprmxpq3fa5fkrqnwjw1brblgloqc1mkj7j uvx108khlwa5cgiohctnoh9dfyuqpwqecbrobwdghl4o0ra+bu/z4j85ypob/+f7roqxrfcpv43z Pdg65pNoPppjFDE4TD2bhg== -----END CERTIFICATE----- Signature algorithm: SHA256withRSA Issuer CN: GlobalSign Organization Validation CA - SHA256 - G2 Issuer O: GlobalSign nv-sa Issuer C: BE ec.europa.eu European Commission Subject L: Brussels Subject ST: Belgium BE Valid from: Tue Mar 03 09:51:02 CET 2015 Valid to: Fri Apr 20 12:05:05 CEST 2018 RGE (RWAY) - Trusted List ID: TrustServiceStatusList-1 Page 9

10 Public Key: Certificate Policies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olicy OID: CPS pointer: Subject Alternative Name ec.europa.eu Basic Constraints IsCA: false Extended Key Usage id_kp_serverauth CRL Distribution Points Authority Info Access Subject Key Identifier 3D:97:0D:29:38:4A:2D:4F:97:0A:4C:5F:2F:C6:ED:D6:E9:90:94:87 Authority Key Identifier 96:DE:61:F1:BD:1C:16:29:53:1C:C0:CC:7D:3B:83:00:40:E6:1A:7C Key Usage: digitalsignature - keyencipherment Thumbprint algorithm: SHA-256 Thumbprint: E2:B6:C3:00:9A:FA:80:BC:AB:2E:B5:FE:C5:A2:C4:AE:06:06:AC:A2:05:BA:4E:D6:2F:2F:B7:6C :C1:1E:08:DA ec.europa.eu European Commission Subject L: Brussels Subject ST: Belgium BE Scheme Operator Name European Commission Scheme Type Community Rules URI [ en ] Scheme Territory EU Mime Type application/pdf RGE (RWAY) - Trusted List ID: TrustServiceStatusList-1 Page 10

11 TSL Type List Issue Date Time T06:00:00Z Next Update date Time T22:00:00Z Distribution Points URI URI RGE (RWAY) - Trusted List ID: TrustServiceStatusList-1 Page 11

12 1 - TSP: ZebSign AS TSP Name ZebSign AS ZebSign AS TSP Trade Name NTR ZebSign AS PostalAddress Street Address [ en ] 0045 Oslo Locality [ en ] Oslo Postal Code [ en ] 0045 Country ElectronicAddress URI URI mailto:[email protected] TSP Information URI URI [ en ] URI [ no ] Service (supervisionceased): Certification Authority issuing Qualified Certificates Service Type Identifier Service type description [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. Service Name Certification Authority issuing Qualified Certificates Sertifikatutsteder som utsteder kvalifiserte sertifikater RGE (RWAY) - Trusted List ID: TrustServiceStatusList-1 Page 12

13 Service digital identities ZebSign Community ID CA 1 ZebSign AS X509SKI X509 SK I H982rbByf7H1MHZ27OtR7ZnnjW0= Certificate fields details Version: 3 Serial Number: X509 Certificate -----BEGIN CERTIFICATE----- MIIDmTCCAoGgAwIBAgIDAYagMA0GCSqGSIb3DQEBBQUAMFAxCzAJBgNVBAYTAk5PMR0wGwYDVQQK DBRaZWJTaWduIEFTLTk4MzE2MzQzMjEiMCAGA1UEAwwZWmViU2lnbiBDb21tdW5pdHkgSUQgQ0Eg MTAeFw0wNjA1MTkxMTA5MjhaFw0xODA1MTkxMDU1MzFaMFAxCzAJBgNVBAYTAk5PMR0wGwYDVQQK DBRaZWJTaWduIEFTLTk4MzE2MzQzMjEiMCAGA1UEAwwZWmViU2lnbiBDb21tdW5pdHkgSUQgQ0Eg MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKLwdrMIGlZ5C+dEbR7f3284DfENEK 2vXKLXz8iT5OgeJX22yPHGF67hcNQWAYIkIXvJZ89aL/C/VrVVQNQCEyxZ7+MqCaI1I4mMZF1i3e ckshefblwwxrf8t3sijrvvbu8yttjvo/831toikhnfxqw6jjduecwdsp24gd5vgy0jippw8xw+le VYkCP5cSQJvuPWfGDqA7s0oxtsZdX+LbvGS/I7fdXx/UiBnrDe9mtrGRhUrje0KYRk6KDt7CQrPy +oz6yu0b3kewyrzwuvruxswuqe2i13plzufid+ns/zt34utbqgbn6oqmf+mbiud9/nwquwvfrpop XfpCMQsCAwEAAaN8MHowEgYDVR0TAQH/BAgwBgEB/wIBADAUBgNVHSAEDTALMAkGB2CEQgEJCgEw DgYDVR0PAQH/BAQDAgEGMB8GA1UdIwQYMBaAFB/fNq2wcn+x9TB2duzrUe2Z541tMB0GA1UdDgQW BBQf3zatsHJ/sfUwdnbs61HtmeeNbTANBgkqhkiG9w0BAQUFAAOCAQEAY7mSap0Ty/T7xlYFsJ3z xox5h58jmq6io1idw8gj7uzmwnagegvkrstwd6wcrh7vy+wiurx7y/gv/nqa9u3dvsge6oyvn7yc M7Va5mnSxcU9Nkk6S7FyEBaevSccwWoHNo1tDO1w3zyMLlXn96grj8yudRFN5s7HMIMk7ywnaPv4 gty3l3yjisiu2jzh5qcwgjzfzqyewwn2s+8gsbsyggxpo9tmrkrm1+h+dfvxuleiaoxlvbfb+yiy JSF302W8sTyO3lHNl3sOdpui/klGRV5CcMoml0SA1wfj6JJLsAm0z82PJvOzr0AZlPPfET9WPfL2 Y9mtSTyq7qv2V6AGpA== -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer CN: ZebSign Community ID CA 1 Issuer O: ZebSign AS Issuer C: ZebSign Community ID CA 1 ZebSign AS Valid from: Fri May 19 13:09:28 CEST 2006 Valid to: Sat May 19 12:55:31 CEST 2018 Public Key: Basic Constraints 30:82:01:22:30:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:03:82:01:0F:00:30:82:01:0A:02:82:01:01:00:A3:4E:2F:07:6B:30:81:A5:67:90:BE:74:46:D1:ED:FD:F6:F3:80:DF:10:D1:0A:DA:F5:CA:2D:7C:FC:89:3E:4E:81:E2: 57:DB:6C:8F:1C:61:7A:EE:17:0D:41:60:18:22:42:17:BC:96:7C:F5:A2:FF:0B:F5:6B:55:54:0D:40:21:32:C5:9E:FE:32:A0:9A:23:52:38:98:C6:45:D6:2D:DE:72:4B:07:79:F0:4B:C3:05:EB:7F:CB:77:48:82:51:56:F0:6E:F1:8B: 53:25:53:BF:F3:7D:6D:38:82:87:34:5C:6A:5B:A8:C9:76:E7:82:C1:D4:8F:DB:88:03:E5:51:98:D0:98:A9:3F:0F:31:5B:E2:DE:55:89:02:3F:97:12:40:9B:EE:3D:67:C6:0E:A0:3B:B3:4A:31:B6:C6:5D:5F:E2:DB:BC:64:BF:23:B 7:DD:5F:1F:D4:88:19:EB:0D:EF:66:B6:B1:91:85:4A:E3:7B:42:98:46:4E:8A:0E:DE:C2:42:B3:F2:FA:86:7A:CA:ED:1B:DC:A1:30:62:B6:56:52:F4:6E:5E:C5:AE:40:4D:A2:D7:73:CB:CE:E1:62:77:E9:EC:FD:94:F7:E1:4B:5 B:42:00:4D:EA:84:0C:17:E3:01:89:40:FD:FE:7C:10:53:0B:DF:AC:F3:8F:5D:FA:42:31:0B:02:03:01:00:01 IsCA: true - Path length: 0 Certificate Policies Policy OID: RGE (RWAY) - Trusted List ID: TrustServiceStatusList-1 Page 13

14 Authority Key Identifier 1F:DF:36:AD:B0:72:7F:B1:F5:30:76:76:EC:EB:51:ED:99:E7:8D:6D Subject Key Identifier 1F:DF:36:AD:B0:72:7F:B1:F5:30:76:76:EC:EB:51:ED:99:E7:8D:6D Key Usage: keycertsign - crlsign Thumbprint algorithm: SHA-256 Thumbprint: Service Status AE:D2:57:C1:F1:81:7F:F4:B0:40:76:1C:EA:D6:EC:C4:A9:A5:DD:3F:07:5C:4A:3D:36:4F:2A:55:0 A:DB:64:1B Service status description [en] The validity of the supervision assessment has lapsed without the service identified in "Service digital identity" being reassessed. The service is currently not under supervision any more from the date of the current status as the service is understood to have ceased operations. Status Starting Time T00:00:00Z History instance n.1 - Status: undersupervision Service Type Identifier Service Name Certification Authority issuing Qualified Certificates Sertifikatutsteder som utsteder kvalifiserte sertifikater Service digital identities ZebSign Community ID CA 1 ZebSign AS X509SKI X509 SK I Service Status Status Starting Time H982rbByf7H1MHZ27OtR7ZnnjW0= T13:09:00Z RGE (RWAY) - Trusted List ID: TrustServiceStatusList-1 Page 14

15 2 - TSP: Buypass AS TSP Name Buypass AS Buypass AS TSP Trade Name NTR Buypass AS PostalAddress Street Address [ en ] Postboks 4364 Nydalen Locality [ en ] Oslo Postal Code [ en ] 0402 Country ElectronicAddress URI URI mailto:[email protected] TSP Information URI URI [ en ] URI [ no ] Service : Certification Authority issuing Qualified Certificates Service Type Identifier Service type description [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. Service Name Certification Authority issuing Qualified Certificates Sertifikatutsteder som utsteder kvalifiserte sertifikater RGE (RWAY) - Trusted List ID: TrustServiceStatusList-1 Page 15

16 Service digital identities Certificate fields details Version: 3 Serial Number: 3 X509 Certificate -----BEGIN CERTIFICATE----- MIIDUzCCAjugAwIBAgIBAzANBgkqhkiG9w0BAQsFADBLMQswCQYDVQQGEwJOTzEdMBsGA1UECgwU QnV5cGFzcyBBUy05ODMxNjMzMjcxHTAbBgNVBAMMFEJ1eXBhc3MgQ2xhc3MgMyBDQSAxMB4XDTA1 MDUwOTE0MTMwM1oXDTE2MDUwOTE0MTMwM1owSzELMAkGA1UEBhMCTk8xHTAbBgNVBAoMFEJ1eXBh c3mgqvmtotgzmtyzmzi3mr0wgwydvqqddbrcdxlwyxnziensyxnzidmgq0egmtccasiwdqyjkozi hvcnaqebbqadggepadccaqocggebakso13tzkwtexx+hgjhqtjnmgczec4dvc69tb4ssvezn8akx ifzgisrbselrwcgoy+gb72rrtqfpffv0gggekkbyouz0plntvuhjp5jw3srojvi6k//zniqeknc0 n6wv1g/xpc+9urjjhw05nfbemjngjpo251p7vggvqamu+8ixf4rs4hyi+mkcvyzwpx6uvcwthoia AJpFBUJXgPROztmuOfbIUxAMZTpHe2DC1vqRycZxbL2RhzyRhkmr8w+gbCZ2Xhysm3HljbybIR6c 1jh+JIAVMYKWsUnTYjdbiAwKYjT+p0h+mbEwi5A3lRyoH6UsjfRVyNvdWQrCrXig9IsCAwEAAaNC MEAwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUOBTmyPCppAP0Tj4io1vy1uCtQHQwDgYDVR0P AQH/BAQDAgEGMA0GCSqGSIb3DQEBCwUAA4IBAQCFpYJ6LryjhPCuxwMa6pdG+o9tLL1AgTUUWzJz PlbXKRJPkT60DiLptFhhcqu0/hEDz5hAkWXU6gydQlk3lZQodNLWj9Db+WyYcasAxUSacqSuR/RT 7G+myQEJ4Bl+4cBFjTY6McWCNifctCsJMhlNm3puHNytqwRyT2DoICHrURrzfaqnZ0hkNnf26Yhs 0BDjWE/R+5SbzqmEVlLGVfZW8QzQMRNEnPkHMg3Ah6doPqjO+1+UAJgeI+dC9epf+iQgGlBdzw3N LYtqbs3fsHu2/40bbOum0qfIQ8MLRyH/421x8g3MeJ7SAUQ8+fU5RzbkZUfnpGLIcH82viL3C9Pg -----END CERTIFICATE----- Signature algorithm: SHA256withRSA Issuer CN: Buypass Class 3 CA 1 Issuer O: Buypass AS Issuer C: Buypass Class 3 CA 1 Buypass AS Valid from: Mon May 09 16:13:03 CEST 2005 Valid to: Mon May 09 16:13:03 CEST 2016 Public Key: Basic Constraints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sCA: true Subject Key Identifier 38:14:E6:C8:F0:A9:A4:03:F4:4E:3E:22:A3:5B:F2:D6:E0:AD:40:74 Key Usage: keycertsign - crlsign Thumbprint algorithm: SHA-256 Thumbprint: E3:C1:F1:EC:E9:57:3E:49:68:6A:CE:78:D8:C0:FB:3E:45:7F:72:60:49:47:60:BF:44:04:EF:F4:DF:0 5:9F:17 Certificate fields details Version: 3 Serial Number: 2 RGE (RWAY) - Trusted List ID: TrustServiceStatusList-1 Page 16

17 X509 Certificate -----BEGIN CERTIFICATE----- MIIDUzCCAjugAwIBAgIBAjANBgkqhkiG9w0BAQUFADBLMQswCQYDVQQGEwJOTzEdMBsGA1UECgwU QnV5cGFzcyBBUy05ODMxNjMzMjcxHTAbBgNVBAMMFEJ1eXBhc3MgQ2xhc3MgMyBDQSAxMB4XDTA1 MDUwOTE0MTMwM1oXDTE1MDUwOTE0MTMwM1owSzELMAkGA1UEBhMCTk8xHTAbBgNVBAoMFEJ1eXBh c3mgqvmtotgzmtyzmzi3mr0wgwydvqqddbrcdxlwyxnziensyxnzidmgq0egmtccasiwdqyjkozi hvcnaqebbqadggepadccaqocggebakso13tzkwtexx+hgjhqtjnmgczec4dvc69tb4ssvezn8akx ifzgisrbselrwcgoy+gb72rrtqfpffv0gggekkbyouz0plntvuhjp5jw3srojvi6k//zniqeknc0 n6wv1g/xpc+9urjjhw05nfbemjngjpo251p7vggvqamu+8ixf4rs4hyi+mkcvyzwpx6uvcwthoia AJpFBUJXgPROztmuOfbIUxAMZTpHe2DC1vqRycZxbL2RhzyRhkmr8w+gbCZ2Xhysm3HljbybIR6c 1jh+JIAVMYKWsUnTYjdbiAwKYjT+p0h+mbEwi5A3lRyoH6UsjfRVyNvdWQrCrXig9IsCAwEAAaNC MEAwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUOBTmyPCppAP0Tj4io1vy1uCtQHQwDgYDVR0P AQH/BAQDAgEGMA0GCSqGSIb3DQEBBQUAA4IBAQABZ6OMySU9E2NdFm/soT4JXJEVKirZgCFPBdy7 pymrezmqnji3jg8ccmphc3cecqa6oyh7pefjywsiccd8igwkh7y6xsl+z27seznxzy5p+qksp2ba EllNC1QCkoS72xLvg3BweMhT+t/Gxv/ciC8HwEmdMldg0/L2mSlf56oBzKwzqBwKu5HEA6BvtjT5 htozdlsy9eqbs1odtuds5xctra9bqh/yl0yce/4qxfi7t/ye/qnlgioow6ugfprreaaiers7gqqj el/wroqk5pmr+4okoyeyzdowdxb8gzho2+ubpzk/qjchjrrm85sfsnonk8+qqts4wxam58taa END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer CN: Buypass Class 3 CA 1 Issuer O: Buypass AS Issuer C: Buypass Class 3 CA 1 Buypass AS Valid from: Mon May 09 16:13:03 CEST 2005 Valid to: Sat May 09 16:13:03 CEST 2015 Public Key: Basic Constraints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sCA: true Subject Key Identifier 38:14:E6:C8:F0:A9:A4:03:F4:4E:3E:22:A3:5B:F2:D6:E0:AD:40:74 Key Usage: keycertsign - crlsign Thumbprint algorithm: SHA-256 Thumbprint: B7:B1:2B:17:1F:82:1D:AA:99:0C:D0:FE:50:87:B1:28:44:8B:A8:E5:18:4F:84:C5:1E:02:B5:C8:FB: 96:2B:24 Buypass Class 3 CA 1 Buypass AS X509SKI X509 SK I Service Status OBTmyPCppAP0Tj4io1vy1uCtQHQ= RGE (RWAY) - Trusted List ID: TrustServiceStatusList-1 Page 17

18 Service status description [en] The service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is currently under supervision, for compliance with the provisions laid down in the applicable European legislation, by the Member State identified in the "Scheme territory" in which the trust service provider is established. Status Starting Time T00:00:00Z Service : Certification Authority issuing Qualified Certificates Service Type Identifier Service type description [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. Service Name Certification Authority issuing Qualified Certificates Sertifikatutsteder som utsteder kvalifiserte sertifikater Service digital identities Certificate fields details Version: 3 Serial Number: 30 X509 Certificate -----BEGIN CERTIFICATE----- MIIEyzCCArOgAwIBAgIBHjANBgkqhkiG9w0BAQsFADBOMQswCQYDVQQGEwJOTzEdMBsGA1UECgwU QnV5cGFzcyBBUy05ODMxNjMzMjcxIDAeBgNVBAMMF0J1eXBhc3MgQ2xhc3MgMyBSb290IENBMB4X DTEyMDkyNTA4MDUxOVoXDTMyMDkyNTA4MDUxOVowSzELMAkGA1UEBhMCTk8xHTAbBgNVBAoMFEJ1 exbhc3mgqvmtotgzmtyzmzi3mr0wgwydvqqddbrcdxlwyxnziensyxnzidmgq0egmzccasiwdqyj KoZIhvcNAQEBBQADggEPADCCAQoCggEBAON6Gk4TsoAn39gyUXBUfjcLNaq1FLlq2mSqt7l4EUAL Qfwfw//3jcKPb70rGYD1Mw46shRoL2gFJP3mD5FYe+5pAKqJ1VRdFb/qO/HnYPPBx2vzbEJgOafC ubx6wemjc0o8ctsv/mqlvw8k88s+zizctsxmo95xkygcyyaqis5pr1mzattva/xm811oci8jzd2z jsq8khb8eparnjtiok/xyhqsvu9un7i83ndsaelizyw6asj7g2ducfwdythvrjqtvd6ttxn+puth C+IlgDJc6riJaIhYBqENID6LsBLdkSGIKsxVDsjDOZ3568D1XaRH9Wlo6Hj0792Ncu7AqZUCAwEA AaOBtjCBszAPBgNVHRMBAf8EBTADAQH/MB8GA1UdIwQYMBaAFEe4zf/lb+74suwvTg75JbCOPGvD MB0GA1UdDgQWBBTMw/gHt5xtek71pysdBfmzRxyR0TAOBgNVHQ8BAf8EBAMCAQYwEQYDVR0gBAow CDAGBgRVHSAAMD0GA1UdHwQ2MDQwMqAwoC6GLGh0dHA6Ly9jcmwuYnV5cGFzcy5uby9jcmwvQlBD bgfzcznsb290q0euy3jsma0gcsqgsib3dqebcwuaa4icaqajehvxhhjk5vkhddvh5r3eanjlnxwk 9FQ65TIjkeciZcO53wHqumFBJX0fI7bYOthY1RZQElyefhn9SQlNDiPYrGwfbv94A1RQq8WHFpaf UHoGjgmorgHoCRm/JKAjuFvE5NYc1EW2h8rAtg2apNRXe+TrTfLHH4gNYD6+Rd9L7zI6RQRgO11l mawmc5c6vdbjfotx/gcjpjowhb9rxwkdgxlbcgpllv5dhmcsjgxz7njw3sjywihelt5vr7ik+3xq e1mta869l8rb7edxhpavh/foqylhnwdsjqbka6nbppywty0fwoedstrrsb0nlyif6snezmyomife zj1yzjo+atnzxeisnrirw5kl2bmhg0fj7up/zq89trnh8eyfe2wpykham3uznt0jzllpabjqefcq ox3xepyyaiyjzgbvncyapesy88my9gzbvtcfnuyjr1qrfn2b+fcwwd1zcocg3fhr0k601z+v4kwb 19T1ui81cNWdadchU3UxH3i5ZJIi8z8abzj8E8l4sl5SD8iyUW58OF+bScx+P+RG2+DPw7uHbqIt CYlpl/+YXhKCeGbZ/mI4xHipWuuamnYzZcD1TJ2g+0J9aqLavrBrnhtR0tWS2gmds5G4yNxROB1u QLZPFswq7WjfCUK3A8RrnNGcGPaCOf4BAou0GAiGo8kWwg== -----END CERTIFICATE----- Signature algorithm: SHA256withRSA Issuer CN: Buypass Class 3 Root CA Issuer O: Buypass AS Issuer C: Buypass Class 3 CA 3 Buypass AS Valid from: Tue Sep 25 10:05:19 CEST 2012 Valid to: Sat Sep 25 10:05:19 CEST 2032 RGE (RWAY) - Trusted List ID: TrustServiceStatusList-1 Page 18

19 Public Key: Basic Constraints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sCA: true Authority Key Identifier 47:B8:CD:FF:E5:6F:EE:F8:B2:EC:2F:4E:0E:F9:25:B0:8E:3C:6B:C3 Subject Key Identifier CC:C3:F8:07:B7:9C:6D:7A:4E:F5:A7:2B:1D:05:F9:B3:47:1C:91:D1 Certificate Policies Policy OID: CRL Distribution Points Key Usage: keycertsign - crlsign Thumbprint algorithm: SHA-256 Thumbprint: C4:9C:35:0E:5A:82:05:E0:63:E7:4C:55:4A:99:43:35:B8:43:5C:99:65:27:D4:EF:1A:2B:0C:7B:51:5 8:4B:2D Buypass Class 3 CA 3 Buypass AS X509SKI X509 SK I Service Status zmp4b7ecbxpo9acrhqx5s0cckde= Service status description [en] The service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is currently under supervision, for compliance with the provisions laid down in the applicable European legislation, by the Member State identified in the "Scheme territory" in which the trust service provider is established. Status Starting Time T23:00:00Z RGE (RWAY) - Trusted List ID: TrustServiceStatusList-1 Page 19

20 3 - TSP: Commfides Norge AS TSP Name Commfides Norge AS Commfides Norge AS TSP Trade Name NTR Commfides Norge AS PostalAddress Street Address [ en ] Postboks 405 Locality [ en ] Lysaker Postal Code [ en ] 1327 Country ElectronicAddress URI URI mailto:[email protected] TSP Information URI URI [ en ] Class_3/cncp_01_certificate%20policy%20for%20commfides%20sha256%20class3%20person%20high% 20and%20employee%20certificates.pdf URI [ no ] Service : Certification Authority issuing Qualified Certificates Service Type Identifier Service type description [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. Service Name Certification Authority issuing Qualified Certificates RGE (RWAY) - Trusted List ID: TrustServiceStatusList-1 Page 20

21 Sertifikatutsteder som utsteder kvalifiserte sertifikater Service digital identities Certificate fields details Version: 3 Serial Number: X509 Certificate -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIIUkx/+4wXw5swDQYJKoZIhvcNAQELBQAwgZ4xIjAgBgNVBAMTGUNQTiBS b290q0egu0hbmju2iensyxnzidmxqda+bgnvbastn0nvbw1mawrlcybucnvzdcbfbnzpcm9ubwvu dcaoyykgmjaxmsbdb21tzmlkzxmgtm9yz2ugqvmxktanbgnvbaotienvbw1mawrlcybob3jnzsbb UyAtIDk4OCAzMTIgNDk1MQswCQYDVQQGEwJOTzAeFw0xMTAyMjgwOTE3MzhaFw0yNDEyMzEwOTE3 MzhaMIGjMScwJQYDVQQDEx5DUE4gUGVyc29uIEhpZ2ggU0hBMjU2IENMQVNTIDMxQDA+BgNVBAsT N0NvbW1maWRlcyBUcnVzdCBFbnZpcm9ubWVudCAoYykgMjAxMSBDb21tZmlkZXMgTm9yZ2UgQVMx KTAnBgNVBAoTIENvbW1maWRlcyBOb3JnZSBBUyAtIDk4OCAzMTIgNDk1MQswCQYDVQQGEwJOTzCC ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALszd7F/luUhdrrNJx0qb4Ux4KVIMB91AAJW pe7ljbdugffm1kfnrny1bmbryqakqeaxfr/xegy+akxo3ivgeyt/ltkb6s8wm7v55lawayn7f9sc FujWexTdf3CexaVaS8JH1sGYFKs2SwsmuWKJe3mxPaud5oyP/LAswIOcnt1pzvTu88hlVI5gXmtd t59cfz2/xqsr06ynlx75kpujmr3nyylekwczduqoooumtiysaug8mbcezcp/4tdfhaae9fl41zu/ C3/A8cLOrbVKZ7Z7qRu473KxpPMgDgovciTQFLer0KpcY56tygbzyuvJfqC3xT0FDn7j7BgAgk6U pcccaweaaaocatkwgge1mdsgccsgaqufbwebbc8wltarbggrbgefbqcwayyfahr0cdovl29jc3ax LmNvbW1maWRlcy5jb20vb2NzcDAdBgNVHQ4EFgQUvq6nr7jW3G1+6pw2+5hsb+2/jsMwDwYDVR0T AQH/BAUwAwEB/zAfBgNVHSMEGDAWgBSWhl/gjBoUw6aC4uOZoWE1ohYY4TAWBgNVHSAEDzANMAsG CWCEQgEdDAEBADB9BgNVHR8EdjB0MDigNqA0hjJodHRwOi8vY3JsMS5jb21tZmlkZXMuY29tL0Nv bw1mawrlc1jpt1qtu0hbmju2lmnybda4odagniyyahr0cdovl2nybdiuy29tbwzpzgvzlmnvbs9d b21tzmlkzxnst09ulvniqti1ni5jcmwwdgydvr0paqh/baqdagggma0gcsqgsib3dqebcwuaa4ib AQAYAWW39NrWBLOv8KefxaicrENbfDajYbxeJ79xfjPKubLw3mSWHluT8Gi3C/7nGDWCBSjWYDm4 ow+4+uwkjju51m/osgy0lcwz8sjzlvubvcbsacof0uxdmxrchzqpwnriwhp1+c0tzbjtd2rj1ac5 SiNGMENx/WYZ1Qt5jUclObMrRiqJNjoxVfVtemxHKJoCwii3iyGkyGY/keq3iNSK3d4cpwEPdm+p j+0y+dsyvmtlbjdmmsjhcifqwsluf00d/es5uu4sg92ry7t8zihgx5mgvi/rxedvbuje+eawj1sx vtfsqsyzizeidhbssqsrilqxfxzpcber5zihumjt -----END CERTIFICATE----- Signature algorithm: SHA256withRSA Issuer C: Issuer O: Commfides Norge AS Issuer OU: Commfides Trust Environment (c) 2011 Commfides Norge AS Issuer CN: CPN RootCA SHA256 Class 3 Commfides Norge AS Commfides Trust Environment (c) 2011 Commfides Norge AS CPN Person High SHA256 CLASS 3 Valid from: Mon Feb 28 10:17:38 CET 2011 Valid to: Tue Dec 31 10:17:38 CET 2024 Public Key: Authority Info Access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ubject Key Identifier BE:AE:A7:AF:B8:D6:DC:6D:7E:EA:9C:36:FB:98:6C:6F:ED:BF:8E:C3 Basic Constraints IsCA: true Authority Key Identifier 96:86:5F:E0:8C:1A:14:C3:A6:82:E2:E3:99:A1:61:35:A2:16:18:E1 RGE (RWAY) - Trusted List ID: TrustServiceStatusList-1 Page 21

22 Certificate Policies Policy OID: CRL Distribution Points Key Usage: digitalsignature - keycertsign - crlsign Thumbprint algorithm: SHA-256 Thumbprint: CD:9C:51:5E:31:AC:87:FC:1E:71:2F:F0:F7:0C:48:75:A1:F6:EC:61:39:9E:26:D5:7A:99:BC:46:A1: D1:3F:10 Commfides Norge AS Commfides Trust Environment (c) 2011 Commfides Norge AS CPN Person High SHA256 CLASS 3 X509SKI X509 SK I Service Status vq6nr7jw3g1+6pw2+5hsb+2/jsm= Service status description [en] The service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is currently under supervision, for compliance with the provisions laid down in the applicable European legislation, by the Member State identified in the "Scheme territory" in which the trust service provider is established. Status Starting Time T00:00:00Z Service : Certification Authority issuing Qualified Certificates Service Type Identifier Service type description [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. Service Name Certification Authority issuing Qualified Certificates Sertifikatutsteder som utsteder kvalifiserte sertifikater Service digital identities Certificate fields details Version: 3 RGE (RWAY) - Trusted List ID: TrustServiceStatusList-1 Page 22

23 Serial Number: X509 Certificate -----BEGIN CERTIFICATE----- MIIHTjCCBTagAwIBAgIIEmxM2hFE7uIwDQYJKoZIhvcNAQEFBQAwggEaMS8wLQYDVQQDEyZDb21t ZmlkZXMgUHJvZmVzc2lvbmFsIE5ldHdvcmsgUm9vdCBDQTFAMD4GA1UECxM3Q29tbWZpZGVzIFRy dxn0ievudmlyb25tzw50ichdksaymda2ienvbw1mawrlcybob3jnzsbbuzfbmd8ga1uecxm4q29t bwzpzgvzifbyb2zlc3npb25hbcbozxr3b3jric0gzm9yigf1dghvcml6zwqgdxnlig9ubhkxkjao BgNVBAsTIUNQTiBQcmltYXJ5IENlcnRpZmljYXRlIEF1dGhvcml0eTEpMCcGA1UEChMgQ29tbWZp ZGVzIE5vcmdlIEFTIC0gOTg4IDMxMiA0OTUxCzAJBgNVBAYTAk5PMB4XDTA4MDYyMDA5NTUyNloX DTE5MTIzMTA5NTUyNlowgdExJTAjBgNVBAMTHENvbW1maWRlcyBDUE4gUGVyc29uLUhpZ2ggQ0Ex QDA+BgNVBAsTN0NvbW1maWRlcyBUcnVzdCBFbnZpcm9ubWVudCAoQykgMjAwNiBDb21tZmlkZXMg Tm9yZ2UgQVMxLjAsBgNVBAsTJUNQTiBQZXJzb24tSGlnaCBDZXJ0aWZpY2F0ZSBBdXRob3JpdHkx KTAnBgNVBAoTIENvbW1maWRlcyBOb3JnZSBBUyAtIDk4OCAzMTIgNDk1MQswCQYDVQQGEwJOTzCC AiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAMFgF+Q0WgjO+ifPsKKPEsrSIBkdsazudoEd o8d3qalpwwk2xhw2vjafdspjxcvsphtgrorxcb/gkdxyn7uyr1p8o1gudv6ok2zsush0yfdfyjod r1xsphkn4qxqipak2rjgilicj0q1z1xkdkufonafkwz1tlvb5eanptoksnkan/uqawqgqudzevmy IUDPJhIfY3vQTp6AcZO11W+JL0r7f+w5ctrLZPK48abzGa4nMt3wPEKs49tJrczyHo7MC5gjKpyv 6UCvDZfVszVPthtGBzm2ETh0ZqOSrq3dg30l9O5qLsIRVQzR6sH51LOFwtbbv6kO1bXYIggDIVxc ltab+me4qennhyvc1f2csird8mzey2rzceblwfigjmutxbqtiooygw2n/dcw8qxlb5zyqamim070 Pper1gExDKEOuYT3jo3rZBv4ZnwPpYj9nWj/H7iym0z0/xEnp9+E1r20TI0KL6AtSNbXfeyHNLYw 5K+BkFoBWuDWNc3wmalzzRqJXn/lz7s6H00i3or4cBimPzTZz8v6g++ltZPFUmm4SS3Jq7BZP3ii 4lHB5wEUPhXSWwN01AJ8LV/9C5qUags5mfPhjatkI/HW9KZhnYCiNxmT+towz9dvEmc/Nl1NnKEr t2tb3g6jfb3zd2qc909qi6pdns4vpkckdsu2dwfpagmbaagjgd0wgdowdwydvr0taqh/bauwaweb /zafbgnvhsmegdawgbsid+guawhfvdlmuehqvfwew2ablta7bgnvhr8endaymdcglqashipodhrw Oi8vY3JsLmNvbW1maWRlcy5jb20vQ29tbWZpZGVzUm9vdC5jcmwwDgYDVR0PAQH/BAQDAgGGMB0G A1UdDgQWBBQrWthQN+irxO/4rf27XJFXj7a2lzA6BggrBgEFBQcBAQQuMCwwKgYIKwYBBQUHMAGG Hmh0dHA6Ly9vY3NwLmNvbW1maWRlcy5jb20vb2NzcDANBgkqhkiG9w0BAQUFAAOCAgEAHy4KR7Bw I+R+oyQhI0b2yW92LFJwCSx0ckEjZ6qTaDUwwkkQZTqyINY1BxBA4tGuotTk64k3pfg2qCedH1zO ojo0go/+pejw2nnhptlfl2gtpv75u6pao48+0k/i6gkvjdtifrybf9ekgrztepmuxcoydmknum4y HRaj4rRf0g8T8Ag0LNU9mX/J26+RnuK3oo+MfDg7buusJ0JFgRz+AWHI86+BUp2A0YOKIdveApTj SVtguhOOeINwJkLiV89PslO3rAr2oow37/5eA1Vi1OffoM1Bq3rT5soKnyc/H+NTiHLiC0I47Te8 YFfnsVIlchk6d6TIRaOddQ0MEJgT93cu6Ko7Q12ToMVas0TqcFWAPJn5H+S5SCUTtDOmNIiVqdD5 V6FTx5o+gq440BVen9oq1h81xfhTuj0RIAcg5UHx/IFmfQtNNWP/R1grChz2rwQLZQ3NUULLMeN1 YEqIrcSoJygHtMQLOEI1VfEV2fj7ibqcH9s2ufys1Nv4BOZrgdhESpyjszE77T96OBN2BfevIrF5 x56de9qeniznkoxxqj6z90g/r8zmjzumur83bz8dwqvaixfjdskcz+hwn1osr45wrmvxg5emhjl2 WvUktFol0RdaidLVoZggLA6t2qg8gBkJ+DioK/rUb5WysrCX5bEFShHK70JoYecoLE8= -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer C: Issuer O: Commfides Norge AS Issuer OU: CPN Primary Certificate Authority Issuer OU: Commfides Professional Network - for authorized use only Issuer OU: Commfides Trust Environment (C) 2006 Commfides Norge AS Issuer CN: Commfides Professional Network Root CA Commfides Norge AS CPN Person-High Certificate Authority Commfides Trust Environment (C) 2006 Commfides Norge AS Commfides CPN Person-High CA Valid from: Fri Jun 20 11:55:26 CEST 2008 Valid to: Tue Dec 31 10:55:26 CET 2019 Public Key: Basic Constraints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sCA: true Authority Key Identifier A2:0F:E8:14:01:68:5F:BC:39:4C:B9:E1:D0:BC:55:9E:C3:66:81:95 CRL Distribution Points RGE (RWAY) - Trusted List ID: TrustServiceStatusList-1 Page 23

24 Subject Key Identifier 2B:5A:D8:50:37:E8:AB:C4:EF:F8:AD:FD:BB:5C:91:57:8F:B6:B6:97 Authority Info Access Key Usage: digitalsignature - keycertsign - crlsign Thumbprint algorithm: SHA-256 Thumbprint: EA:C5:32:8E:BF:07:54:26:5B:DC:A4:2A:DA:C3:80:DE:65:73:98:47:77:90:2C:29:1E:69:2C:AA:64 :59:A0:66 Commfides Norge AS CPN Person-High Certificate Authority Commfides Trust Environment (C) 2006 Commfides Norge AS Commfides CPN Person-High CA X509SKI X509 SK I Service Status K1rYUDfoq8Tv+K39u1yRV4+2tpc= Service status description [en] The service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is currently under supervision, for compliance with the provisions laid down in the applicable European legislation, by the Member State identified in the "Scheme territory" in which the trust service provider is established. Status Starting Time T11:55:26Z RGE (RWAY) - Trusted List ID: TrustServiceStatusList-1 Page 24

25 4 - TSP: Danske Bank TSP Name Danske Bank Danske Bank TSP Trade Name NTR Fokus Bank PostalAddress Street Address [ en ] 7466 TRONDHEIM Locality [ en ] Trondheim Postal Code [ en ] 7466 Country ElectronicAddress URI URI mailto:[email protected] TSP Information URI URI [ en ] URI [ en ] URI [ no ] Service : Certification Authority issuing Qualified Certificates Service Type Identifier Service type description [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. Service Name Certification Authority issuing Qualified Certificates RGE (RWAY) - Trusted List ID: TrustServiceStatusList-1 Page 25

26 Sertifikatutsteder som utsteder kvalifiserte sertifikater Service digital identities BankID Fokus Bank Bank CA Fokus Bank X509SKI X509 SK I Cx2ElXOq6yKlHXCEJYnXvD2O3A4= Certificate fields details Version: 3 Serial Number: 303 X509 Certificate -----BEGIN CERTIFICATE----- MIIFsTCCA5mgAwIBAgICAS8wDQYJKoZIhvcNAQELBQAwXDELMAkGA1UEBhMCTk8xIzAhBgNVBAoM GkZOSCBvZyBTcGFyZWJhbmtmb3JlbmluZ2VuMQ8wDQYDVQQLDAZCYW5rSUQxFzAVBgNVBAMMDkJh bmtjrcbsb290ienbmb4xdta5mdkymza4ntqynvoxdtixmdkymza4ntqynvowxdelmakga1uebhmc Tk8xEzARBgNVBAoMCkZva3VzIEJhbmsxEjAQBgNVBAsMCTk3NzA3NDAxMDEkMCIGA1UEAwwbQmFu a0leiezva3vziejhbmsgqmfuaybdqsaymiicijanbgkqhkig9w0baqefaaocag8amiiccgkcagea tmnfpvm2beaykzb3fzcnpm7+0tuib/9az6bppfso8jsmmtye5tacezxfntbpbyaap+aeznztwcwl c9osl4l9vwugco5qpk5okkwl2ihbd3vfatoakyulh7rckpjhs+xmd0dd51aqkaevvjehmbnmtc7s SGnAt8NEMV+7vtHfLKFAEk6fGs+PY6pc8cSLVg2Rf7b6/na8JhiqOdbpDKGhOyzF6kD63nFPvMas Ik3w+HNVPPIIPtAztAiL9+Pgrptl6/8y24mrmyvnru1GJcE2UPQu4dHkDPnEyFuGiYru+Hi2jos4 T8IC35ETMLZnbcptELqCZV30qtROis9u71W0eHQdiiyVycEBMxDWOUGdO6GuuGyvIClwaJ62Klfl xbtf97ovomjqrqcyp3tdj3tp4w9x8ia2mpy/g7szziuzwmoaz7v+dw/nz10obhrhzpn2guqzeaqg Rut5E23IR25D0mYJYzHBAYDcuMeIedk7Wy+bl9lpWSaGlE1+lNpUDFvC2lE5v0aDkIPZEWSzwtxL o92ci1mvhyfp48sykkqgszppw8try1gtugcf8zizwh+sysojf3kbsq4kwyks/lijxspfggl+gfpb q70uzt1dfvv9sh8oyj9nggccptmqirsw4zlvlw9prl/pkrg1lhfrufcio771k+br4hvjxjjkq4mc AwEAAaN9MHswEgYDVR0TAQH/BAgwBgEB/wIBADAVBgNVHSAEDjAMMAoGCGCEQgEQAQMBMA4GA1Ud DwEB/wQEAwIBBjAfBgNVHSMEGDAWgBSgbnT1MfCwFH3ifz+mxHxv2YRpXDAdBgNVHQ4EFgQUCx2E lxoq6yklhxcejynxvd2o3a4wdqyjkozihvcnaqelbqadggibacetofagf46ejq9pyuz+zvcmohhe 31tDHlhGdwkFfAyKzn1BiyGHZ52HyDS8bi+4BgfyhhaLqpDjELehqz7DxYzg2akTsGuxfhzbRRQW qfg9+9u1n9myjmnqtvqb/zftqxkzcwqqrkrfcrotfs+/dfpqnwpxsy6cctpxnxbxbvtw+w96tvti VqnwVtGZd5QDRe9CyF1I7chiiIxjTfiw/GHr1m5P4Q0s6fA2fayCOImcP9PreuqBEs610qhIYabw 92uLug/JArk5Jb8Lr/eNiYsdsfiVmx8FVFHcMKQ77779NaUA3wqFhrxoEsvbPbWy/qo+McJIeG2u WETgy/Dbj760yPonVDLPCOzniekzOfxa1UfJQOxzGZ7CVBO6pYPqJm7gUG/n2m1AoL31FIvTEpMy wvrft1jemge1otjqjliwnfhffxvbbvmhyigrq1wmdhc6wh2hc7egme9yskuozuqpyrfk2cyz34gd vbt7nsqtyuz2u9jr/xyba9b3jgpv+sijmqmrzbpm5llzmdszymnyf70u4zggr8l6z7gto1riypzg R6g15OnMuJuhp34oDKJ629gyUDdeYujMtn+luFh+fLW/RdyQxervPFd5iAJYZjFMgY1iqS1vJ29j 2pZtGWwPJJq9foqIm4JiLQFqJGheybukAIpqolqmGC+Y2OyH -----END CERTIFICATE----- Signature algorithm: SHA256withRSA Issuer CN: BankID Root CA Issuer OU: BankID Issuer O: FNH og Sparebankforeningen Issuer C: BankID Fokus Bank Bank CA Fokus Bank RGE (RWAY) - Trusted List ID: TrustServiceStatusList-1 Page 26

27 Valid from: Wed Sep 23 10:54:25 CEST 2009 Valid to: Thu Sep 23 10:54:25 CEST 2021 Public Key: Basic Constraints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sCA: true - Path length: 0 Certificate Policies Policy OID: Authority Key Identifier A0:6E:74:F5:31:F0:B0:14:7D:E2:7F:3F:A6:C4:7C:6F:D9:84:69:5C Subject Key Identifier 0B:1D:84:95:73:AA:EB:22:A5:1D:70:84:25:89:D7:BC:3D:8E:DC:0E Key Usage: keycertsign - crlsign Thumbprint algorithm: SHA-256 Thumbprint: Service Status 11:5F:92:F4:22:FC:53:31:5B:66:88:01:F9:43:C5:DE:EA:05:31:DA:1C:D4:30:D8:9E:A3:84:87:07:2 B:A5:D1 Service status description [en] The service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is currently under supervision, for compliance with the provisions laid down in the applicable European legislation, by the Member State identified in the "Scheme territory" in which the trust service provider is established. Status Starting Time T00:00:00Z Service (supervisionceased): Certification Authority issuing Qualified Certificates Service Type Identifier Service type description [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. Service Name Certification Authority issuing Qualified Certificates Sertifikatutsteder som utsteder kvalifiserte sertifikater Service digital identities BankID Fokus Bank Bank CA Fokus Bank ASA RGE (RWAY) - Trusted List ID: TrustServiceStatusList-1 Page 27

28 X509SKI X509 SK I j0srqu3mer8pwecyqpc8qapp/3w= Certificate fields details Version: 3 Serial Number: X509 Certificate -----BEGIN CERTIFICATE----- MIIDtzCCAp+gAwIBAgIEPRryUTANBgkqhkiG9w0BAQUFADBcMQswCQYDVQQGEwJOTzEjMCEGA1UE ChMaRk5IIG9nIFNwYXJlYmFua2ZvcmVuaW5nZW4xDzANBgNVBAsTBkJhbmtJRDEXMBUGA1UEAxMO QmFua0lEIFJvb3QgQ0EwHhcNMDIwNjI3MTEwOTA1WhcNMTQwNjI0MTEwOTA1WjBgMQswCQYDVQQG EwJOTzEXMBUGA1UEChMORm9rdXMgQmFuayBBU0ExEjAQBgNVBAsTCTgxMDk2OTY1MjEkMCIGA1UE AxMbQmFua0lEIEZva3VzIEJhbmsgQmFuayBDQSAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAtVCnnh8A/JJJTLJRTwH+iD78eZRvfRAcDkzZJo24CkXmInJCf0jXSO340ZEef0N9ufml WaOj8vYiEtbsnsNKGetkUWwT3GMjQkbcUq9mPH4Jm9TiXT+UB3qsPZCvvEJUpKoU3Am6vpMQM3fo 331TTmxqlg6eH5FhIGVlfTjNIUZyIAx9o83jC+Un5gMkBonfpRmdyLt9Vs2tURA3O/UNxHzB35kD IDlm+lIYwdYUodjyA9eycngILXMfOZ11Rlbmwpd7NnYMuYw2s2p4I5UucClsUopLntcKqBPM9Fef ZVtaKpj6bGW3OsAXFVvi11amcuq674oWsBUlUVmnKzzFUwIDAQABo30wezASBgNVHRMBAf8ECDAG AQH/AgEAMA4GA1UdDwEB/wQEAwIBBjAVBgNVHSAEDjAMMAoGCGCEQgEQAQMBMB8GA1UdIwQYMBaA FGkkKsWM3wz3sEAx4Im6Goq97337MB0GA1UdDgQWBBSPRKuq7cwSvw9Z5xhCkLyoA+n/fDANBgkq hkig9w0baqufaaocaqeafzvtkojmogmvg0dr4qv9uis+oceoaoaha5rkhe6n4hffv9/js+k3mcjn wle0syvbgrlca8b1c5ip4zimyhsjrjwdezprxkbwjny6hzr90icwpsq340limnhi57exi4cpfi2i zlso9ygfy5lo61gjeagi6hnli7ui1fkhx3xckdtu5ovcdzr7qfg3o5mx3r0dq5fh54q6fl2g2ram bcxbkucnnztgzryt03z5sjdentzngoklg+ibgs+mrzcmli6fvej5qsr6gi3clm2xx+gunpw4ltlz EtjdlN/bqqcpFgVjnYE7FV4wKVAP5KaK+1PGBf2/3y5vbU4fo7jAkLFadw== -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer CN: BankID Root CA Issuer OU: BankID Issuer O: FNH og Sparebankforeningen Issuer C: BankID Fokus Bank Bank CA Fokus Bank ASA Valid from: Thu Jun 27 13:09:05 CEST 2002 Valid to: Tue Jun 24 13:09:05 CEST 2014 Public Key: Basic Constraints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sCA: true - Path length: 0 Certificate Policies Policy OID: Authority Key Identifier 69:24:2A:C5:8C:DF:0C:F7:B0:40:31:E0:89:BA:1A:8A:BD:EF:7D:FB Subject Key Identifier 8F:44:AB:AA:ED:CC:12:BF:0F:59:E7:18:42:90:BC:A8:03:E9:FF:7C RGE (RWAY) - Trusted List ID: TrustServiceStatusList-1 Page 28

29 Key Usage: keycertsign - crlsign Thumbprint algorithm: SHA-256 Thumbprint: Service Status 5F:29:76:49:A7:81:87:EC:1C:0F:70:BF:F3:3A:4C:11:F2:7C:54:F3:5E:9F:0B:66:06:04:A9:B3:55:F 4:4C:59 Service status description [en] The validity of the supervision assessment has lapsed without the service identified in "Service digital identity" being reassessed. The service is currently not under supervision any more from the date of the current status as the service is understood to have ceased operations. Status Starting Time T00:00:00Z History instance n.1 - Status: undersupervision Service Type Identifier Service Name Certification Authority issuing Qualified Certificates Sertifikatutsteder som utsteder kvalifiserte sertifikater Service digital identities BankID Fokus Bank Bank CA Fokus Bank ASA X509SKI X509 SK I Service Status Status Starting Time j0srqu3mer8pwecyqpc8qapp/3w= T01:00:00Z RGE (RWAY) - Trusted List ID: TrustServiceStatusList-1 Page 29

30 5 - TSP: Bankenes ID-tjeneste AS TSP Name Bankenes ID-tjeneste AS Bankenes ID-tjeneste AS TSP Trade Name NTR PostalAddress Street Address [ en ] Postboks 7999 Locality [ en ] Bergen Postal Code [ en ] 5020 Country ElectronicAddress URI URI mailto:[email protected] TSP Information URI URI [ en ] URI [ no ] URI [ no ] Service : Certification Authority issuing Qualified Certificates Service Type Identifier Service type description [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. Service Name Certification Authority issuing Qualified Certificates Sertifikatutsteder som utsteder kvalifiserte sertifikater RGE (RWAY) - Trusted List ID: TrustServiceStatusList-1 Page 30

31 Service digital identities BankID Bankenes ID-tjeneste Bank CA Bankenes ID-tjeneste AS X509SKI X509 SK I sexjckx+qjsxmehncvzzt0uitas= Certificate fields details Version: 3 Serial Number: 903 X509 Certificate -----BEGIN CERTIFICATE----- MIIFyDCCA7CgAwIBAgICA4cwDQYJKoZIhvcNAQELBQAwXDELMAkGA1UEBhMCTk8xIzAhBgNVBAoM GkZOSCBvZyBTcGFyZWJhbmtmb3JlbmluZ2VuMQ8wDQYDVQQLDAZCYW5rSUQxFzAVBgNVBAMMDkJh bmtjrcbsb290ienbmb4xdta5mtewnda5mjexmloxdtixmtewnda5mjexmlowczelmakga1uebhmc Tk8xIDAeBgNVBAoMF0JhbmtlbmVzIElELXRqZW5lc3RlIEFTMRIwEAYDVQQLDAk5ODg0NzcwNTIx LjAsBgNVBAMMJUJhbmtJRCBCYW5rZW5lcyBJRC10amVuZXN0ZSBCYW5rIENBIDIwggIiMA0GCSqG SIb3DQEBAQUAA4ICDwAwggIKAoICAQDFwQH8S+tmw1tEs/ima3/znQew+o8/PsugcdkQ841ZeN1q CVWNdofDuMK+lc5DdsAi6JjS44qplQ6lbyYdN+CI+IAxXnHq7e7FeIGFYGzxHdjRyXpCkzRr7qiU ki0jmibc+u6fnkqhdoi4am5tnqc2obkxi079ibnwmduvzmd8asgmcldazjwkcgusr9mtrhe5q50l RHgqGGww6ynlZz0EeQcd5bsIMDnFzsykEr+THIblGXLsJmt6fZhxhcTTq9687AYoh5Z3YUsHgbFu ztpkxbqrrpwdj6odd6l+3pw4q9uhr0kocyrwj3rbcpxhsr5oamyq8u/uap8gdijujzl9gtcftfbi EY0bj9vwctbDzGCXhiRGJo2AY9FOIARlfBDRD9CKO5ZkLoEe6VoIEvhvtvGNlwZTjPK3OSNcDeHo +mna3x18bdyp/ugiux20zxc0zvf+iys1okwpoa0krs4hnqwl84uhx/pigi2clft7gkqrpok8+qgk RAsqTp848quLPPJ/BsjJm9IFNF/gV+7RL8qxpA+tBT593jUIBSIyI8n2jskXOTbKiKme6b9F+C34 n7tcrygqnmxs17mcbuz++lphe77helbtqp5/cgskip7jq6wtq5k9v3kjswje6jcl/xh8eknbqecb LwvXyWcrESu7jz7P3Z+6MdTjwQa9MQIDAQABo30wezASBgNVHRMBAf8ECDAGAQH/AgEAMBUGA1Ud IAQOMAwwCgYIYIRCARABAwEwDgYDVR0PAQH/BAQDAgEGMB8GA1UdIwQYMBaAFKBudPUx8LAUfeJ/ P6bEfG/ZhGlcMB0GA1UdDgQWBBSx5clwpf5AmxcwQedxXNlPS6JMCzANBgkqhkiG9w0BAQsFAAOC AgEALEvvt80aTKNQRbKgh4x1VKl3FmuofQbUE3lcSGuVrmX7pjHaD8KfeCoxpp+y0lg8cM5n+iZS rgbqq4akuzzr1uoh0bq+cmomcktazuc7l7jjury5pl7mnj4oroiq2iuoiqrpq0yyxt/cywl0kb6o okwv4jct+bjqutzwudqoonsuwib5orellcxwmchof2qhsfhojk1dje/ajmrevcsq2mi9k52pa0hp lukbyckoq+i6whh9eoix2gtrhsz2jziyaxw4d9piukrjkqyzi9km02os6sp4nhwaxvwj+lmk7ooj HN44hnxuPLr3JYRlAdsHmqn+NAKV86jESvOvsXQOYwJ93PF+1W36Vrx5tdPkaO+74t6lCIzsAfRz 7tQgqBOAbnzQHcUp5Zis0FM2xRzcOY63sUwDuoSpl6vLA4P77Xw51WIcbWLI40LgwwGYJNIrtLb/ JrJAxuidzYIR21zWLE5i7d9+F/yEZPf0iHmEIPkGhvloifMqp6u5nPIVIc998TMKm0oCMf687nlB sdlupscup0ayrjxwl3yzhv8mpkgn/equ9d3g3o461ekkuhgwpu4fj5fwplnx/hxflz+gtrmexkfk Jy21ceywrThHdsrXj35gdOOuytZroRVgXSzNp3G+I8I4EUAURCP+Wp8NE5g7hTFhu54JdYuusxoM Wng= -----END CERTIFICATE----- Signature algorithm: SHA256withRSA Issuer CN: BankID Root CA Issuer OU: BankID Issuer O: FNH og Sparebankforeningen Issuer C: BankID Bankenes ID-tjeneste Bank CA Bankenes ID-tjeneste AS Valid from: Wed Nov 04 10:21:12 CET 2009 RGE (RWAY) - Trusted List ID: TrustServiceStatusList-1 Page 31

32 Valid to: Thu Nov 04 10:21:12 CET 2021 Public Key: Basic Constraints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sCA: true - Path length: 0 Certificate Policies Policy OID: Authority Key Identifier A0:6E:74:F5:31:F0:B0:14:7D:E2:7F:3F:A6:C4:7C:6F:D9:84:69:5C Subject Key Identifier B1:E5:C9:70:A5:FE:40:9B:17:30:41:E7:71:5C:D9:4F:4B:A2:4C:0B Key Usage: keycertsign - crlsign Thumbprint algorithm: SHA-256 Thumbprint: Service Status 28:57:57:92:F3:AC:80:A9:E9:13:57:0E:8C:44:41:8F:8F:9E:93:28:A9:79:FE:BB:98:69:E7:B3:33:E7 :4B:6E Service status description [en] The service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is currently under supervision, for compliance with the provisions laid down in the applicable European legislation, by the Member State identified in the "Scheme territory" in which the trust service provider is established. Status Starting Time T00:00:00Z Service (supervisionceased): Certification Authority issuing Qualified Certificates Service Type Identifier Service type description [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. Service Name Certification Authority issuing Qualified Certificates Sertifikatutsteder som utsteder kvalifiserte sertifikater Service digital identities BankID Bankenes ID-tjeneste Bank CA Bankenes ID-tjeneste AS RGE (RWAY) - Trusted List ID: TrustServiceStatusList-1 Page 32

33 X509SKI X509 SK I hjsav8oplghmwjoldpdit5zq4ww= Certificate fields details Version: 3 Serial Number: X509 Certificate -----BEGIN CERTIFICATE----- MIIDyjCCArKgAwIBAgIEQ0ugFTANBgkqhkiG9w0BAQUFADBcMQswCQYDVQQGEwJOTzEjMCEGA1UE ChMaRk5IIG9nIFNwYXJlYmFua2ZvcmVuaW5nZW4xDzANBgNVBAsTBkJhbmtJRDEXMBUGA1UEAxMO QmFua0lEIFJvb3QgQ0EwHhcNMDUxMDExMTEyMDUzWhcNMTcxMDA4MTEyMDUzWjBzMQswCQYDVQQG EwJOTzEgMB4GA1UEChMXQmFua2VuZXMgSUQtdGplbmVzdGUgQVMxEjAQBgNVBAsTCTk4ODQ3NzA1 MjEuMCwGA1UEAxMlQmFua0lEIEJhbmtlbmVzIElELXRqZW5lc3RlIEJhbmsgQ0EgMTCCASIwDQYJ KoZIhvcNAQEBBQADggEPADCCAQoCggEBALC0KNU37lsDWWOID2846lucGAB+qzW4PDcMBIQQDlg8 5dNXaO9NE5OBVLyKrmsrC8TSQvmDLzLH8wGc9WoFVWrpcIE2pfSz4cHQgOg/e+zkfyxIBJJjLLJw Zwvn9KI0A38hurvywQCHw6IH09XB267dh3cpUakdjri064pkorEABW4F0tB/UTKfKNjUez77hhhf h5y2lxayrc48e+sxn+hp5sqz1p8uvldgoad1s9fvksrsfuh6hi/hsviizuepoh9owueffju7qige wjy1daiuinstmpt0hdenxygskciu2bl6dvcyyacka7emrh9a3/shwxiz6zoe2bxbjl0e8xmcawea AaN9MHswEgYDVR0TAQH/BAgwBgEB/wIBADAOBgNVHQ8BAf8EBAMCAQYwFQYDVR0gBA4wDDAKBghg heibeaedatafbgnvhsmegdawgbrpjcrfjn8m97bamecjuhqkve99+zadbgnvhq4efgquhjsav8op LghMwJoLdpDit5zq4wwwDQYJKoZIhvcNAQEFBQADggEBAJkNb5PTOrwrxYHRKBo9x++Ew239h5hA wwq1+z8zg1pkto4hfyadffq8pbdlvnie6jdlb8vmsxrr/tuo5ngppp9x8odxswdu9ck4tvjqsazt 4RGpY738aTnDl6laLrbr4UHSXk8mU0z7F6G5I3WX3j1P7WJ815aGOZNDvYxoOQdUsIUMKsvQEZTQ D29ieUMPafgOxHWLjJtR9nC3diTMZuimJBCcWhRuBdDsdI63b63NsAPQ4WuLCEkzA2CRd9Ru3Irc ztgviupbcov3jhd2yom0hl+ro9ve2kfyzvyfohcg7kqrs1shsu3+jhmseizdkwxy6edyef1qeqm5 oupefg4= -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer CN: BankID Root CA Issuer OU: BankID Issuer O: FNH og Sparebankforeningen Issuer C: BankID Bankenes ID-tjeneste Bank CA Bankenes ID-tjeneste AS Valid from: Tue Oct 11 13:20:53 CEST 2005 Valid to: Sun Oct 08 13:20:53 CEST 2017 Public Key: Basic Constraints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sCA: true - Path length: 0 Certificate Policies Policy OID: Authority Key Identifier 69:24:2A:C5:8C:DF:0C:F7:B0:40:31:E0:89:BA:1A:8A:BD:EF:7D:FB Subject Key Identifier 86:3B:1A:57:C3:A9:2E:08:4C:C0:9A:0B:76:90:E2:B7:9C:EA:E3:0C RGE (RWAY) - Trusted List ID: TrustServiceStatusList-1 Page 33

34 Key Usage: keycertsign - crlsign Thumbprint algorithm: SHA-256 Thumbprint: Service Status 0E:EA:ED:43:23:63:32:C4:9A:AB:D1:B3:34:8F:0C:8C:3A:16:1C:6F:F3:46:E1:12:E4:A4:BF:88:7A :B9:37:7F Service status description [en] The validity of the supervision assessment has lapsed without the service identified in "Service digital identity" being reassessed. The service is currently not under supervision any more from the date of the current status as the service is understood to have ceased operations. Status Starting Time T00:00:00Z History instance n.1 - Status: undersupervision Service Type Identifier Service Name Certification Authority issuing Qualified Certificates Sertifikatutsteder som utsteder kvalifiserte sertifikater Service digital identities BankID Bankenes ID-tjeneste Bank CA Bankenes ID-tjeneste AS X509SKI X509 SK I Service Status Status Starting Time hjsav8oplghmwjoldpdit5zq4ww= T00:00:00Z RGE (RWAY) - Trusted List ID: TrustServiceStatusList-1 Page 34

35 6 - TSP: DnB R Bank ASA TSP Name DnB R Bank ASA DnB R Bank ASA TSP Trade Name NTR PostalAddress Street Address [ en ] 0021 Oslo Locality [ en ] Oslo Postal Code [ en ] 0021 Country ElectronicAddress URI URI mailto:[email protected] TSP Information URI URI [ en ] URI [ en ] URI [ no ] Service : Certification Authority issuing Qualified Certificates Service Type Identifier Service type description [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. Service Name Certification Authority issuing Qualified Certificates Sertifikatutsteder som utsteder kvalifiserte sertifikater RGE (RWAY) - Trusted List ID: TrustServiceStatusList-1 Page 35

36 Service digital identities BankID DnB R Bank CA DnB R Bank ASA X509SKI X509 SK I PQh50HY8R4nhQePkgD+n4A/ElTw= Certificate fields details Version: 3 Serial Number: 503 X509 Certificate -----BEGIN CERTIFICATE----- MIIFtDCCA5ygAwIBAgICAfcwDQYJKoZIhvcNAQELBQAwXDELMAkGA1UEBhMCTk8xIzAhBgNVBAoM GkZOSCBvZyBTcGFyZWJhbmtmb3JlbmluZ2VuMQ8wDQYDVQQLDAZCYW5rSUQxFzAVBgNVBAMMDkJh bmtjrcbsb290ienbmb4xdta5mtawnza4mjc1mloxdtixmtawnza4mjc1mlowxzelmakga1uebhmc Tk8xGTAXBgNVBAoMEERuQiBOT1IgQmFuayBBU0ExEjAQBgNVBAsMCTk4NDg1MTAwNjEhMB8GA1UE AwwYQmFua0lEIERuQiBOT1IgQmFuayBDQSAyMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKC AgEAwq2pS7JlMwrLV58tUSxItXVaosvnjpfegaocPSemdGe/VXp+1Knb0VvOr/BzmCLGqlk3Twya UzGWQF8VgmZOKGUIITLKLXWpCR1dyap3w1QlB22yx7GLwqYZqzUg1mdir21FXepBlYc6E5ydaBNu nzmkk4icmtdgc0fux+g2ztnrd384e8grr4n0voddbtd+dfvc97avlksynwiqkllyzthspak+uj6d zopxggueybctms057p6rw01ehipktwmgoe8qfx0n5fggecadur6q+zbnvthjh2stphxqr7rst2vz v+zlplpmjprdmebig/eoiwgwtgn3qo+nfehhbvzaxpmksaf+ge67ott9xdgrqlvllzc0mi81wsus vpz0rp4ryvuspnnj9ie++3boihfatkevtbft9ix3jvcr7yxaossk1dq1no0ldp/o53alsjlfwg6e +oq0fso/duckjekxmtbw5iok/+fql87cnbkywskxjolsgqgjxt2tlzhs7jkq/bgwlcazjygwmvis 6ZAEseo3P6sDEV1xDR+P4bBLrfouyKLv9lPaaNEIMCfZzxqIb3rjTYUp+zu/uLnTgLBEdXNPPdoA USfSKOUQgsPTg/LU+xJfHqt66BxV6OCZrfZHPsd69ucaMOJxz1jT7n94iFtxKusfbIumS4UAdFyD 6h8CAwEAAaN9MHswEgYDVR0TAQH/BAgwBgEB/wIBADAVBgNVHSAEDjAMMAoGCGCEQgEQAQMBMA4G A1UdDwEB/wQEAwIBBjAfBgNVHSMEGDAWgBSgbnT1MfCwFH3ifz+mxHxv2YRpXDAdBgNVHQ4EFgQU PQh50HY8R4nhQePkgD+n4A/ElTwwDQYJKoZIhvcNAQELBQADggIBAGopRrkjhrqLrMY7YVvLNFgV ern9a+dr/zcbypg/f45ybj70b4zylxooqshu6rytfufa+1mv7058cao75q0sq7bvuunvrh7tzoor 7suV2EgVEd2KVAyQHhc+APKDUjyRPbv3qed2yGsYPQSJFs4IQtqy6ABPEmidoeqGrqx6JufbGWKZ l8uswklzaualrtqgrxycltdtn7ikmgw6bkuglqo4/1rn9g3ccxtf+2xmln+6b3zivbkk6/ha/ybw a4qmvj4hufe8vecnxrdoitbiyrc1aa48/gwivvrw/e7a84b9epnq03/w2xhwlp1byasnf5q+vhyc Ng7EGJCp2i3lX4N5L049tD8aShPn32AKzryNHGbkmf1C66x9kbWivIqtbKiQeZdDLnoT0uEKr0dC +fipook0f4hi63+44dusw6nxgatnbgudow1nfhdwfzknjzkz7chn+ozrvet+0tpmrvyx11jisgcj tysbsvmuiwqj/3d+vlzfsmxeuoec+zkehe3h/asofkpbpjew3fld+zo1wb1ur6bqc/lrup+6avyx wkaisqhb1nkgrktyrwxt3c/a9d4e8bmbap+lbrbo9ijcykmwwpszzevclbkrzgtboireo+zwq9zk z/ay4ouc4oppgcbnj87ebjmddcgjgw28g1j2a/rnvy7411iwbvlz -----END CERTIFICATE----- Signature algorithm: SHA256withRSA Issuer CN: BankID Root CA Issuer OU: BankID Issuer O: FNH og Sparebankforeningen Issuer C: BankID DnB R Bank CA DnB R Bank ASA Valid from: Wed Oct 07 10:27:52 CEST 2009 RGE (RWAY) - Trusted List ID: TrustServiceStatusList-1 Page 36

37 Valid to: Thu Oct 07 10:27:52 CEST 2021 Public Key: Basic Constraints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sCA: true - Path length: 0 Certificate Policies Policy OID: Authority Key Identifier A0:6E:74:F5:31:F0:B0:14:7D:E2:7F:3F:A6:C4:7C:6F:D9:84:69:5C Subject Key Identifier 3D:08:79:D0:76:3C:47:89:E1:41:E3:E4:80:3F:A7:E0:0F:C4:95:3C Key Usage: keycertsign - crlsign Thumbprint algorithm: SHA-256 Thumbprint: Service Status 5D:31:7F:3C:92:2F:19:68:8D:27:0C:EC:CC:5C:31:60:5D:30:ED:35:BD:61:F0:DB:0E:68:20:8D:66: 17:DB:0F Service status description [en] The service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is currently under supervision, for compliance with the provisions laid down in the applicable European legislation, by the Member State identified in the "Scheme territory" in which the trust service provider is established. Status Starting Time T00:00:00Z Service (supervisionceased): Certification Authority issuing Qualified Certificates Service Type Identifier Service type description [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. Service Name Certification Authority issuing Qualified Certificates Sertifikatutsteder som utsteder kvalifiserte sertifikater Service digital identities BankID DnB R Bank CA DnB R Bank ASA RGE (RWAY) - Trusted List ID: TrustServiceStatusList-1 Page 37

38 X509SKI X509 SK I saiflva4jxne08/xw7mv0wfjpou= Certificate fields details Version: 3 Serial Number: X509 Certificate -----BEGIN CERTIFICATE----- MIIDtjCCAp6gAwIBAgIEQDyMiDANBgkqhkiG9w0BAQUFADBcMQswCQYDVQQGEwJOTzEjMCEGA1UE ChMaRk5IIG9nIFNwYXJlYmFua2ZvcmVuaW5nZW4xDzANBgNVBAsTBkJhbmtJRDEXMBUGA1UEAxMO QmFua0lEIFJvb3QgQ0EwHhcNMDQwMjI1MTE1MjQwWhcNMTYwMjIyMTE1MjQwWjBfMQswCQYDVQQG EwJOTzEZMBcGA1UEChMQRG5CIE5PUiBCYW5rIEFTQTESMBAGA1UECxMJOTg0ODUxMDA2MSEwHwYD VQQDExhCYW5rSUQgRG5CIE5PUiBCYW5rIENBIDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDOfTQ8FSX9e7TZbsOhE8WRJwh/gvi86ZwFxovyaJo7RjVnVr9OO93D7dWV/nmhimaoeNwy ztata7ye23dosyxd2gfaceq7+9hddjdudr4siyhkx8inmcrlux1t7x5d7ycapvu3rymx1ozwbgag bebq+q+bacp+lo8uijuixtffx51sxhzw+cf2u9hfz8k44miemlfakdamjo6gd9hhsnkor99ebpzi 66nOKmWikdgCn68SHNAVlmfNBERLR1zUNA1sfSCSE3ZyDBn+k/Or7ILT7ojfxLbKCtjhyyP6U+lZ qvepqihcfhdj0gb/r1+a6cfv1gmaxe6spsyjkm93rnalagmbaagjftb7mbiga1udeweb/wqimayb Af8CAQAwDgYDVR0PAQH/BAQDAgEGMBUGA1UdIAQOMAwwCgYIYIRCARABAwEwHwYDVR0jBBgwFoAU asqqxyzfdpewqdhgiboair3vffswhqydvr0obbyeflgohzvqocvzxtpp8cozl9mhyaafma0gcsqg SIb3DQEBBQUAA4IBAQCAUhHwCNWTqJmiMA+vVc2R6Tayg/ABVMcUANYZnN2FH1uG7diqXrjatPne a8k+ipuhjksli0ncteqt1u+sqjrpa95iuxwtfphazi7dpeyr0xz2fn9q8tzyp9ro+dixklqtkr/j ZOHBubTxVM5zE8EfDUJa8vbQovmxSx7QzjQJ6UTcrO4HDRRrXnBZN9xxP7F7DE2HGdgjsI6Ng55E 8UAB36vOuwzZqd3tSLPeYVLk6HzKG0+FrnrBh7BwSKh1xnJ2X7wIbCBGx6AI3qlKYG6YUBrUEnW8 KEjGpEm5HKnQ1GS2KlNUWb598Lz0yRQYumUol0VFpAH3a+9KfnGLuQFA -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer CN: BankID Root CA Issuer OU: BankID Issuer O: FNH og Sparebankforeningen Issuer C: BankID DnB R Bank CA DnB R Bank ASA Valid from: Wed Feb 25 12:52:40 CET 2004 Valid to: Mon Feb 22 12:52:40 CET 2016 Public Key: Basic Constraints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sCA: true - Path length: 0 Certificate Policies Policy OID: Authority Key Identifier 69:24:2A:C5:8C:DF:0C:F7:B0:40:31:E0:89:BA:1A:8A:BD:EF:7D:FB Subject Key Identifier B1:A8:85:95:50:38:25:73:5E:D3:CF:F1:C3:B3:2F:D3:07:C9:A6:85 Key Usage: keycertsign - crlsign RGE (RWAY) - Trusted List ID: TrustServiceStatusList-1 Page 38

39 Thumbprint algorithm: SHA-256 Thumbprint: Service Status F1:64:CA:27:92:27:3E:CA:1D:65:09:11:87:18:C7:09:98:7F:5C:84:49:5B:1D:F6:D0:94:B7:C4:53:7 5:DF:51 Service status description [en] The validity of the supervision assessment has lapsed without the service identified in "Service digital identity" being reassessed. The service is currently not under supervision any more from the date of the current status as the service is understood to have ceased operations. Status Starting Time T00:00:00Z History instance n.1 - Status: undersupervision Service Type Identifier Service Name Certification Authority issuing Qualified Certificates Sertifikatutsteder som utsteder kvalifiserte sertifikater Service digital identities BankID DnB R Bank CA DnB R Bank ASA X509SKI X509 SK I Service Status Status Starting Time saiflva4jxne08/xw7mv0wfjpou= T00:00:00Z RGE (RWAY) - Trusted List ID: TrustServiceStatusList-1 Page 39

40 7 - TSP: Nordea Bank Norge ASA TSP Name Nordea Bank Norge ASA Nordea Bank Norge ASA TSP Trade Name NTR PostalAddress Street Address [ en ] Postboks 1166 Sentrum Locality [ en ] Oslo Postal Code [ en ] 0107 Country ElectronicAddress URI 2.html?WT.svl=footer_common_become-a-customer URI mailto:[email protected] TSP Information URI URI [ en ] URI [ no ] Service : Certification Authority issuing Qualified Certificates Service Type Identifier Service type description [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. Service Name Certification Authority issuing Qualified Certificates Sertifikatutsteder som utsteder kvalifiserte sertifikater Service digital identities RGE (RWAY) - Trusted List ID: TrustServiceStatusList-1 Page 40

41 BankID Nordea Bank CA Nordea Bank Norge ASA X509SKI X509 SK I xsiwagaoyhswjivq/zasoxgx2aw= Certificate fields details Version: 3 Serial Number: 703 X509 Certificate -----BEGIN CERTIFICATE----- MIIFuDCCA6CgAwIBAgICAr8wDQYJKoZIhvcNAQELBQAwXDELMAkGA1UEBhMCTk8xIzAhBgNVBAoM GkZOSCBvZyBTcGFyZWJhbmtmb3JlbmluZ2VuMQ8wDQYDVQQLDAZCYW5rSUQxFzAVBgNVBAMMDkJh bmtjrcbsb290ienbmb4xdta5mtaymta4mjg0ofoxdtixmtaymta4mjg0ofowyzelmakga1uebhmc Tk8xHjAcBgNVBAoMFU5vcmRlYSBCYW5rIE5vcmdlIEFTQTESMBAGA1UECwwJOTExMDQ0MTEwMSAw HgYDVQQDDBdCYW5rSUQgTm9yZGVhIEJhbmsgQ0EgMjCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCC AgoCggIBAOE/v0zr7YCJVO6h5sriFlvULvtVuvr4YI9KLJmG/lvg5tFlP2kexQlnfffzYSp7wuwz Wut3slpr09H7XU5p3hO/NFRVe47rMdul1+zIsD4ZZmDmdFExsb9667YVbH6bBpAOADW1wKinj1Me fpv90zlnatqxd88ufy/x6ktyga77pcays9ifqtvw+t33b4ybmqjaiqpdqojem5hclbqzoivdn0d1 Zh84WgC5/bDR5tr2fGSfeAid7gUZrzZSv/A7ymbFFHXCB74VZs5Ix2dX7rkvUoux4odADSUPibbe M0w5R0s5AdFr0hZ7jCNHM4H3y5jMVP/vQhQMQkCDDBHAO0QCMizKt99zcbYVTvfhf+tnEmkvzxMh ZeC/bqCFJEK+7ghZCLb9d6EoUDqdP9XKhSfNeXGyVhgOK8qvsliEaviK/SF9xkLJRFcwSL4PmeR2 xzefzq/mnbnxzxzqlk8dvj2j0xzz8/at6wcu2nh3njvscu8gr1pnxnrukvffrhebn/zlvaqscbew BDAx8OJBKoRm2I83epMXzO3HLZkwoSwC8DHoJvOFw6K2g/5lY2LT9hRvSg8rSmWN1mhTBKkM5YXQ VNxBjgzzqQyt3/bOhPG1GHLM6ON/l3+EAj7hAaXfYJ/X31M2bC0mnWDC9Mb7UZHAt6Xd596R4elu PvZC4Q1HAgMBAAGjfTB7MBIGA1UdEwEB/wQIMAYBAf8CAQAwFQYDVR0gBA4wDDAKBghghEIBEAED ATAOBgNVHQ8BAf8EBAMCAQYwHwYDVR0jBBgwFoAUoG509THwsBR94n8/psR8b9mEaVwwHQYDVR0O BBYEFMUosAIGjmIbMCYlav8wLDsYF9gMMA0GCSqGSIb3DQEBCwUAA4ICAQByQj5e9s9h4EKk3c6A lgmtlz+0aihy2ka2czq7xmen+dppuar9icroghiv37vf4k/lvla8eo7wkq+dfovzb1tagt6bpgql /70j7WlX9dTDae5XtQfaTx35cjhi/OkLrPmK+pgbUD6LDVNJWy5248r3h5UD6ZiNrnC4JZsewb1+ IJzr3itknbmMO1V4WJ1yNvHxDJ1HpQ1lH7M4DBODUnYtQqSiqDgVNBOeDZVtb+BN9lkT7HquuLXD TFHb472gitamW3kMb6fj1xmeILeU4eTS6pR0vWjJjpSH+pneQIHj24c6tnDrZy5SWhl9m9AzNgga EB7tiW4IfBiMlFdC24QxIOBt+L2wTA/6J4QKCJ1EeYcW5yNTjVRD/iXOzECGbdNZ9clm15guFCkh thi258br1jcipnci+/akjjhgzwqcts12i0l86nijnsdlpoptmxxjy1+pviqsi6uehxhshdo8xmt9 kiru9pgj9rqshy1f5swhk88vknesr9f9kogs46zoclbqo1u1crbdeamc9wwr7bbrdz50sna4l3z7 GmZuiOPr4PwPMtV5f5z0JjhT2KPoJEMQ3uXxfAOBhgR8a0N3PU7iKUoVdhQYlqG5OBWc9DEAoARq IMLP0g7W0mPYWxgtMXjNW12ltgyDWu2g4uZZlHHH8MNKCO/mii70dgOfmA== -----END CERTIFICATE----- Signature algorithm: SHA256withRSA Issuer CN: BankID Root CA Issuer OU: BankID Issuer O: FNH og Sparebankforeningen Issuer C: BankID Nordea Bank CA Nordea Bank Norge ASA Valid from: Wed Oct 21 10:28:48 CEST 2009 Valid to: Thu Oct 21 10:28:48 CEST 2021 RGE (RWAY) - Trusted List ID: TrustServiceStatusList-1 Page 41

42 Public Key: Basic Constraints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sCA: true - Path length: 0 Certificate Policies Policy OID: Authority Key Identifier A0:6E:74:F5:31:F0:B0:14:7D:E2:7F:3F:A6:C4:7C:6F:D9:84:69:5C Subject Key Identifier C5:28:B0:02:06:8E:62:1B:30:26:25:6A:FF:30:2C:3B:18:17:D8:0C Key Usage: keycertsign - crlsign Thumbprint algorithm: SHA-256 Thumbprint: Service Status B2:95:27:F8:3E:7D:99:74:4C:0D:87:46:00:25:34:14:39:C7:AC:90:D7:4A:60:61:DB:A4:4F:E4:7F:5 D:84:CD Service status description [en] The service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is currently under supervision, for compliance with the provisions laid down in the applicable European legislation, by the Member State identified in the "Scheme territory" in which the trust service provider is established. Status Starting Time T00:00:00Z Service (supervisionceased): Certification Authority issuing Qualified Certificates Service Type Identifier Service type description [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. Service Name Certification Authority issuing Qualified Certificates Sertifikatutsteder som utsteder kvalifiserte sertifikater Service digital identities BankID Nordea Bank CA Nordea Bank Norge ASA X509SKI RGE (RWAY) - Trusted List ID: TrustServiceStatusList-1 Page 42

43 X509 SK I 2upcLVH8f8IzZnxnhjCIba/aY= Certificate fields details Version: 3 Serial Number: X509 Certificate -----BEGIN CERTIFICATE----- MIIDujCCAqKgAwIBAgIEPZwqlzANBgkqhkiG9w0BAQUFADBcMQswCQYDVQQGEwJOTzEjMCEGA1UE ChMaRk5IIG9nIFNwYXJlYmFua2ZvcmVuaW5nZW4xDzANBgNVBAsTBkJhbmtJRDEXMBUGA1UEAxMO QmFua0lEIFJvb3QgQ0EwHhcNMDIxMDAzMTEzMTM1WhcNMTQwOTMwMTEzMTM1WjBjMQswCQYDVQQG EwJOTzEeMBwGA1UEChMVTm9yZGVhIEJhbmsgTm9yZ2UgQVNBMRIwEAYDVQQLEwk5MTEwNDQxMTAx IDAeBgNVBAMTF0JhbmtJRCBOb3JkZWEgQmFuayBDQSAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEA99XmP4JXjxyudDCCOCsw7R27G/TEr8t6BwyzZmrFoHY5NnaMu5AqsR87YXBl5VxA AgXl9feecqhw9RTaH83TQl7ghQ74DGYb1mipvL+FQ0X+yG49/N6ami4WGqF0ZxgLoTMu0Cunmg7G KI7fWx4QWd1qyaOjC5GMXBshOysszPnubQcpRJgofRYwjaT4EF6aHA4QlzLez7nvKvN89cAM11W8 lr54bjjl4emmmthdedze7vx6n2rc+vhu0b+3dm8mq807syv/xzrcpmmbbrcesdwlz31rqljaxrrz YXn2oxYJmGPsqxjF4YkmeTUgcSkhwqfutxWR2XRAtS/gIe/VUwIDAQABo30wezASBgNVHRMBAf8E CDAGAQH/AgEAMA4GA1UdDwEB/wQEAwIBBjAVBgNVHSAEDjAMMAoGCGCEQgEQAQMBMB8GA1UdIwQY MBaAFGkkKsWM3wz3sEAx4Im6Goq97337MB0GA1UdDgQWBBTa6lwtUfx/wjNmfGeGMIhto079pjAN BgkqhkiG9w0BAQUFAAOCAQEAQ5dtIvR5EIhbwt8b38SKwDdgBAd3rXIDWH5L36d8sW15JiP9dczN 401++Wi/2JSqBRQtl/qNjTnMjapcgz4iqf4G/TkfDROE4vwLRNP/kMa0P8SfuZJYgDufLFkCA7GF TIVP5BLmvJG2LSSTTa6XLQIn4Cv111iSkBD3AuFdqJKyxWRyy5pCx9EI5JyI6jEzMFJ8J1lg1bBP 6tp77nejmycX4GNPj6VSqThkEbcbLqqQNMtC0uMly0/z7wkYC1MAOY/vUw69GmhuYmzrBTyeMj C+HQCTLHNCGKPtWuERw3gdfvyQf19g6hCwgJX/YAHwdZdvaYbXxpac5ZMB/U/A== -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer CN: BankID Root CA Issuer OU: BankID Issuer O: FNH og Sparebankforeningen Issuer C: BankID Nordea Bank CA Nordea Bank Norge ASA Valid from: Thu Oct 03 13:31:35 CEST 2002 Valid to: Tue Sep 30 13:31:35 CEST 2014 Public Key: Basic Constraints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sCA: true - Path length: 0 Certificate Policies Policy OID: Authority Key Identifier 69:24:2A:C5:8C:DF:0C:F7:B0:40:31:E0:89:BA:1A:8A:BD:EF:7D:FB Subject Key Identifier DA:EA:5C:2D:51:FC:7F:C2:33:66:7C:67:86:30:88:6D:A3:4E:FD:A6 Key Usage: keycertsign - crlsign Thumbprint algorithm: SHA-256 RGE (RWAY) - Trusted List ID: TrustServiceStatusList-1 Page 43

44 Thumbprint: Service Status E2:15:37:DE:FD:DD:53:2F:15:96:80:14:58:82:C0:5A:B4:30:AA:F5:D1:BD:9F:F6:8C:20:87:CF:75: 18:B4:48 Service status description [en] The validity of the supervision assessment has lapsed without the service identified in "Service digital identity" being reassessed. The service is currently not under supervision any more from the date of the current status as the service is understood to have ceased operations. Status Starting Time T00:00:00Z History instance n.1 - Status: undersupervision Service Type Identifier Service Name Certification Authority issuing Qualified Certificates Sertifikatutsteder som utsteder kvalifiserte sertifikater Service digital identities BankID Nordea Bank CA Nordea Bank Norge ASA X509SKI X509 SK I Service Status Status Starting Time 2upcLVH8f8IzZnxnhjCIba/aY= T00:00:00Z RGE (RWAY) - Trusted List ID: TrustServiceStatusList-1 Page 44

45 8 - TSP: Eika Gruppen AS TSP Name Eika Gruppen AS Eika Gruppen AS TSP Trade Name NTR Terra Gruppen AS PostalAddress Street Address [ en ] Postboks 2349 Solli Locality [ en ] Oslo Postal Code [ en ] 0250 Country ElectronicAddress URI URI mailto:[email protected] TSP Information URI URI [ en ] URI [ no ] Service : Certification Authority issuing Qualified Certificates Service Type Identifier Service type description [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. Service Name Certification Authority issuing Qualified Certificates Sertifikatutsteder som utsteder kvalifiserte sertifikater RGE (RWAY) - Trusted List ID: TrustServiceStatusList-1 Page 45

46 Service digital identities BankID Terra Gruppen Bank CA Terra Gruppen AS X509SKI X509 SK I AYZj8PZQANNaZLrFPeiLb/2IL5s= Certificate fields details Version: 3 Serial Number: 1103 X509 Certificate -----BEGIN CERTIFICATE----- MIIFujCCA6KgAwIBAgICBE8wDQYJKoZIhvcNAQELBQAwXDELMAkGA1UEBhMCTk8xIzAhBgNVBAoM GkZOSCBvZyBTcGFyZWJhbmtmb3JlbmluZ2VuMQ8wDQYDVQQLDAZCYW5rSUQxFzAVBgNVBAMMDkJh bmtjrcbsb290ienbmb4xdta5mtexoda5mjyxmfoxdtixmtexoda5mjyxmfowztelmakga1uebhmc Tk8xGTAXBgNVBAoMEFRlcnJhIEdydXBwZW4gQVMxEjAQBgNVBAsMCTk3OTMxOTU2ODEnMCUGA1UE AwweQmFua0lEIFRlcnJhIEdydXBwZW4gQmFuayBDQSAyMIICIjANBgkqhkiG9w0BAQEFAAOCAg8A MIICCgKCAgEAzq0tBXxmZsOlnxw45KIjNtMVxNSFTVv65oYeMDfVEZQmaFU3rSCUKcRQf5TnlIwl OjpLyH9DTBacOnJUEhmrFxDqgbbfGrN38EeHC+yWEpqJLTn7yqfHFPtaEbkLneKhyJ/VOfHcX2 dowksqlauejdvysr7si+tzpxiyin7lnfgnqwo/eeiyvoly9sbwv16tx8wx7z6+rbhowesgjv75i5 S00p/sa1vBBuqjFYuTObWBNPdPaS5mGHmRMrpVFC11KTISp5JWg1tzarFYWycELKSJlsPx3I/oos ArtdX26gEvAsm4/bxMgx4ITHgbRchCJhQELCrkVhApU7Egen0+Vn+Q9Zk0QBC931/mWyGzX2xJI7 kjtgjoqjqnryrcv6rpxkismo3uelddczmloph0bzxdvrjfripb5bskl522iww2cr2sjgd1nfdisv v6c56c4lbwwwvg+hagbgqp1lo9zhbbmkrv3lu/rt5irrobxludbcbnv/xv/npl4nqjzckyaxu4fa CpkxcsxBg1zIXbyjJg9nCEnEzVpcjPtlwWXXxAAxUT+04Y2pQJVKG5N1wmwC2xmftPDO7c1YMjJQ fdefcvk4r53aocoglyw3iv5oxbbg496kql0t7xite6sbkh2nmsxgzfmwlgecdqcqwcqwmvqrpy0w O6eENLwO+g8CAwEAAaN9MHswEgYDVR0TAQH/BAgwBgEB/wIBADAVBgNVHSAEDjAMMAoGCGCEQgEQ AQMBMA4GA1UdDwEB/wQEAwIBBjAfBgNVHSMEGDAWgBSgbnT1MfCwFH3ifz+mxHxv2YRpXDAdBgNV HQ4EFgQUAYZj8PZQANNaZLrFPeiLb/2IL5swDQYJKoZIhvcNAQELBQADggIBADJT9j9sUu+kPohi Hm7OyNHNYhe0dZz6ICwnzKSfDftbuTbQRrWHwcKt6T/2vZrAZofqUQ3znGvRD035UoIWOwdACEZt B91H729z8qIufSdodUfaImX1ECl25U/pKz/3sEH1U3Gee8RF4HsL9/fW9gBI+s6UsbNJrusrx0Di 3WswOJKQ89EdnZpF4Z3yOtogGU6l/ZBk0Hh6WRV8MCNbechf+hcjSjEI/q+Hx+y1Pw06rthc2Vf/ P0G51JL6fMFp29Ef9OSPQOutFX8s26lWykU+a0uAD/pz+R0MhbR4M7WOtfNtK6L5iW/WvAGgrxpA uln7e4vp0hsuexqd4eetm/o43iv9huambdfrirepeeiixfv+vytoidg+gmi3o9iovapvye+cmdck QMAVrMmU29QQ27RQK4xTOoGVBHFQ9rPsyVYE4Ts/7Zg64v+CjBGh3HuxC2/ioRD9hXDd4V13ZRrB PLoPNQi8Iik/dI+jHXW5B+D8zKWtZ4gdSEvlxWMpeOBqjSPmblSivouyo73jT9LOOp6Z0GG90XGc rrytpbqxru2atohl52w07atpztfydjtcu9zmlnapdt1ay01vlxxr9wmfbrggu7jet3tygsbrnvwy ojuzyggbnniv8riv/goucxoyhketubtkph4zlnsjepgtrfvijuohj5tep8ef -----END CERTIFICATE----- Signature algorithm: SHA256withRSA Issuer CN: BankID Root CA Issuer OU: BankID Issuer O: FNH og Sparebankforeningen Issuer C: BankID Terra Gruppen Bank CA Terra Gruppen AS Valid from: Wed Nov 18 10:26:10 CET 2009 RGE (RWAY) - Trusted List ID: TrustServiceStatusList-1 Page 46

47 Valid to: Thu Nov 18 10:26:10 CET 2021 Public Key: Basic Constraints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sCA: true - Path length: 0 Certificate Policies Policy OID: Authority Key Identifier A0:6E:74:F5:31:F0:B0:14:7D:E2:7F:3F:A6:C4:7C:6F:D9:84:69:5C Subject Key Identifier 01:86:63:F0:F6:50:00:D3:5A:64:BA:C5:3D:E8:8B:6F:FD:88:2F:9B Key Usage: keycertsign - crlsign Thumbprint algorithm: SHA-256 Thumbprint: Service Status 75:0A:22:72:9C:E2:BE:9A:42:22:4C:25:8A:B1:11:15:50:80:22:A1:93:90:5D:DB:39:9A:32:9A:26:6 3:50:17 Service status description [en] The service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is currently under supervision, for compliance with the provisions laid down in the applicable European legislation, by the Member State identified in the "Scheme territory" in which the trust service provider is established. Status Starting Time T00:00:00Z Service (supervisionceased): Certification Authority issuing Qualified Certificates Service Type Identifier Service type description [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. Service Name Certification Authority issuing Qualified Certificates Sertifikatutsteder som utsteder kvalifiserte sertifikater Service digital identities BankID Terra Gruppen Bank CA Terra Gruppen AS RGE (RWAY) - Trusted List ID: TrustServiceStatusList-1 Page 47

48 X509SKI X509 SK I Q9OCttcM9MSgjwoEtqRmqkK55Kg= Certificate fields details Version: 3 Serial Number: X509 Certificate -----BEGIN CERTIFICATE----- MIIDvDCCAqSgAwIBAgIEQDShwTANBgkqhkiG9w0BAQUFADBcMQswCQYDVQQGEwJOTzEjMCEGA1UE ChMaRk5IIG9nIFNwYXJlYmFua2ZvcmVuaW5nZW4xDzANBgNVBAsTBkJhbmtJRDEXMBUGA1UEAxMO QmFua0lEIFJvb3QgQ0EwHhcNMDQwMjE5MTE0NTA1WhcNMTYwMjE2MTE0NTA1WjBlMQswCQYDVQQG EwJOTzEZMBcGA1UEChMQVGVycmEgR3J1cHBlbiBBUzESMBAGA1UECxMJOTc5MzE5NTY4MScwJQYD VQQDEx5CYW5rSUQgVGVycmEgR3J1cHBlbiBCYW5rIENBIDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+S66tH7igb+tuhHpy2zCFOZcQxNycqoZKMwrg9CP5Axo9SHCpnXGum5EMT0CZ gnwmwn7rsnxnmdeg92jkeoupkbouho6zpzt7olkwmugc1fj7w1kprdhiaxwwoamhabem8079tchr abrqq3s2rkozh1eash7qgr+dopv8ablndxbqximxuzrpvrtdg/m1k2yyeoe+3lcsaldo00zvtfqr XA9mWa+BDnT5WXcnfkwwN8DaHctf+RQKrwUUzXi16HCF45f/VawqBZG4grAATiQeKAjWZUltIAJJ XT9QY31hWkK/DdnzN0WdoF7pRDu3tUK1iRWCtEsQ9Jc+FzF+zEfPAgMBAAGjfTB7MBIGA1UdEwEB /wqimaybaf8caqawdgydvr0paqh/baqdagegmbuga1udiaqomawwcgyiyircarabawewhwydvr0j BBgwFoAUaSQqxYzfDPewQDHgiboair3vffswHQYDVR0OBBYEFEPTgrbXDPTEoI8KBLakZqpCueSo MA0GCSqGSIb3DQEBBQUAA4IBAQAiPG6zqna5SZG6bwME/qLOzquRj4EQImIETs/T6kr68EZqbBJQ 0SCOio8XbKeyOgIMA7IxlyKKqMHOcyIBM0M/fwRxeDr3A8ttX2yIEQR/NKgPqQI8XQEvZ4BsV/Y1 ABCrlMKMRqEBMYhhXeb6iSjYgAu5+Bs/CF4jWTHi3e0kJ1CXawoXk956NS5RCOVSpeZDUuFzBxFO rjtkp0fjbfsa+am3n5br6jysgbhz06zibntdexp6qvdomapmcq+apgfdvwx35hvp+ahewwnml6nh sucv9glnn04rzt98qapuvqmke/voaecc6q54tvptbhom5nx6q26bwwesoayucshl -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer CN: BankID Root CA Issuer OU: BankID Issuer O: FNH og Sparebankforeningen Issuer C: BankID Terra Gruppen Bank CA Terra Gruppen AS Valid from: Thu Feb 19 12:45:05 CET 2004 Valid to: Tue Feb 16 12:45:05 CET 2016 Public Key: Basic Constraints 30:82:01:22:30:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:03:82:01:0F:00:30:82:01:0A:02:82:01:01:00:BE:4B:AE:AD:1F:B8:A0:6F:EB:6E:84:7A:72:DB:30:85:39:97:10:C4:DC:9C:AA:86:4A:33:0A:E0:F4:23:F9:03:1A:3 D:48:70:A9:9D:71:AE:9B:91:0C:4F:40:99:82:75:8C:C0:DE:EB:B0:D5:CD:31:D1:06:F7:68:CA:12:8B:8F:29:B3:AE:1E:8E:B3:3D:94:FB:A0:B9:16:31:41:9C:D4:52:7B:C3:59:0F:44:38:62:69:75:B0:39:A9:A1:01:B7:A6:F3:4 E:FD:B4:28:51:68:14:50:AB:7B:36:44:AA:33:1F:51:00:B0:7E:EA:19:1F:83:A0:F5:7C:68:19:4D:75:76:D0:5E:23:31:51:94:4F:BE:B4:C3:83:F9:B5:2B:6C:98:78:E1:3E:DE:50:92:00:B7:4E:D3:4C:D5:4C:54:2B:5C:0F:66:59:A F:81:0E:74:F9:59:77:27:7E:4C:30:37:C0:DA:1D:CB:5F:F9:14:0A:AF:05:14:CD:78:B5:E8:70:85:E3:97:FF:55:AC:2A:05:91:B8:82:B0:00:4E:24:1E:28:08:D6:65:49:6D:20:02:49:5D:3F:50:63:7D:61:5A:42:BF:0D:D9:F3:37:45 :9D:A0:5E:E9:44:3B:B7:B5:42:B5:89:15:82:B4:4B:10:F4:97:3E:17:31:7E:CC:47:CF:02:03:01:00:01 IsCA: true - Path length: 0 Certificate Policies Policy OID: Authority Key Identifier 69:24:2A:C5:8C:DF:0C:F7:B0:40:31:E0:89:BA:1A:8A:BD:EF:7D:FB Subject Key Identifier 43:D3:82:B6:D7:0C:F4:C4:A0:8F:0A:04:B6:A4:66:AA:42:B9:E4:A8 Key Usage: keycertsign - crlsign RGE (RWAY) - Trusted List ID: TrustServiceStatusList-1 Page 48

49 Thumbprint algorithm: SHA-256 Thumbprint: Service Status 20:94:34:40:33:3E:BB:54:56:80:BF:76:C2:5F:4F:06:3B:28:7F:02:CB:8F:CB:BC:39:DD:EE:34:7A: E2:A2:00 Service status description [en] The validity of the supervision assessment has lapsed without the service identified in "Service digital identity" being reassessed. The service is currently not under supervision any more from the date of the current status as the service is understood to have ceased operations. Status Starting Time T00:00:00Z History instance n.1 - Status: undersupervision Service Type Identifier Service Name Certification Authority issuing Qualified Certificates Sertifikatutsteder som utsteder kvalifiserte sertifikater Service digital identities BankID Terra Gruppen Bank CA Terra Gruppen AS X509SKI X509 SK I Service Status Status Starting Time Q9OCttcM9MSgjwoEtqRmqkK55Kg= T00:00:00Z RGE (RWAY) - Trusted List ID: TrustServiceStatusList-1 Page 49

50 9 - TSP: Alliansesamarbeidet SpareBank 1 DA TSP Name Alliansesamarbeidet SpareBank 1 DA Alliansesamarbeidet SpareBank 1 DA TSP Trade Name NTR Sparebank 1 Utvikling DA PostalAddress Street Address [ en ] Postboks 778 Sentrum Locality [ en ] Oslo Postal Code [ en ] 0106 Country ElectronicAddress URI URI mailto:[email protected] TSP Information URI URI [ en ] URI [ no ] Service : Certification Authority issuing Qualified Certificates Service Type Identifier Service type description [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. Service Name Certification Authority issuing Qualified Certificates Sertifikatutsteder som utsteder kvalifiserte sertifikater RGE (RWAY) - Trusted List ID: TrustServiceStatusList-1 Page 50

51 Service digital identities BankID SpareBank 1 Bank CA Alliansesamarbeidet SpareBank 1 DA X509SKI X509 SK I uc4u8r9tgmjge8gmk7elunk1wqy= Certificate fields details Version: 3 Serial Number: 403 X509 Certificate -----BEGIN CERTIFICATE----- MIIFyjCCA7KgAwIBAgICAZMwDQYJKoZIhvcNAQELBQAwXDELMAkGA1UEBhMCTk8xIzAhBgNVBAoM GkZOSCBvZyBTcGFyZWJhbmtmb3JlbmluZ2VuMQ8wDQYDVQQLDAZCYW5rSUQxFzAVBgNVBAMMDkJh bmtjrcbsb290ienbmb4xdta5mdkzmda4mzmwmfoxdtixmdkzmda4mzmwmfowdtelmakga1uebhmc Tk8xKzApBgNVBAoMIkFsbGlhbnNlc2FtYXJiZWlkZXQgU3BhcmVCYW5rIDEgREExEjAQBgNVBAsM CTk4NjQwMTU5ODElMCMGA1UEAwwcQmFua0lEIFNwYXJlQmFuayAxIEJhbmsgQ0EgMjCCAiIwDQYJ KoZIhvcNAQEBBQADggIPADCCAgoCggIBAJeuiamPt3wBUgZPmmho39h439tEJE9zVYS9KjdkZOjR kaqq+tuwixfxszr7w3p0swtmyyx1nrzrqt5qbq6ji7kkh++8cp5abbrzipevwdisiq4lz8mbajrc falajuu9igorfr3hqirrgmyab8lfftcsfblwoypyrlkixurppxroxccq23a3zdnce6406pcfzwnz mxig/5bi02me1qt/nk6+p0bc19xfcg5mibbvlqhk4yws3jqpdqjpwfkjcfa0bu9qp1f2qszdcplf xf+gvi1lltzje8aalbaibcecybanbek5xmogy1mrk2xndlo/4j29vvrffgx860crj7gokoqy33bx MkiHZzx1sgtjE18HP/lbFVL2zgkFgzRc85UM6RKq0+ELOww2ythcALC1417iZ2vNsenpPnONK8qi qoahcasjmjns3oefdps6ipsb1cnw+vwkmwix/sfm7jic6ht/okoq6fgjrinl5/ngi2g5pxk08/pf 7z+eEZ+6IcWExLVC+9qiA7HyHRpB3RxIYD4UUwIGJaXj9mWxDvedR5MDyhA87c8EOTGMFdrjJ7G1 w7szpvr60ckdbawtqdd4dr2xr+6nbrcvyzsvtxnwczqf5yxg29z42fnkr9mmcbc39hgtcreghgft fobn+5/xhra8movxjif8qpntwlibx2fjagmbaagjftb7mbiga1udeweb/wqimaybaf8caqawfqyd VR0gBA4wDDAKBghghEIBEAEDATAOBgNVHQ8BAf8EBAMCAQYwHwYDVR0jBBgwFoAUoG509THwsBR9 4n8/psR8b9mEaVwwHQYDVR0OBBYEFLnOFPEfbRpiRnvBjCu3pbp5NcKmMA0GCSqGSIb3DQEBCwUA A4ICAQAvHFCqMzdllVcEcEgdXV0Y5temTOiekQcp6r8qCmSOwRv0UhP+igzRHv6N/iWsUBkImaql XxUxZUPUSoPtdJQLnHtNUERmW5GHvL5bc2zhlJF0d2o5u8wh/TMdGBKLvbYzmiFBi0DNhv9hg+JI p+pfi/qrwrhupp9574f8vdd0gemjgxnpsj6fvcyguwbh97hkufzsgrhzvmonn6kcftfomgeu6q ekmwxzsf+scpllvozbh4nqcpkxfbur5wobkfe+fhwgk3j1hgg4nxav7lldr6wgn8o7qjpt8auzft rk8xmlf7lyrronw7zxf2enhwuxexab9xzu6l1ks1l7kauioe7mi0h5g1b3762qyvc2o5iibzlfkn uphcdbgb0rrw1sgsgkxtvszq4vftqo0dtn4motr75i5dvmxct/wsfkivx04p01tg7bipfuz/adlt X2iSZpH4YNANtSvSCmt5ZwoEeD1g7tud0KR9Bf7Daa6cDGHbMOSxbv8oNE2RCkUcJVdEg2wd7qkg ujrlganu0dq8xjr0w5m9cjpzz03er9q+vip0igdvednppxwhvgzidcjuizcyjmuukws5a9kzlew2 r4qzaeoilyyddugfq0gkr3n3b19xpymevcvhne9ynf5a1hrabwefoirrl2qxxurfuvwuobj5ydlw cx7m4w== -----END CERTIFICATE----- Signature algorithm: SHA256withRSA Issuer CN: BankID Root CA Issuer OU: BankID Issuer O: FNH og Sparebankforeningen Issuer C: BankID SpareBank 1 Bank CA Alliansesamarbeidet SpareBank 1 DA Valid from: Wed Sep 30 10:33:00 CEST 2009 RGE (RWAY) - Trusted List ID: TrustServiceStatusList-1 Page 51

52 Valid to: Thu Sep 30 10:33:00 CEST 2021 Public Key: Basic Constraints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sCA: true - Path length: 0 Certificate Policies Policy OID: Authority Key Identifier A0:6E:74:F5:31:F0:B0:14:7D:E2:7F:3F:A6:C4:7C:6F:D9:84:69:5C Subject Key Identifier B9:CE:14:F1:1F:6D:1A:62:46:7B:C1:8C:2B:B7:A5:BA:79:35:C2:A6 Key Usage: keycertsign - crlsign Thumbprint algorithm: SHA-256 Thumbprint: Service Status 44:76:37:9C:BB:1C:56:4C:F9:CC:C4:B2:5E:86:3E:06:20:DD:DF:E8:23:FE:D9:47:25:CC:1B:A1:E 1:39:54:DC Service status description [en] The service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is currently under supervision, for compliance with the provisions laid down in the applicable European legislation, by the Member State identified in the "Scheme territory" in which the trust service provider is established. Status Starting Time T00:00:00Z Service (supervisionceased): Certification Authority issuing Qualified Certificates Service Type Identifier Service type description [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. Service Name Certification Authority issuing Qualified Certificates Sertifikatutsteder som utsteder kvalifiserte sertifikater Service digital identities BankID SpareBank 1 Bank CA SpareBank 1 Utvikling DA RGE (RWAY) - Trusted List ID: TrustServiceStatusList-1 Page 52

53 X509SKI X509 SK I ZPGchVPX4l9XcZCjiIyDONA1EJI= Certificate fields details Version: 3 Serial Number: X509 Certificate -----BEGIN CERTIFICATE----- MIIDwjCCAqqgAwIBAgIEQH5o0jANBgkqhkiG9w0BAQUFADBcMQswCQYDVQQGEwJOTzEjMCEGA1UE ChMaRk5IIG9nIFNwYXJlYmFua2ZvcmVuaW5nZW4xDzANBgNVBAsTBkJhbmtJRDEXMBUGA1UEAxMO QmFua0lEIFJvb3QgQ0EwHhcNMDQwNDE1MTA0OTU0WhcNMTYwNDEyMTA0OTU0WjBrMQswCQYDVQQG EwJOTzEhMB8GA1UEChMYU3BhcmVCYW5rIDEgVXR2aWtsaW5nIERBMRIwEAYDVQQLEwk5ODY0MDE1 OTgxJTAjBgNVBAMTHEJhbmtJRCBTcGFyZUJhbmsgMSBCYW5rIENBIDEwggEiMA0GCSqGSIb3DQEB AQUAA4IBDwAwggEKAoIBAQC1bEbAFsCtgKyVsyd+8UwFFEwkdiBLvqWz7A1Z/725QLVJPbpWFn/w gzynahiq2bmmrvzydt9i/6fgvrwszimxnnvpgqdsrti5nmqv2nr6t67gaiq8d9bbcqjxvdeogh+0 p1qxg+h71hoxd6hsdamliogxoini0lqdtfnhszsujcd19ixjq2poxrxyvjnjsqxtzdlwl3tdvjnl 9tdQQXbCwUX+s8tozDgTstEu8S+wuj0iHK0yVA3yiogZsd3qaYusNKACjNQJtDXhjccdh/OcKQzP CsEWItGi3iRvMW7c7vFv1x+4ZIJLSXRtgqODD5KGi5ZnTjIjH2ixvYgiIzupAgMBAAGjfTB7MBIG A1UdEwEB/wQIMAYBAf8CAQAwDgYDVR0PAQH/BAQDAgEGMBUGA1UdIAQOMAwwCgYIYIRCARABAwEw HwYDVR0jBBgwFoAUaSQqxYzfDPewQDHgiboair3vffswHQYDVR0OBBYEFGTxnIVT1+JfV3GQo4iM gzjqnrcsma0gcsqgsib3dqebbquaa4ibaqclpcwciqkap+sxo/hxdxtzro5zfefi47bawqh//3jk zl9pfpaodr1uq9wtmcvm8aazio+upcc3tci0p3kshrouhs8ygf9von9mdynukz/ul5pxjo8tjz0i uz1ji80qjuckpheytt7v6frzd6thymm9y2b1tnlaite6xtoc/8nnkblmammbkswjjuctqdeocyfs zliob0nede/yhzm2do1loerzb5cf4aojvbdk0z1lhrnacr3dmccccwdpcgblp2dbgt1olwbzbfna klro2zasjidkvixxtryshhuwme3y/trgaxs0j0pyuz8l7bh812yx1ejt+b8oxkjbti24zrkh -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer CN: BankID Root CA Issuer OU: BankID Issuer O: FNH og Sparebankforeningen Issuer C: BankID SpareBank 1 Bank CA SpareBank 1 Utvikling DA Valid from: Thu Apr 15 12:49:54 CEST 2004 Valid to: Tue Apr 12 12:49:54 CEST 2016 Public Key: Basic Constraints 30:82:01:22:30:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:03:82:01:0F:00:30:82:01:0A:02:82:01:01:00:B5:6C:46:C0:16:C0:AD:80:AC:95:B3:27:7E:F1:4C:05:14:4C:24:76:20:4B:BE:A5:B3:EC:0D:59:FF:BD:B9:40:B5:49: 3D:BA:56:16:7F:F0:83:36:0D:68:78:90:D8:13:0C:AE:FC:D8:75:3F:48:FF:A7:C6:BE:B5:92:CE:23:31:34:DB:CF:82:A7:52:45:32:39:34:C4:15:D8:D4:7A:4F:AE:E0:00:84:3C:0F:D6:DB:71:08:D7:55:D7:8E:18:7F:B4:A7:54:1 7:1B:E1:FB:D4:7A:17:77:A1:D2:0C:03:0B:88:E8:31:A0:89:E2:D0:B4:03:B5:F9:C7:4B:34:94:8C:27:75:F6:25:E3:43:6A:68:C5:15:D8:56:39:C9:49:05:D3:65:D2:D6:97:74:C3:BE:39:CB:F6:D7:50:41:76:C2:C1:45:FE:B3:CB: 68:CC:38:13:B2:D1:2E:F1:2F:B0:BA:3D:22:1C:AD:32:54:0D:F2:8A:88:19:B1:DD:EA:69:8B:AC:34:A0:02:8C:D4:09:B4:35:E1:8D:C7:1D:87:F3:9C:29:0C:CF:0A:C1:16:22:D1:A2:DE:24:6F:31:6E:DC:EE:F1:6F:D7:1F:B8: 64:82:4B:49:74:6D:82:A3:83:0F:92:86:8B:96:67:4E:32:23:1F:68:B1:BD:88:22:23:3B:A9:02:03:01:00:01 IsCA: true - Path length: 0 Certificate Policies Policy OID: Authority Key Identifier 69:24:2A:C5:8C:DF:0C:F7:B0:40:31:E0:89:BA:1A:8A:BD:EF:7D:FB Subject Key Identifier 64:F1:9C:85:53:D7:E2:5F:57:71:90:A3:88:8C:83:38:D0:35:10:92 Key Usage: keycertsign - crlsign RGE (RWAY) - Trusted List ID: TrustServiceStatusList-1 Page 53

54 Thumbprint algorithm: SHA-256 Thumbprint: Service Status E4:91:7C:CD:74:A1:1D:8C:F1:E8:3B:30:49:D2:DD:2B:76:8E:98:19:1C:14:40:F1:18:61:B7:2A:64: DF:4F:83 Service status description [en] The validity of the supervision assessment has lapsed without the service identified in "Service digital identity" being reassessed. The service is currently not under supervision any more from the date of the current status as the service is understood to have ceased operations. Status Starting Time T00:00:00Z History instance n.1 - Status: undersupervision Service Type Identifier Service Name Certification Authority issuing Qualified Certificates Sertifikatutsteder som utsteder kvalifiserte sertifikater Service digital identities BankID SpareBank 1 Bank CA SpareBank 1 Utvikling DA X509SKI X509 SK I Service Status Status Starting Time ZPGchVPX4l9XcZCjiIyDONA1EJI= T00:00:00Z RGE (RWAY) - Trusted List ID: TrustServiceStatusList-1 Page 54

55 10 - TSP: SEB Privatbanken ASA TSP Name SEB Privatbanken ASA SEB Privatbanken ASA TSP Trade Name NTR PostalAddress Street Address [ en ] Postboks 2333 Solli Locality [ en ] Oslo Postal Code [ en ] 0201 Country ElectronicAddress URI URI mailto:[email protected] TSP Information URI URI [ en ] URI [ no ] Service (supervisionceased): Certification Authority issuing Qualified Certificates Service Type Identifier Service type description [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. Service Name Certification Authority issuing Qualified Certificates Sertifikatutsteder som utsteder kvalifiserte sertifikater Service digital identities RGE (RWAY) - Trusted List ID: TrustServiceStatusList-1 Page 55

56 Certificate fields details Version: 3 Serial Number: 603 X509 Certificate -----BEGIN CERTIFICATE----- MIIFtDCCA5ygAwIBAgICAlswDQYJKoZIhvcNAQELBQAwXDELMAkGA1UEBhMCTk8xIzAhBgNVBAoM GkZOSCBvZyBTcGFyZWJhbmtmb3JlbmluZ2VuMQ8wDQYDVQQLDAZCYW5rSUQxFzAVBgNVBAMMDkJh bmtjrcbsb290ienbmb4xdta5mtaxnda4mjkwnloxdtixmtaxnda4mjkwnlowxzelmakga1uebhmc Tk8xHTAbBgNVBAoMFFNFQiBQcml2YXRiYW5rZW4gQVNBMRIwEAYDVQQLDAk5ODI1ODI3MDkxHTAb BgNVBAMMFEJhbmtJRCBTRUIgQmFuayBDQSAyMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKC AgEArqWxMaE8O5icZCxTXFQsMbBfzN+HTEUeeKuPkuWJcjWNypKug+nzhfCnqbXMcIbmXPv9sjOv 4lXbsKFrNmrYncFZK+zSVpjGwaDNqUrXseGlupMapOCUxLBj8DL8KcCYURDFBe5be+Cr1pGjiSbJ qnnb3asmums9et3zmjfn+o1uuh/wshotilkc6zfcpeyfvkg7rdvmkj2pfcsmdciqjvihpvmb2wws sz6lzdob9h4bly4lvogzuwacye+t0ph4m6b4nntqi+tuytzioqjhtlomovi3ivr1bi7cu5rd49xq OdVrrQ7QUxYxaKTiyWiJgCkgkAl+l27HEcpZpzz/ev9wZxaKFaxbSE1BYSZv+LmQVBFW4mWYG/Zy Fr4EkWKLdt2Mo93G0l356R6otN3B0lKyJFFbU4ybunwNIk5kB+rzTOWJ/0g0BTM+Jblb+nLPcHlF x0g6lbbgf6bzvfwzypvjyqmkvi9wlwse4mobksynk2jnvzepfddrol0txawxtaw8hom5pnng8iwf 2hE+tU2q7r8ph2lQxpRYNCDZxi5JhLW7sI2uAHVcf1lbSSbfwdeYD/3lRPwHPaPMtxmGPoNdPig9 CxAFI2zHlKqSL2VSl07brAqRteXR23YP7p0kmF4gLEIu+YBxnThcnWqQO33UXKQ1/+DNMOV7/8yj 0W8CAwEAAaN9MHswEgYDVR0TAQH/BAgwBgEB/wIBADAVBgNVHSAEDjAMMAoGCGCEQgEQAQMBMA4G A1UdDwEB/wQEAwIBBjAfBgNVHSMEGDAWgBSgbnT1MfCwFH3ifz+mxHxv2YRpXDAdBgNVHQ4EFgQU 6NSHQC1bPSZyX119QtsIQ2PtMaYwDQYJKoZIhvcNAQELBQADggIBADzbe+pMJ6u4a+qNTmBnKpi1 Z8XvpkioLpEVnpl/VqUSAjs5uG1RvjTnSPp/GHOfwQ7XjASVyrDP6gJYcquvJVXic1TJ2hdI/TsJ FJoxk8p5JIHbuSknEYwR0y1cZIrEQgu+FlpEtOZFpXiU3QhnMWMuFaSrrbq24AVhSd2n3QWgtDMh z1dh5gucbok/aj2twgrpxnuubgbgzwkly0ofhm2h/g5zxgp2w8rv9t+wvt24sexdlos9htbt91lu LEkNDE1/Yd8kvSy7K3/o5ie+/OJ7uapLXBFE5bDCvdeqkHYZDzw8tcdApuf3ZueTwdn3i+tdtEym phycwvekb9fgn9rgxssh19flgwtju53ggo6uhjtixn8thm/e8olhckktti7mnmk9jkcbqrxkx7+f GpF8b4s7KIMRJyjYKLrm5ncW/fw+tYsZH7vqAoJTho/rksodBZFMLoZAsuJeMgBiOTB5GIJZ2Kg8 BLA7Ty5Hl4cb87FkPJKpxjcAAZda+WY4aOL1TH4Oe+rpF5popGjLycEifYlRPaBNXPutbypGC1yR We2aMCLD4KZIYbXQvjwsd6f6B82JA6t8dsiHokDzQNvLOu2aGN1PgYsrSUgHVai6m7DRV0eSw3kO VvO5QbdB1D7DacAftzmJHjpjCsKc+iBvGsp7EoQFkRFmo/uUPVMm -----END CERTIFICATE----- Signature algorithm: SHA256withRSA Issuer CN: BankID Root CA Issuer OU: BankID Issuer O: FNH og Sparebankforeningen Issuer C: BankID SEB Bank CA SEB Privatbanken ASA Valid from: Wed Oct 14 10:29:06 CEST 2009 Valid to: Thu Oct 14 10:29:06 CEST 2021 Public Key: Basic Constraints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sCA: true - Path length: 0 Certificate Policies Policy OID: Authority Key Identifier A0:6E:74:F5:31:F0:B0:14:7D:E2:7F:3F:A6:C4:7C:6F:D9:84:69:5C Subject Key Identifier E8:D4:87:40:2D:5B:3D:26:72:5F:5D:7D:42:DB:08:43:63:ED:31:A6 Key Usage: keycertsign - crlsign RGE (RWAY) - Trusted List ID: TrustServiceStatusList-1 Page 56

57 Thumbprint algorithm: SHA-256 Thumbprint: A4:A0:D9:4D:FF:2F:30:3C:6A:DC:B4:DB:04:1B:81:4E:CB:77:4A:86:BF:F0:2B:4E:30:2E:14:6B:C 9:56:48:A9 X509SKI X509 SK I 6NSHQC1bPSZyX119QtsIQ2PtMaY= BankID SEB Bank CA SEB Privatbanken ASA Service Status Service status description [en] The validity of the supervision assessment has lapsed without the service identified in "Service digital identity" being reassessed. The service is currently not under supervision any more from the date of the current status as the service is understood to have ceased operations. Status Starting Time T22:00:00Z History instance n.1 - Status: undersupervision Service Type Identifier Service Name Certification Authority issuing Qualified Certificates Sertifikatutsteder som utsteder kvalifiserte sertifikater Service digital identities Certificate fields details Version: 3 Serial Number: 603 RGE (RWAY) - Trusted List ID: TrustServiceStatusList-1 Page 57

58 X509 Certificate -----BEGIN CERTIFICATE----- MIIFtDCCA5ygAwIBAgICAlswDQYJKoZIhvcNAQELBQAwXDELMAkGA1UEBhMCTk8xIzAhBgNVBAoM GkZOSCBvZyBTcGFyZWJhbmtmb3JlbmluZ2VuMQ8wDQYDVQQLDAZCYW5rSUQxFzAVBgNVBAMMDkJh bmtjrcbsb290ienbmb4xdta5mtaxnda4mjkwnloxdtixmtaxnda4mjkwnlowxzelmakga1uebhmc Tk8xHTAbBgNVBAoMFFNFQiBQcml2YXRiYW5rZW4gQVNBMRIwEAYDVQQLDAk5ODI1ODI3MDkxHTAb BgNVBAMMFEJhbmtJRCBTRUIgQmFuayBDQSAyMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKC AgEArqWxMaE8O5icZCxTXFQsMbBfzN+HTEUeeKuPkuWJcjWNypKug+nzhfCnqbXMcIbmXPv9sjOv 4lXbsKFrNmrYncFZK+zSVpjGwaDNqUrXseGlupMapOCUxLBj8DL8KcCYURDFBe5be+Cr1pGjiSbJ qnnb3asmums9et3zmjfn+o1uuh/wshotilkc6zfcpeyfvkg7rdvmkj2pfcsmdciqjvihpvmb2wws sz6lzdob9h4bly4lvogzuwacye+t0ph4m6b4nntqi+tuytzioqjhtlomovi3ivr1bi7cu5rd49xq OdVrrQ7QUxYxaKTiyWiJgCkgkAl+l27HEcpZpzz/ev9wZxaKFaxbSE1BYSZv+LmQVBFW4mWYG/Zy Fr4EkWKLdt2Mo93G0l356R6otN3B0lKyJFFbU4ybunwNIk5kB+rzTOWJ/0g0BTM+Jblb+nLPcHlF x0g6lbbgf6bzvfwzypvjyqmkvi9wlwse4mobksynk2jnvzepfddrol0txawxtaw8hom5pnng8iwf 2hE+tU2q7r8ph2lQxpRYNCDZxi5JhLW7sI2uAHVcf1lbSSbfwdeYD/3lRPwHPaPMtxmGPoNdPig9 CxAFI2zHlKqSL2VSl07brAqRteXR23YP7p0kmF4gLEIu+YBxnThcnWqQO33UXKQ1/+DNMOV7/8yj 0W8CAwEAAaN9MHswEgYDVR0TAQH/BAgwBgEB/wIBADAVBgNVHSAEDjAMMAoGCGCEQgEQAQMBMA4G A1UdDwEB/wQEAwIBBjAfBgNVHSMEGDAWgBSgbnT1MfCwFH3ifz+mxHxv2YRpXDAdBgNVHQ4EFgQU 6NSHQC1bPSZyX119QtsIQ2PtMaYwDQYJKoZIhvcNAQELBQADggIBADzbe+pMJ6u4a+qNTmBnKpi1 Z8XvpkioLpEVnpl/VqUSAjs5uG1RvjTnSPp/GHOfwQ7XjASVyrDP6gJYcquvJVXic1TJ2hdI/TsJ FJoxk8p5JIHbuSknEYwR0y1cZIrEQgu+FlpEtOZFpXiU3QhnMWMuFaSrrbq24AVhSd2n3QWgtDMh z1dh5gucbok/aj2twgrpxnuubgbgzwkly0ofhm2h/g5zxgp2w8rv9t+wvt24sexdlos9htbt91lu LEkNDE1/Yd8kvSy7K3/o5ie+/OJ7uapLXBFE5bDCvdeqkHYZDzw8tcdApuf3ZueTwdn3i+tdtEym phycwvekb9fgn9rgxssh19flgwtju53ggo6uhjtixn8thm/e8olhckktti7mnmk9jkcbqrxkx7+f GpF8b4s7KIMRJyjYKLrm5ncW/fw+tYsZH7vqAoJTho/rksodBZFMLoZAsuJeMgBiOTB5GIJZ2Kg8 BLA7Ty5Hl4cb87FkPJKpxjcAAZda+WY4aOL1TH4Oe+rpF5popGjLycEifYlRPaBNXPutbypGC1yR We2aMCLD4KZIYbXQvjwsd6f6B82JA6t8dsiHokDzQNvLOu2aGN1PgYsrSUgHVai6m7DRV0eSw3kO VvO5QbdB1D7DacAftzmJHjpjCsKc+iBvGsp7EoQFkRFmo/uUPVMm -----END CERTIFICATE----- Signature algorithm: SHA256withRSA Issuer CN: BankID Root CA Issuer OU: BankID Issuer O: FNH og Sparebankforeningen Issuer C: BankID SEB Bank CA SEB Privatbanken ASA Valid from: Wed Oct 14 10:29:06 CEST 2009 Valid to: Thu Oct 14 10:29:06 CEST 2021 Public Key: Basic Constraints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sCA: true - Path length: 0 Certificate Policies Policy OID: Authority Key Identifier A0:6E:74:F5:31:F0:B0:14:7D:E2:7F:3F:A6:C4:7C:6F:D9:84:69:5C Subject Key Identifier E8:D4:87:40:2D:5B:3D:26:72:5F:5D:7D:42:DB:08:43:63:ED:31:A6 Key Usage: keycertsign - crlsign Thumbprint algorithm: SHA-256 Thumbprint: A4:A0:D9:4D:FF:2F:30:3C:6A:DC:B4:DB:04:1B:81:4E:CB:77:4A:86:BF:F0:2B:4E:30:2E:14:6B:C 9:56:48:A9 RGE (RWAY) - Trusted List ID: TrustServiceStatusList-1 Page 58

59 X509SKI X509 SK I 6NSHQC1bPSZyX119QtsIQ2PtMaY= BankID SEB Bank CA SEB Privatbanken ASA Service Status Status Starting Time T00:00:00Z Service (supervisionceased): Certification Authority issuing Qualified Certificates Service Type Identifier Service type description [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. Service Name Certification Authority issuing Qualified Certificates Sertifikatutsteder som utsteder kvalifiserte sertifikater Service digital identities BankID SEB Privatbanken Bank CA SEB Privatbanken ASA X509SKI X509 SK I IWIpkcpSaSwr/4Z6UUiz6tVxmVk= Certificate fields details Version: 3 RGE (RWAY) - Trusted List ID: TrustServiceStatusList-1 Page 59

60 Serial Number: X509 Certificate -----BEGIN CERTIFICATE----- MIIDwzCCAqugAwIBAgIERRzzaTANBgkqhkiG9w0BAQUFADBcMQswCQYDVQQGEwJOTzEjMCEGA1UE ChMaRk5IIG9nIFNwYXJlYmFua2ZvcmVuaW5nZW4xDzANBgNVBAsTBkJhbmtJRDEXMBUGA1UEAxMO QmFua0lEIFJvb3QgQ0EwHhcNMDYwOTI5MTAyMDI1WhcNMTgwOTI2MTAyMDI1WjBsMQswCQYDVQQG EwJOTzEdMBsGA1UEChMUU0VCIFByaXZhdGJhbmtlbiBBU0ExEjAQBgNVBAsTCTk4MjU4MjcwOTEq MCgGA1UEAxMhQmFua0lEIFNFQiBQcml2YXRiYW5rZW4gQmFuayBDQSAxMIIBIjANBgkqhkiG9w0B AQEFAAOCAQ8AMIIBCgKCAQEAr4TT+d65Ainhjnl/q0K65mMzce32d88W3ItZ1n7xO1V/vOtdY3te MDnZYsp222kQf/deBlJYquURmRguJuLMUbO3G4Pxzv+A2SOlBxshd/xtC4ZROdkWDtpgOM5RfHfu DHX17GwxJef/D16NYBW7Z9mqLz+cSIGxOLjctV2ebuHzzm4ANL9BCnW5ewJGYqk1dqmGN/svk/lk /fiphkboznhmp9/zxr+uzmo8i0awyov/9zxxoaobnianaugcg4d1uuznfxmhltkxk03rftgdmg92 Av9g6Lo5GZxGKiGLNNZQiffFw/ShDbe0INmtpqGGlVl/Sn8p0N04O6lF3Dv0KQIDAQABo30wezAS BgNVHRMBAf8ECDAGAQH/AgEAMA4GA1UdDwEB/wQEAwIBBjAVBgNVHSAEDjAMMAoGCGCEQgEQAQMB MB8GA1UdIwQYMBaAFGkkKsWM3wz3sEAx4Im6Goq97337MB0GA1UdDgQWBBQhYimRylJpLCv/hnpR SLPq1XGZWTANBgkqhkiG9w0BAQUFAAOCAQEAPppABUpCaeSwj6hKq+/xNsBI2iNBuaq2xdsXDA01 EJmuDqu/T8pUQXEG+xSRAhQzPcCan6gT+b/xXYw+h4UorbUv6M3Z4LTZf8HmLMi0CqcK2ViXw1PG Q2vdvRfttNW3ZDS+V6Xc7TzwHB1CrfE0G0006c9EB8YjIk0jo3Zd65qdkGjkDcrps3GkXEJ5vw/3 lvmbvndegeszqxsiwtlv4tspvno+/y2rtv869xlwgymshwgexzcm/fbiddqelvftgf2pkgsynjvt z4rdqev1pofo5ns5vprgk69yyiayex0vsq1bv2xgzeoj9y7euxxnlkwdumwez0ln/i5dpaa8gq== -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer CN: BankID Root CA Issuer OU: BankID Issuer O: FNH og Sparebankforeningen Issuer C: BankID SEB Privatbanken Bank CA SEB Privatbanken ASA Valid from: Fri Sep 29 12:20:25 CEST 2006 Valid to: Wed Sep 26 12:20:25 CEST 2018 Public Key: Basic Constraints 30:82:01:22:30:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:03:82:01:0F:00:30:82:01:0A:02:82:01:01:00:AF:84:D3:F9:DE:B9:02:29:E1:8E:79:7F:AB:42:BA:E6:63:33:71:ED:F6:77:CF:16:DC:8B:59:D6:7E:F1:3B:55:7F:BC: EB:5D:63:7B:5E:30:39:D9:62:CA:76:DB:69:10:7F:F7:5E:06:52:58:AA:E5:11:99:18:2E:26:E2:CC:51:B3:B7:1B:83:F1:CE:FF:80:D9:23:A5:07:1B:21:77:FC:6D:0B:86:51:39:D9:16:0E:DA:60:38:CE:51:7C:77:EE:0C:75:F5:E C:6C:31:25:E7:FF:0F:5E:8D:60:15:BB:67:D9:AA:2F:3F:9C:48:81:B1:38:B8:DC:B5:5D:9E:6E:E1:F3:CE:6E:00:34:BF:41:0A:75:B9:7B:02:46:62:A9:35:76:A9:86:37:FB:2F:93:F9:64:FD:F2:29:1C:A6:E8:66:78:4C:3F:DF:D9: 5D:1F:AE:64:C3:BC:23:46:B0:60:E5:7F:F7:3C:71:A1:A3:9B:9C:86:8D:02:E8:1C:83:87:75:BA:EC:E7:7F:13:21:96:D9:17:93:4D:EB:7E:D8:1D:32:0F:76:02:FF:60:E8:BA:39:19:9C:46:2A:21:8B:34:D6:50:89:F7:C5:C3:F4:A 1:0D:B7:B4:20:D9:AD:A6:A1:86:95:59:7F:4A:7F:29:D0:DD:38:3B:A9:45:DC:3B:F4:29:02:03:01:00:01 IsCA: true - Path length: 0 Certificate Policies Policy OID: Authority Key Identifier 69:24:2A:C5:8C:DF:0C:F7:B0:40:31:E0:89:BA:1A:8A:BD:EF:7D:FB Subject Key Identifier 21:62:29:91:CA:52:69:2C:2B:FF:86:7A:51:48:B3:EA:D5:71:99:59 Key Usage: keycertsign - crlsign Thumbprint algorithm: SHA-256 Thumbprint: Service Status CE:51:3B:98:0B:61:C2:80:D4:D5:E5:1A:86:12:F7:49:07:64:1D:26:57:59:07:AF:C5:BD:F7:38:A3:1 D:1B:94 RGE (RWAY) - Trusted List ID: TrustServiceStatusList-1 Page 60

61 Service status description [en] The validity of the supervision assessment has lapsed without the service identified in "Service digital identity" being reassessed. The service is currently not under supervision any more from the date of the current status as the service is understood to have ceased operations. Status Starting Time T00:00:00Z History instance n.1 - Status: undersupervision Service Type Identifier Service Name Certification Authority issuing Qualified Certificates Sertifikatutsteder som utsteder kvalifiserte sertifikater Service digital identities BankID SEB Privatbanken Bank CA SEB Privatbanken ASA X509SKI X509 SK I Service Status Status Starting Time IWIpkcpSaSwr/4Z6UUiz6tVxmVk= T00:00:00Z RGE (RWAY) - Trusted List ID: TrustServiceStatusList-1 Page 61

62 11 - TSP: Handelsbanken NUF TSP Name Handelsbanken NUF Handelsbanken NUF TSP Trade Name NTR PostalAddress Street Address [ en ] Postboks 1342 Vika Locality [ en ] Oslo Postal Code [ en ] 0113 Country ElectronicAddress URI URI mailto:[email protected] TSP Information URI URI [ en ] URI [ no ] Service (supervisionceased): Certification Authority issuing Qualified Certificates Service Type Identifier Service type description [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. Service Name Certification Authority issuing Qualified Certificates Sertifikatutsteder som utsteder kvalifiserte sertifikater Service digital identities RGE (RWAY) - Trusted List ID: TrustServiceStatusList-1 Page 62

63 BankID Handelsbanken Bank CA Handelsbanken NUF X509SKI X509 SK I ishnyhhl4zq1/l/wqlztcftadtm= Certificate fields details Version: 3 Serial Number: 1003 X509 Certificate -----BEGIN CERTIFICATE----- MIIFuzCCA6OgAwIBAgICA+swDQYJKoZIhvcNAQELBQAwXDELMAkGA1UEBhMCTk8xIzAhBgNVBAoM GkZOSCBvZyBTcGFyZWJhbmtmb3JlbmluZ2VuMQ8wDQYDVQQLDAZCYW5rSUQxFzAVBgNVBAMMDkJh bmtjrcbsb290ienbmb4xdta5mtexmta5mjyyn1oxdtixmtexmta5mjyyn1owzjelmakga1uebhmc Tk8xGjAYBgNVBAoMEUhhbmRlbHNiYW5rZW4gTlVGMRIwEAYDVQQLDAk5NzExNzEzMjQxJzAlBgNV BAMMHkJhbmtJRCBIYW5kZWxzYmFua2VuIEJhbmsgQ0EgMjCCAiIwDQYJKoZIhvcNAQEBBQADggIP ADCCAgoCggIBAO8QQYN4UDhhNqpS6iS5c8wfjHoZ5MtsUtdUFMEmAFPwbMYqZ6znaIbml1RyzLoV 8R9HtFqzt7/Cqyu2wKLtx60HsqSD0K6w+X+tLVQA4wa0c5BjNGutU26f+O7BDZKuMnvqrOB3CYam ittgq9ed9nomtikj465kevzb74q2jzfwcq2fpiozmtwxktdvzge3pte5v3nd3opcu3qcttcfio0r sm7tfwegroulas/jgx9ond3rvni7i91zydisfntiuzhw0j3lbi98elrtul3lxwmsawpv2qfxzklk vavl47cfo0t5q0imjnixgcgqiq36fvx3pub6wftf5lb0kw2q/t1976medd6bfd0mvf071xtdch2t ztuuwjdhir8p+a4br3curv8o4vlhofyyoquilf63xsu5ges94b/h6iajmiotaf5cpkr40d8y5wql jfrkd3uv8xjw8gwsqsgk5whexygy5bupqf1yun3uod+79sfzquqrctbdyzteuw7fywdtglkzqyu6 QrRgfN8/NJcyt4SkiqUoIFa8fbQzMlQEpgAjGeVKKgeo5g1GPk/7z9KDvogjne1DYruCQS2T07rs RTJI5FNhwImiTvtTElgbPLUN4/ezMmMGCYm7k+0rYtUE7LJqkIXnfUPm5YMoE9cjxEJBrjBbocDc HXzJPMDEgpu7AgMBAAGjfTB7MBIGA1UdEwEB/wQIMAYBAf8CAQAwFQYDVR0gBA4wDDAKBghghEIB EAEDATAOBgNVHQ8BAf8EBAMCAQYwHwYDVR0jBBgwFoAUoG509THwsBR94n8/psR8b9mEaVwwHQYD VR0OBBYEFIkhzWB4ZeGatf5f1qpWbXH7WnbTMA0GCSqGSIb3DQEBCwUAA4ICAQAJ9wpUUngx0l4L SwsNSM8ck1Gq2kSBMpaV6dEfDCHD8b1Otl29jVWhmG5qjnQ+phF5x6qr8fAgrgUPyEOcSh2K2p0W 9hw1yCgvesAt2oNmP6EjAase0VPaChNMTXOGoVClN/ZEEPyDBSUs0d/0dGDUUfBbpPw7s8mcM+Bm SJjZZQOqhp6qvVEyzQrgGtJ29Y92saXxr1tvmdbf9ld2Br2MzFDH/vqyYVocJsdClw/dCZFMIE1C fjl7grq27iztkjfbcfue9wjmtlkkpqakjadtmv/v5hxtqyjkr+guycjmcxhdb7sfv0qaled367+m cm9vjqz1cxmb2aodwn0edo8oi5c4nlqed8d/v5laf09putzsdn2s5eltchnr+qwo3xk0i1mue8u1 AvV9euyZOlaC57tBOSuyAokb93q+3Zp+zB2TcExIyJywBoSUb5k9Z8gexi9bT6TOK1KLJQKljVQ5 0IvBXCEZo0Y7LfMavKXePUonLf4Ks03h+q1vVVn+dRntXguvQxPM5hbodJ/V4HHt+wV950BxBYE3 W4KBKjvhuZ6vpwA+bOD8Nw8xsneUXwKnWEngCqzGUzlqJQ9IWp7+zQDh3IDvv5leZGMfcL+HQ+ YEQQo+Tj1izBNuR7v7pfyZoKujEuou+Y3YU/KVw4HeUh8K6taFTVQaKNfMaK/w== -----END CERTIFICATE----- Signature algorithm: SHA256withRSA Issuer CN: BankID Root CA Issuer OU: BankID Issuer O: FNH og Sparebankforeningen Issuer C: BankID Handelsbanken Bank CA Handelsbanken NUF Valid from: Wed Nov 11 10:26:27 CET 2009 Valid to: Thu Nov 11 10:26:27 CET 2021 RGE (RWAY) - Trusted List ID: TrustServiceStatusList-1 Page 63

64 Public Key: Basic Constraints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sCA: true - Path length: 0 Certificate Policies Policy OID: Authority Key Identifier A0:6E:74:F5:31:F0:B0:14:7D:E2:7F:3F:A6:C4:7C:6F:D9:84:69:5C Subject Key Identifier 89:21:CD:60:78:65:E1:9A:B5:FE:5F:D6:AA:56:6D:71:FB:5A:76:D3 Key Usage: keycertsign - crlsign Thumbprint algorithm: SHA-256 Thumbprint: Service Status A9:B0:32:28:BB:25:2F:3C:15:95:BB:31:DB:57:9A:EB:B6:6D:4B:F2:2D:F6:22:EF:79:54:D4:23:6F :3E:BA:9F Service status description [en] The validity of the supervision assessment has lapsed without the service identified in "Service digital identity" being reassessed. The service is currently not under supervision any more from the date of the current status as the service is understood to have ceased operations. Status Starting Time T22:00:00Z History instance n.1 - Status: undersupervision Service Type Identifier Service Name Certification Authority issuing Qualified Certificates Sertifikatutsteder som utsteder kvalifiserte sertifikater Service digital identities BankID Handelsbanken Bank CA Handelsbanken NUF X509SKI X509 SK I ishnyhhl4zq1/l/wqlztcftadtm= RGE (RWAY) - Trusted List ID: TrustServiceStatusList-1 Page 64

65 Certificate fields details Version: 3 Serial Number: 1003 X509 Certificate -----BEGIN CERTIFICATE----- MIIFuzCCA6OgAwIBAgICA+swDQYJKoZIhvcNAQELBQAwXDELMAkGA1UEBhMCTk8xIzAhBgNVBAoM GkZOSCBvZyBTcGFyZWJhbmtmb3JlbmluZ2VuMQ8wDQYDVQQLDAZCYW5rSUQxFzAVBgNVBAMMDkJh bmtjrcbsb290ienbmb4xdta5mtexmta5mjyyn1oxdtixmtexmta5mjyyn1owzjelmakga1uebhmc Tk8xGjAYBgNVBAoMEUhhbmRlbHNiYW5rZW4gTlVGMRIwEAYDVQQLDAk5NzExNzEzMjQxJzAlBgNV BAMMHkJhbmtJRCBIYW5kZWxzYmFua2VuIEJhbmsgQ0EgMjCCAiIwDQYJKoZIhvcNAQEBBQADggIP ADCCAgoCggIBAO8QQYN4UDhhNqpS6iS5c8wfjHoZ5MtsUtdUFMEmAFPwbMYqZ6znaIbml1RyzLoV 8R9HtFqzt7/Cqyu2wKLtx60HsqSD0K6w+X+tLVQA4wa0c5BjNGutU26f+O7BDZKuMnvqrOB3CYam ittgq9ed9nomtikj465kevzb74q2jzfwcq2fpiozmtwxktdvzge3pte5v3nd3opcu3qcttcfio0r sm7tfwegroulas/jgx9ond3rvni7i91zydisfntiuzhw0j3lbi98elrtul3lxwmsawpv2qfxzklk vavl47cfo0t5q0imjnixgcgqiq36fvx3pub6wftf5lb0kw2q/t1976medd6bfd0mvf071xtdch2t ztuuwjdhir8p+a4br3curv8o4vlhofyyoquilf63xsu5ges94b/h6iajmiotaf5cpkr40d8y5wql jfrkd3uv8xjw8gwsqsgk5whexygy5bupqf1yun3uod+79sfzquqrctbdyzteuw7fywdtglkzqyu6 QrRgfN8/NJcyt4SkiqUoIFa8fbQzMlQEpgAjGeVKKgeo5g1GPk/7z9KDvogjne1DYruCQS2T07rs RTJI5FNhwImiTvtTElgbPLUN4/ezMmMGCYm7k+0rYtUE7LJqkIXnfUPm5YMoE9cjxEJBrjBbocDc HXzJPMDEgpu7AgMBAAGjfTB7MBIGA1UdEwEB/wQIMAYBAf8CAQAwFQYDVR0gBA4wDDAKBghghEIB EAEDATAOBgNVHQ8BAf8EBAMCAQYwHwYDVR0jBBgwFoAUoG509THwsBR94n8/psR8b9mEaVwwHQYD VR0OBBYEFIkhzWB4ZeGatf5f1qpWbXH7WnbTMA0GCSqGSIb3DQEBCwUAA4ICAQAJ9wpUUngx0l4L SwsNSM8ck1Gq2kSBMpaV6dEfDCHD8b1Otl29jVWhmG5qjnQ+phF5x6qr8fAgrgUPyEOcSh2K2p0W 9hw1yCgvesAt2oNmP6EjAase0VPaChNMTXOGoVClN/ZEEPyDBSUs0d/0dGDUUfBbpPw7s8mcM+Bm SJjZZQOqhp6qvVEyzQrgGtJ29Y92saXxr1tvmdbf9ld2Br2MzFDH/vqyYVocJsdClw/dCZFMIE1C fjl7grq27iztkjfbcfue9wjmtlkkpqakjadtmv/v5hxtqyjkr+guycjmcxhdb7sfv0qaled367+m cm9vjqz1cxmb2aodwn0edo8oi5c4nlqed8d/v5laf09putzsdn2s5eltchnr+qwo3xk0i1mue8u1 AvV9euyZOlaC57tBOSuyAokb93q+3Zp+zB2TcExIyJywBoSUb5k9Z8gexi9bT6TOK1KLJQKljVQ5 0IvBXCEZo0Y7LfMavKXePUonLf4Ks03h+q1vVVn+dRntXguvQxPM5hbodJ/V4HHt+wV950BxBYE3 W4KBKjvhuZ6vpwA+bOD8Nw8xsneUXwKnWEngCqzGUzlqJQ9IWp7+zQDh3IDvv5leZGMfcL+HQ+ YEQQo+Tj1izBNuR7v7pfyZoKujEuou+Y3YU/KVw4HeUh8K6taFTVQaKNfMaK/w== -----END CERTIFICATE----- Signature algorithm: SHA256withRSA Issuer CN: BankID Root CA Issuer OU: BankID Issuer O: FNH og Sparebankforeningen Issuer C: BankID Handelsbanken Bank CA Handelsbanken NUF Valid from: Wed Nov 11 10:26:27 CET 2009 Valid to: Thu Nov 11 10:26:27 CET 2021 Public Key: Basic Constraints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sCA: true - Path length: 0 Certificate Policies Policy OID: Authority Key Identifier A0:6E:74:F5:31:F0:B0:14:7D:E2:7F:3F:A6:C4:7C:6F:D9:84:69:5C Subject Key Identifier 89:21:CD:60:78:65:E1:9A:B5:FE:5F:D6:AA:56:6D:71:FB:5A:76:D3 Key Usage: keycertsign - crlsign RGE (RWAY) - Trusted List ID: TrustServiceStatusList-1 Page 65

66 Thumbprint algorithm: SHA-256 Thumbprint: Service Status Status Starting Time A9:B0:32:28:BB:25:2F:3C:15:95:BB:31:DB:57:9A:EB:B6:6D:4B:F2:2D:F6:22:EF:79:54:D4:23:6F :3E:BA:9F T00:00:00Z Service (supervisionceased): Certification Authority issuing Qualified Certificates Service Type Identifier Service type description [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. Service Name Certification Authority issuing Qualified Certificates Sertifikatutsteder som utsteder kvalifiserte sertifikater Service digital identities BankID Handelsbanken Bank CA Handelsbanken NUF X509SKI X509 SK I LLgshvgaZRlTX0LUYfRqh7qETYw= Certificate fields details Version: 3 Serial Number: X509 Certificate -----BEGIN CERTIFICATE----- MIIDvTCCAqWgAwIBAgIEROQcejANBgkqhkiG9w0BAQUFADBcMQswCQYDVQQGEwJOTzEjMCEGA1UE ChMaRk5IIG9nIFNwYXJlYmFua2ZvcmVuaW5nZW4xDzANBgNVBAsTBkJhbmtJRDEXMBUGA1UEAxMO QmFua0lEIFJvb3QgQ0EwHhcNMDYwODE3MDczNjI2WhcNMTgwODE0MDczNjI2WjBmMQswCQYDVQQG EwJOTzEaMBgGA1UEChMRSGFuZGVsc2JhbmtlbiBOVUYxEjAQBgNVBAsTCTk3MTE3MTMyNDEnMCUG A1UEAxMeQmFua0lEIEhhbmRlbHNiYW5rZW4gQmFuayBDQSAxMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAsrUTyv3XeQ5MKlt8BvAS2NJK73TF5rukEfaEbCOrE/1nQdYWFAU40AKiNT7i STDNWDQH6//HjP1TUWEPFwUicTjOmlTf9qxpVwhEZiB8SFTDkzda/Fk19eDqs7KeRTmt6pZQ/T6a rap7riykyaiczy9totrvtvi7f2ska7uhsnanwu7eo8aomxz0kjxjebngs/2d+eii0vagegetwvhm BK+PchUqVjDcOxStnOl+mFOkB8bW9lCl3Ok5XHdPurBWOo+jJkrhu4utHWfz3peEUYBFcU42iKta c7eyg6njfptm7/m85q7nqlpzse5rzicnghmhwomn3duweg3vjsvcnwidaqabo30wezasbgnvhrmb Af8ECDAGAQH/AgEAMA4GA1UdDwEB/wQEAwIBBjAVBgNVHSAEDjAMMAoGCGCEQgEQAQMBMB8GA1Ud IwQYMBaAFGkkKsWM3wz3sEAx4Im6Goq97337MB0GA1UdDgQWBBQsuCyG+BplGVNfQtRh9GqHuoRN jdanbgkqhkig9w0baqufaaocaqeajiovd8aladzoivxf+btso+pcf3uvozy0avyld1p8q4yooobc twvamorqwwglxw057vhyuox/rgwvqf2pgbkqo46q0itlrtyazlxk1/3baahrwy80ket3u0puyii8 7x6wOxtJghLFxZHjkKEXQsp4vWt76CTdrUqORBwCum22GJT1Vvj78hRp37FKnl5i7UZl22+S9Mb2 rjjtxoi2ucq/chgybgqguoiln83hrzme7arbs19oty3vfud/73uo8ixdv/0imqqqlkp59xeoxlbl pqze0iou+b4y8lcvze59gnu+df9z/kpz1zrroeemnsbnuppyblvxigvjchtl5umnwg== -----END CERTIFICATE----- RGE (RWAY) - Trusted List ID: TrustServiceStatusList-1 Page 66

67 Signature algorithm: SHA1withRSA Issuer CN: BankID Root CA Issuer OU: BankID Issuer O: FNH og Sparebankforeningen Issuer C: BankID Handelsbanken Bank CA Handelsbanken NUF Valid from: Thu Aug 17 09:36:26 CEST 2006 Valid to: Tue Aug 14 09:36:26 CEST 2018 Public Key: Basic Constraints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sCA: true - Path length: 0 Certificate Policies Policy OID: Authority Key Identifier 69:24:2A:C5:8C:DF:0C:F7:B0:40:31:E0:89:BA:1A:8A:BD:EF:7D:FB Subject Key Identifier 2C:B8:2C:86:F8:1A:65:19:53:5F:42:D4:61:F4:6A:87:BA:84:4D:8C Key Usage: keycertsign - crlsign Thumbprint algorithm: SHA-256 Thumbprint: Service Status 18:F1:94:A8:9A:79:B1:92:9E:29:B3:1A:4A:C6:AA:CC:0F:1A:1C:63:45:E2:75:05:95:55:CC:CD:B 3:AC:4A:FD Service status description [en] The validity of the supervision assessment has lapsed without the service identified in "Service digital identity" being reassessed. The service is currently not under supervision any more from the date of the current status as the service is understood to have ceased operations. Status Starting Time T00:00:00Z History instance n.1 - Status: undersupervision Service Type Identifier RGE (RWAY) - Trusted List ID: TrustServiceStatusList-1 Page 67

68 Service Name Certification Authority issuing Qualified Certificates Sertifikatutsteder som utsteder kvalifiserte sertifikater Service digital identities BankID Handelsbanken Bank CA Handelsbanken NUF X509SKI X509 SK I Service Status Status Starting Time LLgshvgaZRlTX0LUYfRqh7qETYw= T00:00:00Z RGE (RWAY) - Trusted List ID: TrustServiceStatusList-1 Page 68

69 12 - TSP: Skandiabanken AB NUF TSP Name Skandiabanken AB NUF Skandiabanken AB NUF TSP Trade Name NTR PostalAddress Street Address [ en ] Postboks 7077 Locality [ en ] Bergen Postal Code [ en ] 5020 Country ElectronicAddress URI URI mailto:[email protected] TSP Information URI URI [ en ] URI [ no ] Service (supervisionceased): Certification Authority issuing Qualified Certificates Service Type Identifier Service type description [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. Service Name Certification Authority issuing Qualified Certificates Sertifikatutsteder som utsteder kvalifiserte sertifikater Service digital identities RGE (RWAY) - Trusted List ID: TrustServiceStatusList-1 Page 69

70 BankID Skandiabanken Bank CA Skandiabanken AB NUF X509SKI X509 SK I e7gdeue7si38j89buplkrxlitgs= Certificate fields details Version: 3 Serial Number: 803 X509 Certificate -----BEGIN CERTIFICATE----- MIIFvjCCA6agAwIBAgICAyMwDQYJKoZIhvcNAQELBQAwXDELMAkGA1UEBhMCTk8xIzAhBgNVBAoM GkZOSCBvZyBTcGFyZWJhbmtmb3JlbmluZ2VuMQ8wDQYDVQQLDAZCYW5rSUQxFzAVBgNVBAMMDkJh bmtjrcbsb290ienbmb4xdta5mtayoda5mzqyovoxdtixmtayoda5mzqyovowatelmakga1uebhmc Tk8xHTAbBgNVBAoMFFNrYW5kaWFiYW5rZW4gQUIgTlVGMRIwEAYDVQQLDAk5ODEyOTEyMjAxJzAl BgNVBAMMHkJhbmtJRCBTa2FuZGlhYmFua2VuIEJhbmsgQ0EgMjCCAiIwDQYJKoZIhvcNAQEBBQAD ggipadccagocggibamise40wpc1kviy9liagmbvcmniap/dcg8r5/bearxsoxyyqu9lpp5l1omfw vlu/lszpkt8cdpk0tornbfkvhiitc84qrnccb/oqug3ulyrtc1ml5akxlcwb50adct97hspvgy86 QKG6SMxBLMQxjgDZVt/VIDr9f1vvdSs6zXMUUXzLHg4UHqMQ+slY1AsugFVKKf7ePeGN7Lt9Uy+M hzrkervq+tlsytognbuqk9xhbf1wo4wjzvyjui8er3xdsgcfcdv8ffoxrbc9mnoqhxfwc6mvq85s ACOirQWZgu+x92Fn3rHgOM0ep4zebbsFpMzBKSQg9WA13wnYAIE5ImM0Ucjy3jPKTN8Ld8HB8GUL z4e2wzgkqhr+y3+nynzp5rwk5ap4xo504zfefgjcy5qcdadsb94rwosnh61fmmdmnb7nnrymxtc/ TGW3/TVbJjPGgz1o2CSwddCtJMpOU+Sne4wRHRBQ94eUWotoToaIzfPos0Pvwnu1u4Q9BEVzUacE TsjeqByXRVdHxOCXR/aL77yaTbkdPYvg60WD745uXVBM5pQhfKgn/Kpbi+cP0DKr8w9gfYVEh7HS FDPngJKeBwyRMwSuAO4kSyjyyGxWjoH88tSokyRSjeNSg3U0BRo2T9balxxt3YTCXLzT+F2sew7s +22zf2CBKH9vFvTfAgMBAAGjfTB7MBIGA1UdEwEB/wQIMAYBAf8CAQAwFQYDVR0gBA4wDDAKBghg heibeaedataobgnvhq8baf8ebamcaqywhwydvr0jbbgwfoauog509thwsbr94n8/psr8b9meavww HQYDVR0OBBYEFHu4HRLnu7It/I/PQbqS5EcSyE4LMA0GCSqGSIb3DQEBCwUAA4ICAQBTkKus6rHw wrkttgc0wxczehqig8fa4tcwzfcl2hw4agc85qh9uvxjryn1u6t3agbzjsecex6/e/wy983mn98y bn35sy6/erdai9uw+506ewe1fvaixofe8islserewdrln2u8ic9md/vx+yzesj1d3hwzouxe5wwx 2AJSRwLfMDpWgwm2i+a9pNJlDYubR2y7OHm+A+/czE2IsGAv7Ueate763tTUM1KhL0+YQGczDUyc wyxnt9y0vc0fc4x3i1iqydfvdxxj5zsfoweigjhrkkf1gcaba936x4agswkqn4ljefxtlecjeuur qxikpjroiamkfwc0wmoy/rsk/bsudt81q0jacve3kembpsr9dyt8h1mgylv2dfxiepgt/0azs4cu L82ZMOvQjMMBKbcaVfqi4v4Oe0SBKEttBeTEhMh2HlcIUTtxlSwHxOqiOFsWRNgTgMpppu9v9W6S RPSqaMhS2OJXxV64wwRsvh6+9a1EX6jAKmRFUYsSZQHhwO9lX/72Ppwk4CoxC0s4t0qb6baY03 VTYNtaOF0KcigaDe6AKvASH1KmQtp0cdsze2JBIZ9XOCI+obnHC1qO8jdKYTV2dKT5lwk/U/4GlM C0WMN+jncJtxQ6LSK41mgLNeCgli1RRQQsJp7mvkkS80vgU2QF6Ybk/CkfNDWGEAVQ== -----END CERTIFICATE----- Signature algorithm: SHA256withRSA Issuer CN: BankID Root CA Issuer OU: BankID Issuer O: FNH og Sparebankforeningen Issuer C: BankID Skandiabanken Bank CA Skandiabanken AB NUF Valid from: Wed Oct 28 10:34:29 CET 2009 Valid to: Thu Oct 28 11:34:29 CEST 2021 RGE (RWAY) - Trusted List ID: TrustServiceStatusList-1 Page 70

71 Public Key: Basic Constraints 30:82:02:22:30:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:03:82:02:0F:00:30:82:02:0A:02:82:02:01:00:C8:AC:13:8D:16:3D:CD:4A:BE:26:3D:94:86:A0:99:BB:C2:32:78:9A:A7:F7:42:83:CA:F9:FD:B1:1A:AF:14:A8:5D:8 6:10:53:D9:69:A7:92:F5:3A:67:F0:BE:55:3F:95:26:4F:92:DF:1C:76:92:B4:B4:E4:67:04:52:AF:84:88:AD:0B:CE:2A:46:70:9C:07:F3:90:BA:0D:D4:2F:24:6D:73:59:8B:E5:A2:B1:2C:2C:1B:E7:46:9D:0A:DF:7B:85:23:EF:1B: 2F:3A:40:A1:BA:48:CC:41:2C:C4:31:8E:00:D9:56:DF:D5:20:3A:FD:7F:5B:EF:75:2B:3A:CD:73:14:51:7C:CB:1E:0E:14:1E:A3:10:FA:C9:58:D4:0B:2E:80:55:4A:29:FE:DE:3D:E1:8D:EC:BB:7D:53:2F:8C:87:3A:E4:12:BB: D0:FA:D9:6C:C9:3A:20:9C:15:10:2B:D5:C7:04:5D:70:3B:85:A3:CE:FC:89:B8:8F:1E:47:7C:43:B2:07:05:71:D5:7C:7C:53:97:AC:10:BD:30:DA:2A:1D:71:56:73:A9:95:AB:CE:6C:00:23:A2:AD:05:99:82:EF:B1:F7:61:67:D E:B1:E0:38:CD:1E:A7:8C:DE:6D:BB:05:A4:CC:C1:29:24:20:F5:60:35:DF:09:D8:00:81:39:22:63:34:51:C8:F2:DE:33:CA:4C:DF:0B:77:C1:C1:F0:65:0B:CF:87:B6:59:98:0A:40:7A:FE:63:7F:A7:62:76:69:E5:15:8A:E5:AA:7 8:C4:EE:74:E1:97:DE:14:68:DC:63:9A:82:0C:00:EC:07:DE:2B:58:E4:8D:1F:AD:45:98:C0:CC:9D:BE:E7:36:B6:0C:C5:30:BF:4C:65:B7:FD:35:5B:26:33:C6:83:3D:68:D8:24:B0:75:D0:AD:24:CA:4E:53:E4:A7:7B:8C:11:1D :10:50:F7:87:94:5A:8B:68:4E:86:88:CD:F3:E8:B3:43:EF:C2:7B:B5:BB:84:3D:04:45:73:51:A7:04:4E:C8:DE:A8:1C:97:45:57:47:C4:E0:97:47:F6:8B:EF:BC:9A:4D:B9:1D:3D:8B:E0:EB:45:83:EF:8E:6E:5D:50:4C:E6:94:21:7 C:A8:27:FC:AA:5B:8B:E7:0F:D0:32:AB:F3:0F:60:7D:85:44:87:B1:D2:14:33:E7:80:92:9E:07:0C:91:33:04:AE:00:EE:24:4B:28:F2:C8:6C:56:8E:81:FC:F2:D4:A8:93:24:52:8D:E3:52:83:75:34:05:1A:36:4F:D6:DA:97:1C:6D: DD:84:C2:5C:BC:D3:F8:5D:AC:7B:0E:EC:FB:6D:B3:7F:60:81:28:7F:6F:16:F4:DF:02:03:01:00:01 IsCA: true - Path length: 0 Certificate Policies Policy OID: Authority Key Identifier A0:6E:74:F5:31:F0:B0:14:7D:E2:7F:3F:A6:C4:7C:6F:D9:84:69:5C Subject Key Identifier 7B:B8:1D:12:E7:BB:B2:2D:FC:8F:CF:41:BA:92:E4:47:12:C8:4E:0B Key Usage: keycertsign - crlsign Thumbprint algorithm: SHA-256 Thumbprint: Service Status 0C:87:BF:A1:C6:11:1E:BE:90:49:E6:2F:C0:20:B5:F3:CC:00:2F:26:55:CB:0C:33:EF:4F:C8:A9:80: 7A:EF:F2 Service status description [en] The validity of the supervision assessment has lapsed without the service identified in "Service digital identity" being reassessed. The service is currently not under supervision any more from the date of the current status as the service is understood to have ceased operations. Status Starting Time T22:00:00Z History instance n.1 - Status: undersupervision Service Type Identifier Service Name Certification Authority issuing Qualified Certificates Sertifikatutsteder som utsteder kvalifiserte sertifikater Service digital identities BankID Skandiabanken Bank CA Skandiabanken AB NUF X509SKI X509 SK I e7gdeue7si38j89buplkrxlitgs= RGE (RWAY) - Trusted List ID: TrustServiceStatusList-1 Page 71

72 Certificate fields details Version: 3 Serial Number: 803 X509 Certificate -----BEGIN CERTIFICATE----- MIIFvjCCA6agAwIBAgICAyMwDQYJKoZIhvcNAQELBQAwXDELMAkGA1UEBhMCTk8xIzAhBgNVBAoM GkZOSCBvZyBTcGFyZWJhbmtmb3JlbmluZ2VuMQ8wDQYDVQQLDAZCYW5rSUQxFzAVBgNVBAMMDkJh bmtjrcbsb290ienbmb4xdta5mtayoda5mzqyovoxdtixmtayoda5mzqyovowatelmakga1uebhmc Tk8xHTAbBgNVBAoMFFNrYW5kaWFiYW5rZW4gQUIgTlVGMRIwEAYDVQQLDAk5ODEyOTEyMjAxJzAl BgNVBAMMHkJhbmtJRCBTa2FuZGlhYmFua2VuIEJhbmsgQ0EgMjCCAiIwDQYJKoZIhvcNAQEBBQAD ggipadccagocggibamise40wpc1kviy9liagmbvcmniap/dcg8r5/bearxsoxyyqu9lpp5l1omfw vlu/lszpkt8cdpk0tornbfkvhiitc84qrnccb/oqug3ulyrtc1ml5akxlcwb50adct97hspvgy86 QKG6SMxBLMQxjgDZVt/VIDr9f1vvdSs6zXMUUXzLHg4UHqMQ+slY1AsugFVKKf7ePeGN7Lt9Uy+M hzrkervq+tlsytognbuqk9xhbf1wo4wjzvyjui8er3xdsgcfcdv8ffoxrbc9mnoqhxfwc6mvq85s ACOirQWZgu+x92Fn3rHgOM0ep4zebbsFpMzBKSQg9WA13wnYAIE5ImM0Ucjy3jPKTN8Ld8HB8GUL z4e2wzgkqhr+y3+nynzp5rwk5ap4xo504zfefgjcy5qcdadsb94rwosnh61fmmdmnb7nnrymxtc/ TGW3/TVbJjPGgz1o2CSwddCtJMpOU+Sne4wRHRBQ94eUWotoToaIzfPos0Pvwnu1u4Q9BEVzUacE TsjeqByXRVdHxOCXR/aL77yaTbkdPYvg60WD745uXVBM5pQhfKgn/Kpbi+cP0DKr8w9gfYVEh7HS FDPngJKeBwyRMwSuAO4kSyjyyGxWjoH88tSokyRSjeNSg3U0BRo2T9balxxt3YTCXLzT+F2sew7s +22zf2CBKH9vFvTfAgMBAAGjfTB7MBIGA1UdEwEB/wQIMAYBAf8CAQAwFQYDVR0gBA4wDDAKBghg heibeaedataobgnvhq8baf8ebamcaqywhwydvr0jbbgwfoauog509thwsbr94n8/psr8b9meavww HQYDVR0OBBYEFHu4HRLnu7It/I/PQbqS5EcSyE4LMA0GCSqGSIb3DQEBCwUAA4ICAQBTkKus6rHw wrkttgc0wxczehqig8fa4tcwzfcl2hw4agc85qh9uvxjryn1u6t3agbzjsecex6/e/wy983mn98y bn35sy6/erdai9uw+506ewe1fvaixofe8islserewdrln2u8ic9md/vx+yzesj1d3hwzouxe5wwx 2AJSRwLfMDpWgwm2i+a9pNJlDYubR2y7OHm+A+/czE2IsGAv7Ueate763tTUM1KhL0+YQGczDUyc wyxnt9y0vc0fc4x3i1iqydfvdxxj5zsfoweigjhrkkf1gcaba936x4agswkqn4ljefxtlecjeuur qxikpjroiamkfwc0wmoy/rsk/bsudt81q0jacve3kembpsr9dyt8h1mgylv2dfxiepgt/0azs4cu L82ZMOvQjMMBKbcaVfqi4v4Oe0SBKEttBeTEhMh2HlcIUTtxlSwHxOqiOFsWRNgTgMpppu9v9W6S RPSqaMhS2OJXxV64wwRsvh6+9a1EX6jAKmRFUYsSZQHhwO9lX/72Ppwk4CoxC0s4t0qb6baY03 VTYNtaOF0KcigaDe6AKvASH1KmQtp0cdsze2JBIZ9XOCI+obnHC1qO8jdKYTV2dKT5lwk/U/4GlM C0WMN+jncJtxQ6LSK41mgLNeCgli1RRQQsJp7mvkkS80vgU2QF6Ybk/CkfNDWGEAVQ== -----END CERTIFICATE----- Signature algorithm: SHA256withRSA Issuer CN: BankID Root CA Issuer OU: BankID Issuer O: FNH og Sparebankforeningen Issuer C: BankID Skandiabanken Bank CA Skandiabanken AB NUF Valid from: Wed Oct 28 10:34:29 CET 2009 Valid to: Thu Oct 28 11:34:29 CEST 2021 Public Key: Basic Constraints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sCA: true - Path length: 0 Certificate Policies Policy OID: Authority Key Identifier A0:6E:74:F5:31:F0:B0:14:7D:E2:7F:3F:A6:C4:7C:6F:D9:84:69:5C Subject Key Identifier 7B:B8:1D:12:E7:BB:B2:2D:FC:8F:CF:41:BA:92:E4:47:12:C8:4E:0B Key Usage: keycertsign - crlsign RGE (RWAY) - Trusted List ID: TrustServiceStatusList-1 Page 72

73 Thumbprint algorithm: SHA-256 Thumbprint: Service Status Status Starting Time 0C:87:BF:A1:C6:11:1E:BE:90:49:E6:2F:C0:20:B5:F3:CC:00:2F:26:55:CB:0C:33:EF:4F:C8:A9:80: 7A:EF:F T22:00:00Z Service (supervisionceased): Certification Authority issuing Qualified Certificates Service Type Identifier Service type description [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. Service Name Certification Authority issuing Qualified Certificates Sertifikatutsteder som utsteder kvalifiserte sertifikater Service digital identities Certificate fields details Version: 3 Serial Number: X509 Certificate -----BEGIN CERTIFICATE----- MIIDwDCCAqigAwIBAgIER0VnSjANBgkqhkiG9w0BAQUFADBcMQswCQYDVQQGEwJOTzEjMCEGA1UE ChMaRk5IIG9nIFNwYXJlYmFua2ZvcmVuaW5nZW4xDzANBgNVBAsTBkJhbmtJRDEXMBUGA1UEAxMO QmFua0lEIFJvb3QgQ0EwHhcNMDcxMTIyMTEyNjAyWhcNMTkxMTE5MTEyNjAyWjBpMQswCQYDVQQG EwJOTzEdMBsGA1UEChMUU2thbmRpYUJhbmtlbiBBQiBOVUYxEjAQBgNVBAsTCTk4MTI5MTIyMDEn MCUGA1UEAxMeQmFua0lEIFNrYW5kaWFCYW5rZW4gQmFuayBDQSAxMIIBIjANBgkqhkiG9w0BAQEF AAOCAQ8AMIIBCgKCAQEAzkpACl0ZpjsuAJZMWmMKMPywRDuVUIsty41ZfvAP5+LotfBUWDgD8MYm pi0srqronzydbhqmhkuudb0b2wcgxvq4zlq61rppbq63mysilza2rbczv/5qjrtfgw/ye3hbq7cj HZgX6IpPBPlUAtJ/8Sj1zMUm/GRFdfFl4/3S7uHCrtmsV660nsQb0681fd/sbUH4GiO06U4o4nOa EHKb1yOz9pFLjYBE0Jy87dMlQDdXyDDtFVCXBPfd26tclyHq8JLRyycRc945UxSsdWEhPJBfHAci S0Nh4IIPgaPvzPuH+afbYoS5TVhikVz29TMZo14esngRifkFyBl3iJPmiwIDAQABo30wezASBgNV HRMBAf8ECDAGAQH/AgEAMA4GA1UdDwEB/wQEAwIBBjAVBgNVHSAEDjAMMAoGCGCEQgEQAQMBMB8G A1UdIwQYMBaAFGkkKsWM3wz3sEAx4Im6Goq97337MB0GA1UdDgQWBBSNIP1J2RrYu0R1F13XgcoL M7m7IjANBgkqhkiG9w0BAQUFAAOCAQEAGYZnmKfz6rs0dPWpTC5wxeN64afYOGb/Qb5jsFfRKFqL XaeyxRGCwO2klzzzIdRdEZFUhCTjKmX/NJd9THYmNKbSWcgdhWbIa0rEsXL+P7CG/GoKU2t3OvA0 lrxwem0jizw8bpr1kqopejl9vgxc3i3rmneoyy625kmsp4h/9ypqm7ighaadixrrml0qztpx5gjk bhkqvjfjshza8twikf4m5z8txlba7njg6zpsolfrm9wrtwmvpfby2vg1hytfsq48bpvljj90xt5t vf0hihw/kfrvyj5agsdjkvg4gwogzfkubynyqbze4kzm48mpanhkw55nkin4n87iutu8zg== -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer CN: BankID Root CA Issuer OU: BankID Issuer O: FNH og Sparebankforeningen Issuer C: BankID SkandiaBanken Bank CA RGE (RWAY) - Trusted List ID: TrustServiceStatusList-1 Page 73

74 SkandiaBanken AB NUF Valid from: Thu Nov 22 12:26:02 CET 2007 Valid to: Tue Nov 19 12:26:02 CET 2019 Public Key: Basic Constraints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sCA: true - Path length: 0 Certificate Policies Policy OID: Authority Key Identifier 69:24:2A:C5:8C:DF:0C:F7:B0:40:31:E0:89:BA:1A:8A:BD:EF:7D:FB Subject Key Identifier 8D:20:FD:49:D9:1A:D8:BB:44:75:17:5D:D7:81:CA:0B:33:B9:BB:22 Key Usage: keycertsign - crlsign Thumbprint algorithm: SHA-256 Thumbprint: B1:13:91:82:29:39:8A:62:DB:24:C9:A6:C2:29:79:5B:CF:21:B5:93:24:28:27:0A:78:79:75:14:15:E1 :C3:01 X509SKI X509 SK I jsd9sdka2ltedrdd14hkczo5uyi= BankID SkandiaBanken Bank CA SkandiaBanken AB NUF Service Status Service status description [en] The validity of the supervision assessment has lapsed without the service identified in "Service digital identity" being reassessed. The service is currently not under supervision any more from the date of the current status as the service is understood to have ceased operations. Status Starting Time T00:00:00Z History instance n.1 - Status: undersupervision Service Type Identifier RGE (RWAY) - Trusted List ID: TrustServiceStatusList-1 Page 74

75 Service Name Certification Authority issuing Qualified Certificates Sertifikatutsteder som utsteder kvalifiserte sertifikater Service digital identities X509SKI X509 SK I jsd9sdka2ltedrdd14hkczo5uyi= BankID SkandiaBanken Bank CA SkandiaBanken AB NUF Service Status Status Starting Time T00:00:00Z RGE (RWAY) - Trusted List ID: TrustServiceStatusList-1 Page 75

76 13 - TSP: Statoil ASA TSP Name Statoil ASA Statoil ASA TSP Trade Name NTR Statoil ASA PostalAddress Street Address [ en ] Forusbeen 50 Locality [ en ] Stavanger Postal Code [ en ] 4035 Country ElectronicAddress URI URI mailto:[email protected] TSP Information URI URI [ en ] URI [ no ] Service : Certification Authority issuing Qualified Certificates Service Type Identifier Service type description [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. Service Name Certification Authority issuing Qualified Certificates Sertifikatutsteder som utsteder kvalifiserte sertifikater RGE (RWAY) - Trusted List ID: TrustServiceStatusList-1 Page 76

77 Service digital identities Certificate fields details Version: 3 Serial Number: X509 Certificate -----BEGIN CERTIFICATE----- MIIF0jCCA7qgAwIBAgIESuwVdTANBgkqhkiG9w0BAQUFADB3MRMwEQYKCZImiZPyLGQBGRYDY29t MRcwFQYKCZImiZPyLGQBGRYHc3RhdG9pbDELMAkGA1UEBhMCTk8xIDAeBgNVBAoTF1N0YXRvaWwg QVNBIC0gOTIzNjA5MDE2MRgwFgYDVQQDEw9TdGF0b2lsIFJvb3QgQ0EwHhcNMDkxMDMxMTAxNjI0 WhcNMjkxMDMxMTA0NjI0WjB3MRMwEQYKCZImiZPyLGQBGRYDY29tMRcwFQYKCZImiZPyLGQBGRYH c3rhdg9pbdelmakga1uebhmctk8xidaebgnvbaotf1n0yxrvawwgqvnbic0gotiznja5mde2mrgw FgYDVQQDEw9TdGF0b2lsIFJvb3QgQ0EwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDK ugsfazdwagqohk9ajulthbqljzokiw6vuj53x+uv0kn/qiupao1flwytlchhsweyypegf7pgp9+t 8VkEjK+RPSfxAFW4uOUfcaU1jlIbQNv7nO3bTjd2lVV2IlXSDun3Du1lwO+Imnk6csc+wNwEjHmz 7+EOReWWXp2vQann80DH6m/gnus482COfm8Rk6MQIQwQxsexSXoFUKzAzBQ4LGA1hJRgRbV1iza4 khmjuv7q+vgi8zj3o05hi8o8vqohlzgz73oin3q6istc7j/po+mahmzw0v4zm6ffe6hrdnfq9voc Chwpou2FRLWeBY3XIcBe8XtDgm189/uU3EpPsNJQ6D0wyG65CEISvN3fGB/XZtOCTj7MudWdm1pu 1wQZkox2lx7vq5Go5oCAc08yMIGwnBZHastgc4DdoVGXBp3S4q6rJlUa6MyygCfm1JobmRD2AsHH ecnt0+xhc6i1vq/w4b7p2ziypwlcvo9wjeh3bglymldnjr23oliz9dubisw4bm3zo6r6wx58hknv fddoj6tuwke5dyjlvrorgfwg1n5rwyd8heddjwpar2ugugltmxdmnewnw+gac7zhplohdw0kmmt6 kzgll5fjjpi/hkz7vikbw0y042erebosumavcwoithhy7rxjijajdsqhiyurgtg9+amhec889wid AQABo2YwZDAOBgNVHQ8BAf8EBAMCAQYwEgYDVR0TAQH/BAgwBgEB/wIBATAfBgNVHSMEGDAWgBQT zgg8gmg+x5kwd6lvmcixkkrd4tadbgnvhq4efgque8xhvbpopl+zmhepvtaimzjkw+ewdqyjkozi hvcnaqefbqadggibaj0qmvauz2r7btfepenoynjn9jlxewe89qvbi5gaxr2j2aokocknbsjqh9ou /WUl97dX0fhcr5t78ZP+C+E1Z2Hj06CWOoafBE3W8MrteOfDuPdpvwaAcb+ZsWa4ZdDWmPAW9mEH udzu9v7clmfj0qd0q7g6p6yj6gordzuxwfrk0spltk9w0bfssk9pm2i+8ayqq9j7iunzfv+ou1rb iqgptx493ejkrgrs9wike3bdnvwg5/egi+dfxb4av4hridttxdyuf1/0cgici3a4c/oi4sic4np3 7lR6tjW/k/GhXC18M3HJJHAAWQg3DhHfLzD8TH/Wn+0PcUF1EjNop/nDHwnR2p0bdsM4DXUorK59 vrawdcqz8d02kvmxpx9eswkssstxmwnjnph5rhfcaxl14tj2md+nwlhwcxbawas2t5zglnsvhu6c 1oxKo8DB8IK5nAJFMNamZlcX/GEP+jUnWa5D82LYHXVsmOXf02FKQylX+CC2NGkQRX3vdVrfGHj9 0mGdZ0VIGOSL6HELrorV9oWOvnsw9PyFbeTCsY+eME8w5prw5exrJTs2WN9FWeivvyflC8K0oyl7 Q3wHBW1xWpBjdHF2Cf7eKblqbl1kurUwQsJSGERuM6mFudRxR9HelwLfsz7SXINxfTIoNKskjFG2 PaBHiuTJ7YL5mDCV -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer CN: Statoil Root CA Issuer O: Statoil ASA Issuer C: Issuer DC: statoil Issuer DC: com Statoil Root CA Statoil ASA Subject DC: statoil Subject DC: com Valid from: Sat Oct 31 11:16:24 CET 2009 Valid to: Wed Oct 31 11:46:24 CET 2029 Public Key: Basic Constraints 30:82:02:22:30:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:03:82:02:0F:00:30:82:02:0A:02:82:02:01:00:CA:B8:64:85:6B:37:56:02:04:0E:86:4F:5A:26:E9:53:84:14:25:8F:3A:0A:8B:0E:AF:52:3E:77:5F:E5:15:D0:A9:FF:A A:25:0F:00:ED:45:2F:06:2D:2C:21:C7:B3:07:98:CA:91:20:7F:B3:C6:A7:DF:AD:F1:59:04:8C:AF:91:3D:27:F1:00:55:B8:B8:E5:1F:71:A5:35:8E:52:1B:40:DB:FB:9C:ED:DB:4E:37:76:95:55:76:22:55:D2:0E:E9:F7:0E:ED:65 :C0:EF:88:9A:79:3A:72:C7:3E:C0:DC:04:8C:79:B3:EF:E1:0E:45:E5:96:5E:9D:AF:41:A9:E7:F3:40:C7:EA:6F:E0:9E:EB:38:F3:60:8E:7E:6F:11:93:A3:10:21:0C:10:C6:C7:B1:49:7A:05:50:AC:C0:CC:14:38:2C:60:35:84:94:6 0:45:B5:75:8B:36:B8:92:13:23:52:FE:EA:FA:F8:08:F3:32:77:3B:4E:47:8B:CA:3C:BE:A3:87:97:31:B3:EF:7A:08:9F:7A:BA:8A:CB:5C:EE:3F:CF:3B:E9:9A:86:66:70:D1:5E:33:33:A1:5F:7B:A1:EB:0C:D7:D0:F5:53:82:0A:1 C:29:A2:ED:85:44:B5:9E:05:8D:D7:21:C0:5E:F1:7B:43:82:6D:7C:F7:FB:94:DC:4A:4F:B0:D2:50:E8:3D:30:C8:6E:B9:08:42:12:BC:DD:DF:18:1F:D7:66:D3:82:4E:3E:CC:B9:D5:9D:9B:5A:6E:D7:04:19:92:8C:76:97:1E:EF: AB:91:A8:E6:80:80:73:4F:32:30:81:B0:9C:16:47:6A:CB:60:73:80:DD:A1:51:97:06:9D:D2:E2:AE:AB:26:55:1A:E8:CC:B2:80:27:E6:D4:9A:1B:99:10:F6:02:C1:C7:79:C9:ED:D3:E5:E1:0B:A2:35:BE:AF:F0:E1:BE:E9:DB:32 :18:3F:02:DC:BC:EF:56:8D:E8:77:6C:62:D8:32:57:4D:8D:1D:B7:A2:52:33:F4:35:01:8A:CC:38:06:6D:F3:3B:A4:7A:5B:1E:7C:84:A9:EF:7D:D7:68:27:A4:D4:C0:A1:39:0D:88:CB:56:BA:11:18:55:86:D6:7E:51:C1:87:7C:85 :E7:5D:27:0A:5A:47:65:20:52:09:6D:99:77:66:34:4C:27:5B:E1:9A:73:B6:47:A6:53:87:77:0D:0A:98:CB:7A:91:98:0B:97:97:E3:26:92:3F:1E:4C:FB:56:29:1B:C3:4C:B4:E3:61:2B:78:13:92:BA:60:2F:0B:03:A2:4C:78:72:EE: BC:63:88:90:23:0D:24:07:21:85:2B:19:38:3D:F8:09:87:11:CF:3C:F7:02:03:01:00:01 IsCA: true - Path length: 1 Authority Key Identifier 13:CC:61:BC:1A:68:3E:5F:99:30:77:A9:55:30:22:31:92:4A:C3:E1 RGE (RWAY) - Trusted List ID: TrustServiceStatusList-1 Page 77

78 Subject Key Identifier 13:CC:61:BC:1A:68:3E:5F:99:30:77:A9:55:30:22:31:92:4A:C3:E1 Key Usage: keycertsign - crlsign Thumbprint algorithm: SHA-256 Thumbprint: D1:BE:89:03:AA:7E:DD:58:83:EE:80:F0:EC:09:47:81:FA:10:F5:A3:F5:C1:F1:16:8E:E6:9A:26:EB :56:3E:27 Statoil Root CA Statoil ASA Subject DC: statoil Subject DC: com X509SKI X509 SK I Service Status E8xhvBpoPl+ZMHepVTAiMZJKw+E= Service status description [en] The service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is currently under supervision, for compliance with the provisions laid down in the applicable European legislation, by the Member State identified in the "Scheme territory" in which the trust service provider is established. Status Starting Time T11:00:00Z RGE (RWAY) - Trusted List ID: TrustServiceStatusList-1 Page 78

79 14 - Signature node - Id: Signature Signer issuer name Buypass Class 3 CA 3 Signing Time T12:35:38.683Z TSL Scheme Operator certificate fields details Version: 3 Serial Number: X509 Certificate -----BEGIN CERTIFICATE----- MIIE8zCCA9ugAwIBAgILB2ZLeEvsahPcLG8wDQYJKoZIhvcNAQELBQAwSzELMAkGA1UEBhMCTk8x HTAbBgNVBAoMFEJ1eXBhc3MgQVMtOTgzMTYzMzI3MR0wGwYDVQQDDBRCdXlwYXNzIENsYXNzIDMg Q0EgMzAeFw0xNTAxMTMwOTE3NTRaFw0xODAxMTMyMjU5MDBaMIGJMQswCQYDVQQGEwJOTzEpMCcG A1UECgwgTkFTSk9OQUwgS09NTVVOSUtBU0pPTlNNWU5ESUdIRVQxEDAOBgNVBAsMB05ldHQvTkUx KTAnBgNVBAMMIE5BU0pPTkFMIEtPTU1VTklLQVNKT05TTVlORElHSEVUMRIwEAYDVQQFEwk5NzQ0 NDY4NzEwggEfMA0GCSqGSIb3DQEBAQUAA4IBDAAwggEHAoH/ANeweXbKKHrkQW35hOpV9H1GwIRI qwjqf+abtomd4shkrxcbkgeinpnqhs6kdur52vudwzgvogv0ax+uwok12ymolkwjn2uhyx5htkzk cxys0k4by3dpggz5jrzwwvdnoosgraom68oobaxovwswiexpdz6adxz0mdjbfneodezcr84zw+om 31wvoe+RHEARvsM/6lWmIW6A9moze/350L/cXMCDynRn3RKAWi9XbIqo7Qrve9O+ezobdj7a6ynN YdS3/BWUrx13dC6RObnAsxW5YJN7lmrvHYTCno5PFPUb0P4yNXkuODoYUitIV0GHROrB1qivhGBs WNbKhY17AgMBAAGjggGaMIIBljAJBgNVHRMEAjAAMB8GA1UdIwQYMBaAFMzD+Ae3nG16TvWnKx0F +bnhhjhrmb0ga1uddgqwbbrmtbun0c7eqtsy57pdzomr8/hwktaobgnvhq8baf8ebamcbkawfqyd VR0gBA4wDDAKBghghEIBGgEDBTCBpQYDVR0fBIGdMIGaMC+gLaArhilodHRwOi8vY3JsLmJ1eXBh c3mubm8vy3jsl0jqq2xhc3mzq0ezlmnybdbnogwgy4zhbgrhcdovl2xkyxauynv5cgfzcy5uby9k Yz1CdXlwYXNzLGRjPU5PLEPUJ1eXBhc3MlMjBDbGFzcyUyMDMlMjBDQSUyMDM/Y2VydGlmaWNh dgvszxzvy2f0aw9utglzddb6bggrbgefbqcbaqrumgwwmwyikwybbquhmaggj2h0dha6ly9vy3nw LmJ1eXBhc3Mubm8vb2NzcC9CUENsYXNzM0NBMzA1BggrBgEFBQcwAoYpaHR0cDovL2NydC5idXlw YXNzLm5vL2NydC9CUENsYXNzM0NBMy5jZXIwDQYJKoZIhvcNAQELBQADggEBALS/sVxRLfnPGbwo fv3lhi8aik0q6zjiexenya18eohhb/uilfby1oqsstfyhbg6heb7kw8ueg2eekuomznq7hzvghh6 zl2gwfqijq4z2egzwnmgaxo1eczcom/u8a2vedfna6dtj/be+wuwh9faeiklj4xigrtdib6+5vvy NVx+ABkrUMxLvcFGDu7Tig0tCdhfkTNV604InVAcjVFNb1meyo/TjMmqx6TIYfjqCwi7EaThi3IK EB1Y+yxcU9TCweznyWobBfanq55vfemlTZm6+xooo3bAgsCp6AxF6ozVNpkSCRnGNjBICM2IqX iqnnsfwstfhb1zqwsmtaogs= -----END CERTIFICATE----- Signature algorithm: SHA256withRSA Issuer CN: Buypass Class 3 CA 3 Issuer O: Buypass AS Issuer C: Subject SERIAL NUMBER: NASJONAL KOMMUNIKASJONSMYNDIGHET Nett/NE NASJONAL KOMMUNIKASJONSMYNDIGHET Valid from: Tue Jan 13 10:17:54 CET 2015 Valid to: Sat Jan 13 23:59:00 CET 2018 Public Key: Basic Constraints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sCA: false Authority Key Identifier CC:C3:F8:07:B7:9C:6D:7A:4E:F5:A7:2B:1D:05:F9:B3:47:1C:91:D1 RGE (RWAY) - Trusted List ID: TrustServiceStatusList-1 Page 79

80 Subject Key Identifier 66:4D:BB:8D:D1:CE:C4:A9:34:98:E7:B3:C3:66:89:91:F3:F8:56:29 Certificate Policies Policy OID: CRL Distribution Points ldap://ldap.buypass.no/dc=buypass,dc=,cn=buypass%20class%203%20ca%203?certificatere vocationlist Authority Info Access Key Usage: nonrepudiation Thumbprint algorithm: SHA-256 Thumbprint: B4:DE:0A:E1:B1:5C:24:15:42:EA:EB:28:DC:BB:A0:E8:39:A4:E9:9B:38:CB:B8:7C:A9:77:C0:49: B4:F2:A2:0F RGE (RWAY) - Trusted List ID: TrustServiceStatusList-1 Page 80