seceppinfsrv141.tieto.com

- Tieto Oyj -

Issued by TeliaSonera Server CA v2

About this certificate

This digital certificate with serial number 01:63:8c:28:91:71:16:91:15:de:97:95:1b:5c:7c was issued on by TeliaSonera.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Tieto Oyj

Organization: Tieto Oyj
Organization unit: Security Services
Locality: Espoo
Country: FI

TeliaSonera

Organization: TeliaSonera
Country: FI

This certificate has expire since

Certificate Details

Serial Number (hex): 01:63:8c:28:91:71:16:91:15:de:97:95:1b:5c:7c
Serial Number (int): 7211359907277020401129093836004476
Serial Number lenght: 113 bits, 15 octets

SubjectKeyId: 4e:3f:e1:89:63:a6:9c:9e:0e:16:b5:3e:75:2c:a9:88:08:74:89:41
AuthorityKeyId: 2f:49:3c:29:4f:d7:07:25:f9:c6:8c:d5:64:f5:66:3d:12:83:22:95

Fingerprint (sha1): de:18:01:ca:3b:ec:a9:14:85:bd:b6:7a:04:8d:c9:05:53:e1:0b:25
Fingerprint (sha256): 02:ef:1d:ae:71:44:ac:f6:6f:98:b2:6e:3f:a3:a1:a2:c8:99:9c:6d:0b:ad:b7:6c:e1:b6:a6:a2:cd:fc:c5:ea

Issuing Certificate URL: http://repository.trust.teliasonera.com/teliasoneraservercav2.cer

Revocation information

OCSP Server: http://ocsp.trust.telia.com
CRL Distribution Point: http://crl-3.trust.teliasonera.com/teliasoneraservercav2.crl

Check the revocation status for certificate seceppinfsrv141.tieto.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for seceppinfsrv141.tieto.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

seceppinfsrv141.tieto.com

Other certificates including the domain name tieto.com

(limited to 100 certificates)
test.ttp.service.tieto.com
sptestrecproc01.service.tieto.com
novasupport.tieto.com
signalingsupport.tieto.com
tietoufi.tieto.com
partner.portal.tieto.com
dev-remotework.eu.tieto.com
ut10.tix.tieto.com
*.onecloud.tieto.com
tpras.portal.tieto.com
adminportal.sta2.no.azs.service.tieto.com
extmytime.tieto.com
*.shared.pub.tds.tieto.com
analytics.service.tieto.com
www.sign.tieto.com
projectwiki.tieto.com
*.tusaas.vattenfall.tieto.com
interface.tieto.com
rfirds-prod-tsuvf.service.tieto.com
ti-node-internal.soc.tieto.com
*.service.tieto.com
sts.tieto.com
artifactoryoss.shared.enigma.tds.tieto.com
web.signing.tieto.com
ce.tieto.com
sentry.eb.tieto.com
broker.service.tieto.com
repo.onecloud.tieto.com
tefihelvpnex002a.tieto.com
dsoweb-test-tsuhel.service.tieto.com
*.shared.lyse.tds.tieto.com
sts.tieto.com
classify.demo.tieto.com
aarmbase.int.tieto.com
seceppinfsrv141.tieto.com
hsl.etb.tieto.com
teras.tieto.com
jira.tieto.com
spmcr02.service.tieto.com
ib.tieto.com
ar2015.tieto.com
hcw.portal.tieto.com
ar2016.tieto.com
connect-test.tieto.com
hws.tieto.com
analytics.portal.tieto.com
ecm.extra.tieto.com
msucc.tieto.com
sni.cloudflaressl.com
*.signalingsolutions.pub.tds.tieto.com
oftp-test.tix.tieto.com
api.appservice.azurestacklab.demo.tieto.com
ehotel.bix.tieto.com
*.domstolsverket.pub.tds.tieto.com
lyncweb.tieto.com
*.petovsam3.pubdev.tds.tieto.com
tsu-eon-gw.ext.tieto.com
ir-report.tieto.com
*.artifactory.shared.getswish.etds.tieto.com
rtlrds-prod-tsuvf.service.tieto.com
api.appservice.azurestacklab.demo.tieto.com
*.adminhosting.sta2.no.azs.service.tieto.com
ehotel.bix.tieto.com
banktestmts.getswish.pub.tds.tieto.com
www.tieto.com
venni.service.tieto.com
cmf.portal.tieto.com
*.trfcc.service.tieto.com
web-test-tsufortum.service.tieto.com
ar2018.tieto.com
cas.dev.gapps.tieto.fi
customer-experience.tieto.com
eb.tieto.com
secens01.eu.tieto.com
*.core.intdev.tds.tieto.com
browse.ssb.tieto.com
connect.tieto.com
api-utb.tsuge.service.tieto.com
jira.pcoe.etb.tieto.com
tetcdev01.iot.tieto.com
jira.oss.tieto.com
idp.tieto.com
sni.cloudflaressl.com
*.appservice.azurestacklab.demo.tieto.com
*.devops.pub.tds.tieto.com
c105s149vm020.eu.tieto.com
ar2015.tieto.com
tetcdev01.iot.tieto.com
analyticsd.portal.tieto.com
ubuntupetovsam.core.pubdev.tds.tieto.com
portal.alv1.se.azs.service.tieto.com
requeste.tieto.com
monitoring.service.tieto.com
oftp.tix.tieto.com
broker.service.tieto.com
hsl.etb.tieto.com
ftp.tix.tieto.com
sfbedgepool2.eu.tieto.com
conf.tieto.com
ttp.service.tieto.com

Certificate

The complete raw certificate details for seceppinfsrv141.tieto.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHGDCCBQCgAwIBAgIPAWOMKJFxFpEV3peVG1x8MA0GCSqGSIb3DQEBCwUAMEYx
CzAJBgNVBAYTAkZJMRQwEgYDVQQKDAtUZWxpYVNvbmVyYTEhMB8GA1UEAwwYVGVs
aWFTb25lcmEgU2VydmVyIENBIHYyMB4XDTE4MDUyMzA4NDA1OFoXDTIwMDUyMjA4
NDA1OFowcTELMAkGA1UEBhMCRkkxDjAMBgNVBAcMBUVzcG9vMRIwEAYDVQQKDAlU
aWV0byBPeWoxGjAYBgNVBAsMEVNlY3VyaXR5IFNlcnZpY2VzMSIwIAYDVQQDDBlz
ZWNlcHBpbmZzcnYxNDEudGlldG8uY29tMIICIjANBgkqhkiG9w0BAQEFAAOCAg8A
MIICCgKCAgEA1erBTz8FxKIViK49psU4yxNbCPRGP2Q0tgM1mzsdJszRkxP+ELp8
RE7g4E6/8bzsYyFkQAvgYDGgz0VymE240DA79wJphRFuy0PlUckhtQK9Tx2XO9ar
N+3MmZfLqPD7+0B/1oFAGj8ciSitN3yfYqPgdYWFLucIW6LjnvbtSKySy9roBRE1
j+U2TqXkTBgPecyLcAUUsg7zD+N66jkktPY46wXzqDI3wgZ1QjJtfBqvTGHSNLym
YpIjxvoHNfhqwQA0BfRepXX+FFosj07Y+wHQEM17pA6OnhLJb7WD9fC+j0fFg/ek
zn44R/fv7zqL6kKmML49hyoPYijfyYfUsuN7YwYXmCUtaqwAqRv+3SxlCgtfXdfw
kDlXjhdXJ/DceovHLEBiL0LCfcAJKPXc9v+5j+mBgfK5PkpCS8+o1qJaN+q6Cd8n
FC1aD6s7xcLZRABlvZmc+LsINfsGWKYHMqUagT0kjtKNK7frH3So7sDRWXOKBRha
/yjNe5k11quIddkQ74EwxaCwZe4ZLjWr5MstMJz151qvhQMKHcsb8Err2oBPXkK7
zqwEKAOrnmTFx3F89YPTLvgs3wmbN6+pqTurY8NW70yKyK7k/SMFQbHQ2LXapzSx
ISYLd2vBrEK5qNKh+zu2wr9dwY6vN0hZv28Tm6g3sahVXeG/C+Scjk0CAwEAAaOC
AdYwggHSMB8GA1UdIwQYMBaAFC9JPClP1wcl+caM1WT1Zj0SgyKVMB0GA1UdDgQW
BBROP+GJY6acng4WtT51LKmICHSJQTAOBgNVHQ8BAf8EBAMCBLAwTgYDVR0gBEcw
RTBDBgZngQwBAgIwOTA3BggrBgEFBQcCARYraHR0cDovL3JlcG9zaXRvcnkudHJ1
c3QudGVsaWFzb25lcmEuY29tL0NQUzAkBgNVHREEHTAbghlzZWNlcHBpbmZzcnYx
NDEudGlldG8uY29tME0GA1UdHwRGMEQwQqBAoD6GPGh0dHA6Ly9jcmwtMy50cnVz
dC50ZWxpYXNvbmVyYS5jb20vdGVsaWFzb25lcmFzZXJ2ZXJjYXYyLmNybDAdBgNV
HSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwgYYGCCsGAQUFBwEBBHoweDAnBggr
BgEFBQcwAYYbaHR0cDovL29jc3AudHJ1c3QudGVsaWEuY29tME0GCCsGAQUFBzAC
hkFodHRwOi8vcmVwb3NpdG9yeS50cnVzdC50ZWxpYXNvbmVyYS5jb20vdGVsaWFz
b25lcmFzZXJ2ZXJjYXYyLmNlcjATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG
9w0BAQsFAAOCAgEANMzxgb2JyP3Sjdn5RVBUJYbL7vvhnJsFNirhojmLRwGuXdYs
SIkjrrG6IZbTCPNGaiukauGSdSXlI2exN65mVE7/SkkaA4JpluV3OcfOgmkcJ9K4
N9UdH+ldwJI6ThJbsafjftmi7V6SykoJDXU/JTiJaF3uZQZpmpEZ1nr6fDnfL3FS
8EqZv1iWZn9lFtompYv6Bn8mxt1jQY1AVMdrVy9ngeFAruKYROFQyWK/JYahggFj
sqL6d/j3xhYVHwKIqOr2DDOqFPjPR4e7xtU1Yzx59MGT1E3deq11xZyV7IRSBeAO
CJRi+Zf+hW8YdKYLFgugRo7suemncwRmV6d66iEQlrr3l9YnmU6dcnhJ2uViJrqH
WV4dsr1P5O8OGfmnqlXIhoL9dmCcTxZn3BeKFJZyVXKhpICo2K/6lTndKcHB4OUW
E5eTLGivkT7ajai24seAmQbAX7j4yXnCysosXjJHi7vdP939waVh9wuFaKj3DeyQ
fMAzIVQiUUHLUGNWZ3+1G3Ec96yvuhVuKu7FydhEnruHspUD+YxKPnszkpFYtMeg
JN3t1cn0xxGW5EISMKrdW6yxGThvgkgABoxYTctUC7Y/JY6rSN1Omm6kwyni1lwl
A5VzWbpEnBDeFHhMfsfazuozqwxjLlFSnOkW40RUQ8vo0m4SOZXq31McaG8=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7211359907277020401129093836004476
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'TeliaSonera'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'TeliaSonera Server CA v2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-23 08:40:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-22 08:40:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Espoo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Tieto Oyj'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Security Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'seceppinfsrv141.tieto.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 872705269746826578632837873550224494109862584684695999952356298787500902204712933907737441568445472881065582294878472943997354220441759103574474398899430390921537223663375121191352281001938973462711854677662165312044378799784488369990321675114338971299204950225387559368773871479673758881129414242137152136232845179943714289340272684577378947437090588164662975199296955864339342554446321899455625324720836409114538838650076411600927981716709622824906285843555102261450023519493274493324864510748262293709879395292165151528872057918080763097721146294690817694550849404866620945556372829362664965932737348084746765364118156574679331151566204270277591354751365140464857039896740301288660450739478068777909502210507612902953232543957583209458290071198304684056014975044416838032007377096071573629993178916606381073817381602016007769120755067801174467432957345930448999488217175584253257289655292932182633370470812714003433767314822168581956270242207294113383884815247664563212335716609471335733481948056016608016320051856804473203210589276712554471061733985313046316954489301208416638803828807513969020455995074296052946734820258624674280876610859936690894254743832223596677716209136974474574127090547537423311865265662013217783250980429
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 2f493c294fd70725f9c68cd564f5663d12832295
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4e3fe18963a69c9e0e16b53e752ca98808748941
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (71 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://repository.trust.teliasonera.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seceppinfsrv141.tieto.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (70 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl-3.trust.teliasonera.com/teliasoneraservercav2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (122 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.trust.telia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repository.trust.teliasonera.com/teliasoneraservercav2.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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