uk.vpn.tatacommunications.com

- Tata Communications Limited -

Issued by Thawte RSA CA 2018

About this certificate

This digital certificate with serial number 06:4b:3a:6e:b8:44:3e:8d:c8:bc:d3:88:67:f5:5d:d5 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Tata Communications Limited

Organization: Tata Communications Limited
Organization unit: IT
State / Province: Maharashtra
Locality: Mumbai
Country: IN

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:4b:3a:6e:b8:44:3e:8d:c8:bc:d3:88:67:f5:5d:d5
Serial Number (int): 8365975390982239840563162243092798933
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 2e:08:c6:1c:24:88:c4:af:80:15:13:06:e7:ce:64:81:cd:80:79:e0
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a

Fingerprint (sha1): 66:ad:4f:2a:38:a7:25:5e:a6:0a:e2:bc:a5:b1:4a:0a:d2:8f:3a:ef
Fingerprint (sha256): 00:63:15:e0:e8:8e:ff:f8:b3:37:10:ca:c2:47:62:9e:24:18:6b:cc:bc:f6:0f:0a:81:9c:3c:6c:36:46:ce:21

Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl

Check the revocation status for certificate uk.vpn.tatacommunications.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for uk.vpn.tatacommunications.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

uk.vpn.tatacommunications.com

Other certificates including the domain name tatacommunications.com

(limited to 100 certificates)
in-pun.vpn.tatacommunications.com
reports.move.tatacommunications.com
indiakyc.move.tatacommunications.com
uk.vpn.tatacommunications.com
eptw.tatacommunications.com
*.globalpartnerportal.com
mobility.tatacommunications.com
cardiolog.tatacommunications.com
test-network.iot.tatacommunications.com
gleexpecls.instacccloud.tatacommunications.com
videoconferencing.tatacommunications.com
in-pun.vpn.tatacommunications.com
xfer.tatacommunications.com
mt-edge-b.3scale.net
in-access.tatacommunications.com
mt-edge-b.3scale.net
ekyc.devkyc.move.tatacommunications.com
us-access.tatacommunications.com
support1.chit.biz
smartdevices.iot.tatacommunications.com
care.koinx.com
portal3.mss.tatacommunications.com
developer.tatacommunications.com
*.tatacommunications.com
jobs.tatacommunications.com
ekyc.prod.in.tmpkyc.move.tatacommunications.com
ekyc.devkyc.move.tatacommunications.com
extranet-vno.tatacommunications.com
demo.analytics.iot.tatacommunications.com
campaign.tatacommunications.com
test-data.iot.tatacommunications.com
extranet-vno.tatacommunications.com
portaltest.tatacommunications.com
helpcenter.keysuggest.io
test-platform.iot.tatacommunications.com
sfilex.tatacommunications.com
healthandsafety.tatacommunications.com
mt-edge-b.3scale.net
*.tatacommunications.com
portal.tatacommunications.com
idp.tatacommunications.com
helpdesk.mytravaly.com
kiacart.triblem.com
www.peakinfra.ethicshelpline.in
www.tatacommunications.com
mt-edge-b.3scale.net
support.xcellhost.cloud
enetcare.tatacommunications.com
primerep.tatacommunications.com
cti1.instaccglobal.tatacommunications.com
support.subcom.tech
in-pun.vpn.tatacommunications.com
customerzone.tatacommunications.com
actsync-na.tatacommunications.com
safety.tatacommunications.com
support.inxeption.com
filexch.tatacommunications.com
hranalytics.tatacommunications.com
smesupport.iifl.com
indiakyc.devkyc.move.tatacommunications.com
portalna.tatacommunications.com
primerep.tatacommunications.com
cardiolog.tatacommunications.com
ekyc.move.tatacommunications.com
test-data.iot.tatacommunications.com
support.agtpl.in
www.tatacare.tatacommunications.com
itassist.aggregateintelligence.com
*.mss.tatacommunications.com
in.mum.vpn.tatacommunications.com
ekyc.uatkyc.move.tatacommunications.com
oneplacebeta.tatacommunications.com
tatacommunications.com
filexch.tatacommunications.com
documentation.mrnobody.in
www.peakinfra.ethicshelpline.in
in-mum.vpn.tatacommunications.com
mobility.tatacommunications.com
us.vpn.tatacommunications.com
in-chn.vpn.tatacommunications.com
move.tatacommunications.com
lmt.tatacommunications.com
*.msft5-eu2.tatacommunications.com
workersafety.uat2.iot.tatacommunications.com
comms-apac.tatacommunications.com
*.tatacommunications.com
*.globalpartnerportal.com
ethernetportal.tatacommunications.com
agrud-support.wetranscloud.in
business-support.truecaller.com
*.msft5-us2.tatacommunications.com
netpms.tatacommunications.com
voiceservices.tatacommunications.com
uat-ekyc.move.tatacommunications.com
support.minits.in
support.freedomcard.io
tatacommunications.com
iot.tatacommunications.com
support.ignitecinc.com
*.ipstorage.tatacommunications.com

Certificate

The complete raw certificate details for uk.vpn.tatacommunications.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4o9PVPmGNy3Nf5k0q05
Jt7bK/3UVrms9DUm6F0gyDGgsAn8JgYE6cJjFSOeLVOOjzC4G39HqYk80vFOKq/F
LJ1E6brTRE+qAUAtxPMkSk2hO71lO9rCzbV0pM4I4VUc9dq6MEmJOOPL3FCRyAHx
Cg3+We/6yVlWE76Y2oaPWdjm/ORy2x6JFKib1mK51s2ooTJ6odsL74CGv6d1bWBt
EcuK2KiM36jEhEKCJM+yi6go90qjWiP6jDKZcFnzoVc4nrGEvFu8BsZwlX3l7RiF
XSLXHOlnsZWOl/hQBFzScOgo/irVfdLwgLGQ+B63GQS4VIb9YQG/NeP/BuoHK5Vi
XQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8365975390982239840563162243092798933
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-12 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Maharashtra'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Mumbai'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tata Communications Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'uk.vpn.tatacommunications.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21654918447784197601904618231426793272462282004500597540148706928132348397122105899784546536342832684227153153948071787997341499399789946109862334014504643164284468210584871779537665539463571840000020039371842064402478445642231257904259317943782645010935289854956293668628097540675469646131570609231056306228512829855801581915206036787364813476261123948850217922445896961879366107349975470231766654065063108160721995629060214149653836751045931801863043553036319873316907018435428298928909767590080116111450535671384405022950553890182988028552540466300719574219989710389641113349055894838592544456223266871931917656669
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2e08c61c2488c4af80151306e7ce6481cd8079e0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uk.vpn.tatacommunications.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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