tpras.portal.tieto.com

Issued by Thawte RSA CA 2018

About this certificate

This digital certificate with serial number 0e:73:8e:62:87:27:9c:e2:f1:d4:3f:b6:b3:3b:d9:b0 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tpras.portal.tieto.com

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:73:8e:62:87:27:9c:e2:f1:d4:3f:b6:b3:3b:d9:b0
Serial Number (int): 19209193988072337641447256649572800944
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 70:c3:c6:81:5a:d2:71:fa:57:c3:ca:5e:6e:9e:83:85:d3:23:2f:ed
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a

Fingerprint (sha1): ae:0e:19:7b:76:4b:cf:bb:3d:32:14:50:67:61:33:35:aa:12:9b:c3
Fingerprint (sha256): 00:d0:72:95:f7:e5:55:84:b7:26:77:80:2c:50:85:2a:40:37:50:15:e3:6a:f8:fe:ec:a3:44:75:97:22:b7:9b

Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl

Check the revocation status for certificate tpras.portal.tieto.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tpras.portal.tieto.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

tpras.portal.tieto.com

Other certificates including the domain name tieto.com

(limited to 100 certificates)
test.ttp.service.tieto.com
sptestrecproc01.service.tieto.com
novasupport.tieto.com
signalingsupport.tieto.com
tietoufi.tieto.com
partner.portal.tieto.com
dev-remotework.eu.tieto.com
ut10.tix.tieto.com
*.onecloud.tieto.com
tpras.portal.tieto.com
adminportal.sta2.no.azs.service.tieto.com
extmytime.tieto.com
*.shared.pub.tds.tieto.com
analytics.service.tieto.com
www.sign.tieto.com
projectwiki.tieto.com
*.tusaas.vattenfall.tieto.com
interface.tieto.com
rfirds-prod-tsuvf.service.tieto.com
ti-node-internal.soc.tieto.com
*.service.tieto.com
sts.tieto.com
artifactoryoss.shared.enigma.tds.tieto.com
web.signing.tieto.com
ce.tieto.com
sentry.eb.tieto.com
broker.service.tieto.com
repo.onecloud.tieto.com
tefihelvpnex002a.tieto.com
dsoweb-test-tsuhel.service.tieto.com
*.shared.lyse.tds.tieto.com
sts.tieto.com
classify.demo.tieto.com
aarmbase.int.tieto.com
seceppinfsrv141.tieto.com
hsl.etb.tieto.com
teras.tieto.com
jira.tieto.com
spmcr02.service.tieto.com
ib.tieto.com
ar2015.tieto.com
hcw.portal.tieto.com
ar2016.tieto.com
connect-test.tieto.com
hws.tieto.com
analytics.portal.tieto.com
ecm.extra.tieto.com
msucc.tieto.com
sni.cloudflaressl.com
*.signalingsolutions.pub.tds.tieto.com
oftp-test.tix.tieto.com
api.appservice.azurestacklab.demo.tieto.com
ehotel.bix.tieto.com
*.domstolsverket.pub.tds.tieto.com
lyncweb.tieto.com
*.petovsam3.pubdev.tds.tieto.com
tsu-eon-gw.ext.tieto.com
ir-report.tieto.com
*.artifactory.shared.getswish.etds.tieto.com
rtlrds-prod-tsuvf.service.tieto.com
api.appservice.azurestacklab.demo.tieto.com
*.adminhosting.sta2.no.azs.service.tieto.com
ehotel.bix.tieto.com
banktestmts.getswish.pub.tds.tieto.com
www.tieto.com
venni.service.tieto.com
cmf.portal.tieto.com
*.trfcc.service.tieto.com
web-test-tsufortum.service.tieto.com
ar2018.tieto.com
cas.dev.gapps.tieto.fi
customer-experience.tieto.com
eb.tieto.com
secens01.eu.tieto.com
*.core.intdev.tds.tieto.com
browse.ssb.tieto.com
connect.tieto.com
api-utb.tsuge.service.tieto.com
jira.pcoe.etb.tieto.com
tetcdev01.iot.tieto.com
jira.oss.tieto.com
idp.tieto.com
sni.cloudflaressl.com
*.appservice.azurestacklab.demo.tieto.com
*.devops.pub.tds.tieto.com
c105s149vm020.eu.tieto.com
ar2015.tieto.com
tetcdev01.iot.tieto.com
analyticsd.portal.tieto.com
ubuntupetovsam.core.pubdev.tds.tieto.com
portal.alv1.se.azs.service.tieto.com
requeste.tieto.com
monitoring.service.tieto.com
oftp.tix.tieto.com
broker.service.tieto.com
hsl.etb.tieto.com
ftp.tix.tieto.com
sfbedgepool2.eu.tieto.com
conf.tieto.com
ttp.service.tieto.com

Certificate

The complete raw certificate details for tpras.portal.tieto.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ovdTUeiYBPYMY20b+1o
cKtZAvEZHL518dzO543pGKBTJ7HX+lrvdbX5bOxXjyolC8Oz20OZ9X68+rfZ/0nD
GFcAqq33MngGQFo0cQbrLpWyNWJqpn51V+ysFbhSKffgJbfzNuf1YMSanWXhSJhC
lPnn/nFwonHQ7CBR8rXxzBWCYbPikq9u771fjoZKtRFQ2Lpu6teTqs2xn+HP7goy
hcOt6fMiZzTyU/QX9Py+NIoMWa2xzGCRc1geqXSm6fqPS2YPN9xDzo7txdYhF5ky
W3ylkeiU1rxSV1g6O7lrgVeZMA4/w8tLYryJ3zYn8xP+XOBvRfCBLtifFn0S598f
3wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19209193988072337641447256649572800944
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-07 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tpras.portal.tieto.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26579013778855739172165891535654026817939784294543828113192994293764641869200387226704295116275031729813349120433258832951881865388621125803610315545907497163132012190680018139882151214534975354528646760479009393388015542278959999193947915515705570559961213080625175086641680348379307471415857426070446536168242955767040804076735760550711892650855404333468564989065731854487509427721494308469631424506892278987314609062522428510443194420801725079094746933051426600285573281983312894666600582415706508622053140960458865162780542303624086624843349749131522890169064133277536746178962411887101668608922965082243413778399
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							70c3c6815ad271fa57c3ca5e6e9e8385d3232fed
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tpras.portal.tieto.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (486 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (482 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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