www.sign.tieto.com

Issued by Amazon

About this certificate

This digital certificate with serial number 0d:53:7e:0a:6c:64:d9:06:ac:a6:95:8c:72:b0:17:f3 was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.sign.tieto.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:53:7e:0a:6c:64:d9:06:ac:a6:95:8c:72:b0:17:f3
Serial Number (int): 17713480993900280813349089214196619251
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: ac:dd:df:f2:15:2a:36:51:cf:aa:f0:0f:05:41:42:2e:1c:e9:6e:cd
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 07:73:20:83:88:3d:76:cc:06:9d:a5:88:f4:db:a1:ae:9b:5d:a8:51
Fingerprint (sha256): 01:33:b4:d7:fd:8a:df:d9:b4:d9:45:a5:1e:4d:e5:37:c7:36:71:67:21:ee:e5:98:f8:ea:c0:ef:08:f5:59:aa

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl

Check the revocation status for certificate www.sign.tieto.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.sign.tieto.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.sign.tieto.com

Other certificates including the domain name tieto.com

(limited to 100 certificates)
test.ttp.service.tieto.com
sptestrecproc01.service.tieto.com
novasupport.tieto.com
signalingsupport.tieto.com
tietoufi.tieto.com
partner.portal.tieto.com
dev-remotework.eu.tieto.com
ut10.tix.tieto.com
*.onecloud.tieto.com
tpras.portal.tieto.com
adminportal.sta2.no.azs.service.tieto.com
extmytime.tieto.com
*.shared.pub.tds.tieto.com
analytics.service.tieto.com
www.sign.tieto.com
projectwiki.tieto.com
*.tusaas.vattenfall.tieto.com
interface.tieto.com
rfirds-prod-tsuvf.service.tieto.com
ti-node-internal.soc.tieto.com
*.service.tieto.com
sts.tieto.com
artifactoryoss.shared.enigma.tds.tieto.com
web.signing.tieto.com
ce.tieto.com
sentry.eb.tieto.com
broker.service.tieto.com
repo.onecloud.tieto.com
tefihelvpnex002a.tieto.com
dsoweb-test-tsuhel.service.tieto.com
*.shared.lyse.tds.tieto.com
sts.tieto.com
classify.demo.tieto.com
aarmbase.int.tieto.com
seceppinfsrv141.tieto.com
hsl.etb.tieto.com
teras.tieto.com
jira.tieto.com
spmcr02.service.tieto.com
ib.tieto.com
ar2015.tieto.com
hcw.portal.tieto.com
ar2016.tieto.com
connect-test.tieto.com
hws.tieto.com
analytics.portal.tieto.com
ecm.extra.tieto.com
msucc.tieto.com
sni.cloudflaressl.com
*.signalingsolutions.pub.tds.tieto.com
oftp-test.tix.tieto.com
api.appservice.azurestacklab.demo.tieto.com
ehotel.bix.tieto.com
*.domstolsverket.pub.tds.tieto.com
lyncweb.tieto.com
*.petovsam3.pubdev.tds.tieto.com
tsu-eon-gw.ext.tieto.com
ir-report.tieto.com
*.artifactory.shared.getswish.etds.tieto.com
rtlrds-prod-tsuvf.service.tieto.com
api.appservice.azurestacklab.demo.tieto.com
*.adminhosting.sta2.no.azs.service.tieto.com
ehotel.bix.tieto.com
banktestmts.getswish.pub.tds.tieto.com
www.tieto.com
venni.service.tieto.com
cmf.portal.tieto.com
*.trfcc.service.tieto.com
web-test-tsufortum.service.tieto.com
ar2018.tieto.com
cas.dev.gapps.tieto.fi
customer-experience.tieto.com
eb.tieto.com
secens01.eu.tieto.com
*.core.intdev.tds.tieto.com
browse.ssb.tieto.com
connect.tieto.com
api-utb.tsuge.service.tieto.com
jira.pcoe.etb.tieto.com
tetcdev01.iot.tieto.com
jira.oss.tieto.com
idp.tieto.com
sni.cloudflaressl.com
*.appservice.azurestacklab.demo.tieto.com
*.devops.pub.tds.tieto.com
c105s149vm020.eu.tieto.com
ar2015.tieto.com
tetcdev01.iot.tieto.com
analyticsd.portal.tieto.com
ubuntupetovsam.core.pubdev.tds.tieto.com
portal.alv1.se.azs.service.tieto.com
requeste.tieto.com
monitoring.service.tieto.com
oftp.tix.tieto.com
broker.service.tieto.com
hsl.etb.tieto.com
ftp.tix.tieto.com
sfbedgepool2.eu.tieto.com
conf.tieto.com
ttp.service.tieto.com

Certificate

The complete raw certificate details for www.sign.tieto.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/aJkGqS4SIbYJyICCWE
6pToBSDfwXZ1I7xVN2SF5eHZ8L5lmAb+pFWEVBLq8zUkfDA2G5bzpEs2ZNMIRrjD
p6f6Xme9zE0OwDq5Bqgw4AdyeIyKvGYyIdWEoYkRRaYKB17CzZr4QujVGUegZ2iR
C3pfSmDPy2GRf6a9zZhZdqIrZvnLaGPv4qcIsA4lvf7JujTXFrXtk8oGrwYjmj9A
yB918SfLzf0704fECLr+9ropZgb2EF5KXwau/QCUCRg0LYwYrZkjnanh5vtsT9zO
p/A/vdAwgfwPe58IdzcXfTAGjEUzIqaRf0CHggXCxO4nBOqw+M4c/CB4Lf1gcxUs
0wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17713480993900280813349089214196619251
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-21 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.sign.tieto.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22213275472265465316899279961880150497582348114859957709023753297915108500286372709269135484421479288848421756110504982848494309472776038719395482602354011459845565522439091975800341884565081597946220830517908163758055186687366653608607881509769955248148072012862831787459317078077820998553944407022018279313020457270726015410626399009844704555482168432304889675739926632914185465693721166415973208255738978935195440526315259549085404578125152551087026604125158924722089843015403281769784695130585115815013047994652647375176811032721322083763202790724751645323934226004828852694193192462848322698581523437010394885331
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							acdddff2152a3651cfaaf00f0541422e1ce96ecd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sign.tieto.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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