apg-eastus2.tcs.com

- Tata Consultancy Services Ltd -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 60:11:af:90:6c:ee:d3:24:af:f1:90:dc:fa:17:ea:f3 was issued on by Entrust, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Tata Consultancy Services Ltd

Organization: Tata Consultancy Services Ltd
State / Province: Mahārāshtra
Locality: Mumbai
Country: IN

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 60:11:af:90:6c:ee:d3:24:af:f1:90:dc:fa:17:ea:f3
Serial Number (int): 127697717506196159466701595483141827315
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 07:33:ca:d2:78:d3:fa:8a:29:fd:66:14:99:3d:ac:eb:05:9d:a9:68
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 56:2e:00:98:58:13:f0:d0:c0:64:6a:1c:f7:d3:ce:05:28:88:23:71
Fingerprint (sha256): 00:9f:1f:03:aa:ac:af:ec:2d:12:33:9b:86:45:00:8d:fa:f7:66:f1:64:d0:08:1d:a8:e5:0b:ca:41:6c:6d:ed

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate apg-eastus2.tcs.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for apg-eastus2.tcs.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

apg-eastus2.tcs.com

Other certificates including the domain name tcs.com

(limited to 100 certificates)
INDSEZ.workspace.TCS.com
apg-eastus.tcs.com
inmumitv09.tcs.com
inmumm26.tcs.com
apg-eastus2.tcs.com
inmumgs02.tcs.com
login.ws.tcs.com
usnjyg01.tcs.com
inmumwtv01.tcs.com
inmumm27.tcs.com
patved.workspace.tcs.com
inmumgs01.tcs.com
cdc.workspace.tcs.com
inblrlf01.tcs.com
inmumitv03.tcs.com
mumspz.workspace.tcs.com
on.tcs.com
uklong02.tcs.com
slides.tcs.com
usnjym104.tcs.com
inmumg03.tcs.com
webchat.tcs.com
inkolm01.tcs.com
eventsdemo.tcs.com
inmumm106.tcs.com
partnerportal.tcs.com
on.tcs.com
inmumm12.tcs.com
inmumm02.tcs.com
usnjym05.tcs.com
mssp.tcs.com
inchnlf01.tcs.com
rexa.tcs.com
blrvic.workspace.tcs.com
inmumm24.tcs.com
isometrix.tcs.com
ecommerce.tcs.com
inchnm109.tcs.com
securitycommunity.tcs.com
webchat.tcs.com
inmumm105.tcs.com
lifeline.tcs.com
www.securitycommunity.tcs.com
vms.tcs.com
ustv02.tcs.com
INMUMM112.TCS.COM
uklong01.tcs.com
meeting.tcs.com
blrgla.workspace.tcs.com
www.tcs.com
secureaccess.tcs.com
indrusm01.tcs.com
cep.bpo.tcs.com
mastercraft.tcs.com
on.tcs.com
inmumm04.tcs.com
otpselfservice.tcs.com
link.tcs.com
link.tcs.com
vcseindia.tcs.com
mail.tcs.com
isometrix.tcs.com
fs.tcs.com
goitgirls.tcs.com
cto-cybersecurityresearch.tcs.com
mfgusauto.tcs.com
inpunspvpn.tcs.com
www.tcs.com
inggnloandepotvpn.tcs.com
inhydm02.tcs.com
safetyfirst.tcs.com
grs.tcs.com
usnjym03.tcs.com
vcseus.tcs.com
bap.workspace.tcs.com
inblrm05.tcs.com
inmumg01.tcs.com
usprivpn.tcs.com
adminwindow.tcs.com
ngpmih2.workspace.tcs.com
inkolm10.tcs.com
www.tcs-ca.tcs.com
kolkataconnect.tcs.com
bodstore.tcs.com
digitalsoftware.tcs.com
inblrg02.tcs.com
inmumitv08.tcs.com
dbs.tcs.com
inmumgs02.tcs.com
inblrm08.tcs.com
beta.tcs.com
vmsprocurement.tcs.com
inmumitv01.tcs.com
www.tcs.com
vmsprocurement.tcs.com
ibegin.tcs.com
inkolm03.tcs.com
dss.tcs.com
www.careers.tcs.com
isometrixb.tcs.com

Certificate

The complete raw certificate details for apg-eastus2.tcs.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8ul93XJ9LEg+ae7e5Yh
ue6NhhMDWeK50Fq3mAo+jhTo+spFhznCUKKczMesMM6K3T/BG2Aa/+PckuHzww4s
0JnLE075dxmMw7YGPoivOr0IPkk8O+8Ym+OOErNaYYC1vHj/4NsVhbYU1NLVYTyH
J7r+BKB9Qs+aiQW84WMGAh5Wc93nKFi8kr6c3PPmoqnwjmp2sod1juZbEt2VDyyx
yAjgb+M/Syy0gwpnBskME5PwnzjWRr91qHy7j7rLKtWCw8j05dHASKXhu2hOanzo
hroP4n3c0reTqlev5E4ZOMBPPuK8c5gObDQ4vgs8NDj5dcVZaTQo/zNczdj+Nndr
YQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 127697717506196159466701595483141827315
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-06 10:16:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-05 10:16:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Mahārāshtra'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Mumbai'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tata Consultancy Services Ltd'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'apg-eastus2.tcs.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20172313212685675594208611111669952510505622640539526595175574727418346902406597294516044791466140664307551908646523016579525639321335050253479467152171790842323619364522891048948270077279291750364420759591099817295451151378301307982658759615478260470627183475386479005876819656738528701247530887699910646526825016473385307965255936875484612558237953762716784020694639147337204931300593850363961291883750126972779991637940741274236394925853181593330006613943163271178457415126745441816360061321157091130669399886654599191465763109395168365719538142223007967291095351188355576277564976851518764205390716190938791111521
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0733cad278d3fa8a29fd6614993daceb059da968
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apg-eastus2.tcs.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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