hcw.portal.tieto.com

- Tieto Finland Oy -

Issued by Thawte SSL CA

About this certificate

This digital certificate with serial number 7c:34:4d:b1:55:0e:0a:80:dc:59:c6:a2:1d:0e:64:62 was issued on by Thawte, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • CAs must include keyIdentifer field of AKI in all non-self-issued certificates (RFC 5280: 4.2.1.1)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Tieto Finland Oy

Organization: Tieto Finland Oy
State / Province: Helsinki
Locality: Helsinki
Country: FI

Thawte, Inc.

Organization: Thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 7c:34:4d:b1:55:0e:0a:80:dc:59:c6:a2:1d:0e:64:62
Serial Number (int): 165095846709220825877181005421683303522
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId:

Fingerprint (sha1): 3a:86:ee:70:42:37:44:a6:6e:6e:b7:4f:43:4f:64:04:17:23:53:0b
Fingerprint (sha256): 03:6e:05:7d:cc:92:1c:66:50:e9:2c:fe:4e:83:4a:6d:ec:90:44:c0:65:32:23:2c:c8:bb:b6:f9:2e:89:95:b6


Revocation information

OCSP Server: http://ocsp.thawte.com
CRL Distribution Point: http://svr-ov-crl.thawte.com/ThawteOV.crl

Check the revocation status for certificate hcw.portal.tieto.com

0

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for hcw.portal.tieto.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Extended Key Usages

Server Authentication
Client Authentication

Extensions

4 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any subject alternative names.

Other certificates including the domain name tieto.com

(limited to 100 certificates)
test.ttp.service.tieto.com
sptestrecproc01.service.tieto.com
novasupport.tieto.com
signalingsupport.tieto.com
tietoufi.tieto.com
partner.portal.tieto.com
dev-remotework.eu.tieto.com
ut10.tix.tieto.com
*.onecloud.tieto.com
tpras.portal.tieto.com
adminportal.sta2.no.azs.service.tieto.com
extmytime.tieto.com
*.shared.pub.tds.tieto.com
analytics.service.tieto.com
www.sign.tieto.com
projectwiki.tieto.com
*.tusaas.vattenfall.tieto.com
interface.tieto.com
rfirds-prod-tsuvf.service.tieto.com
ti-node-internal.soc.tieto.com
*.service.tieto.com
sts.tieto.com
artifactoryoss.shared.enigma.tds.tieto.com
web.signing.tieto.com
ce.tieto.com
sentry.eb.tieto.com
broker.service.tieto.com
repo.onecloud.tieto.com
tefihelvpnex002a.tieto.com
dsoweb-test-tsuhel.service.tieto.com
*.shared.lyse.tds.tieto.com
sts.tieto.com
classify.demo.tieto.com
aarmbase.int.tieto.com
seceppinfsrv141.tieto.com
hsl.etb.tieto.com
teras.tieto.com
jira.tieto.com
spmcr02.service.tieto.com
ib.tieto.com
ar2015.tieto.com
hcw.portal.tieto.com
ar2016.tieto.com
connect-test.tieto.com
hws.tieto.com
analytics.portal.tieto.com
ecm.extra.tieto.com
msucc.tieto.com
sni.cloudflaressl.com
*.signalingsolutions.pub.tds.tieto.com
oftp-test.tix.tieto.com
api.appservice.azurestacklab.demo.tieto.com
ehotel.bix.tieto.com
*.domstolsverket.pub.tds.tieto.com
lyncweb.tieto.com
*.petovsam3.pubdev.tds.tieto.com
tsu-eon-gw.ext.tieto.com
ir-report.tieto.com
*.artifactory.shared.getswish.etds.tieto.com
rtlrds-prod-tsuvf.service.tieto.com
api.appservice.azurestacklab.demo.tieto.com
*.adminhosting.sta2.no.azs.service.tieto.com
ehotel.bix.tieto.com
banktestmts.getswish.pub.tds.tieto.com
www.tieto.com
venni.service.tieto.com
cmf.portal.tieto.com
*.trfcc.service.tieto.com
web-test-tsufortum.service.tieto.com
ar2018.tieto.com
cas.dev.gapps.tieto.fi
customer-experience.tieto.com
eb.tieto.com
secens01.eu.tieto.com
*.core.intdev.tds.tieto.com
browse.ssb.tieto.com
connect.tieto.com
api-utb.tsuge.service.tieto.com
jira.pcoe.etb.tieto.com
tetcdev01.iot.tieto.com
jira.oss.tieto.com
idp.tieto.com
sni.cloudflaressl.com
*.appservice.azurestacklab.demo.tieto.com
*.devops.pub.tds.tieto.com
c105s149vm020.eu.tieto.com
ar2015.tieto.com
tetcdev01.iot.tieto.com
analyticsd.portal.tieto.com
ubuntupetovsam.core.pubdev.tds.tieto.com
portal.alv1.se.azs.service.tieto.com
requeste.tieto.com
monitoring.service.tieto.com
oftp.tix.tieto.com
broker.service.tieto.com
hsl.etb.tieto.com
ftp.tix.tieto.com
sfbedgepool2.eu.tieto.com
conf.tieto.com
ttp.service.tieto.com

Certificate

The complete raw certificate details for hcw.portal.tieto.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmomyU5glwk2JRl2kr2Wg
d4WCE5o2HvfMbnP7FnMPtyEJTyZad1Erm7q5Aj3pICScu1qQBkeoOWR2f5deDhLS
0qeKs4PG+LACV6zL3NVzPdMhpj+XSj25CEXVVXTsR7dTywhwy/aPvZ2aWUQfgJI+
Df6fVM/L0zVrndhlPJ8Uidf02ax0Ia7f4mIvv+qlHRHRuVxqtIfAOObFhpcNBudK
LRFiUP/ug8lgiB/U73Q/+0o86aQgKWKEhzGZjSKpiegmZ5iHM9i+DIOg4qZMY9ZJ
TqE/KZfeoIjWE1/lYXfgThuzzEo4aJADud7GfVgi3ShNz3DLJSIeRYt88HeyAagn
4wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 165095846709220825877181005421683303522
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-04-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-04-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Helsinki'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Helsinki'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Tieto Finland Oy'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'hcw.portal.tieto.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19508599683034016529128941801306210173496550561389710550555396350490094723362571275369807041013348515706876074899216582387976833666642644184034638160825285437500812949572699376097374022877250768140786825903578186235159007696927047887393202838928681833597657182382395677371226489648025174313456080332814837950145865170337475319888030306617511343961325955952939269413913122763072689407754650594313785088813869884189529707814556187248567720373066757001382879148031974553528614702728916768268659074659821581246345375475879712795104031389195103070241334754134251145023496011520102619670928585289145367110683989208122009571
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://svr-ov-crl.thawte.com/ThawteOV.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.thawte.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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