hws.tieto.com

- Tieto Finland Oy -

Issued by thawte SSL CA - G2

About this certificate

This digital certificate with serial number 55:bc:19:c8:b4:ee:94:f4:c0:ef:63:0f:1f:c0:bd:2b was issued on by thawte, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Tieto Finland Oy

Organization: Tieto Finland Oy
Organization unit: ICT
State / Province: Helsinki
Locality: Helsinki
Country: FI

thawte, Inc.

Organization: thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 55:bc:19:c8:b4:ee:94:f4:c0:ef:63:0f:1f:c0:bd:2b
Serial Number (int): 113961054412990720473673303121782160683
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: c2:4f:48:57:fc:d1:4f:9a:c0:5d:38:7d:0e:05:db:d9:2e:b5:52:60

Fingerprint (sha1): 9e:81:cc:7d:b4:77:2b:a0:69:3b:9b:02:6e:c1:13:f5:17:bd:ae:4e
Fingerprint (sha256): 03:dd:c1:f9:cd:82:b3:07:67:47:74:c1:c3:ce:32:0d:2c:43:7e:e2:bf:10:9a:da:83:a7:70:57:5a:09:a5:1d

Issuing Certificate URL: http://tj.symcb.com/tj.crt

Revocation information

OCSP Server: http://tj.symcd.com
CRL Distribution Point: http://tj.symcb.com/tj.crl

Check the revocation status for certificate hws.tieto.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for hws.tieto.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

hws.tieto.com

Other certificates including the domain name tieto.com

(limited to 100 certificates)
test.ttp.service.tieto.com
sptestrecproc01.service.tieto.com
novasupport.tieto.com
signalingsupport.tieto.com
tietoufi.tieto.com
partner.portal.tieto.com
dev-remotework.eu.tieto.com
ut10.tix.tieto.com
*.onecloud.tieto.com
tpras.portal.tieto.com
adminportal.sta2.no.azs.service.tieto.com
extmytime.tieto.com
*.shared.pub.tds.tieto.com
analytics.service.tieto.com
www.sign.tieto.com
projectwiki.tieto.com
*.tusaas.vattenfall.tieto.com
interface.tieto.com
rfirds-prod-tsuvf.service.tieto.com
ti-node-internal.soc.tieto.com
*.service.tieto.com
sts.tieto.com
artifactoryoss.shared.enigma.tds.tieto.com
web.signing.tieto.com
ce.tieto.com
sentry.eb.tieto.com
broker.service.tieto.com
repo.onecloud.tieto.com
tefihelvpnex002a.tieto.com
dsoweb-test-tsuhel.service.tieto.com
*.shared.lyse.tds.tieto.com
sts.tieto.com
classify.demo.tieto.com
aarmbase.int.tieto.com
seceppinfsrv141.tieto.com
hsl.etb.tieto.com
teras.tieto.com
jira.tieto.com
spmcr02.service.tieto.com
ib.tieto.com
ar2015.tieto.com
hcw.portal.tieto.com
ar2016.tieto.com
connect-test.tieto.com
hws.tieto.com
analytics.portal.tieto.com
ecm.extra.tieto.com
msucc.tieto.com
sni.cloudflaressl.com
*.signalingsolutions.pub.tds.tieto.com
oftp-test.tix.tieto.com
api.appservice.azurestacklab.demo.tieto.com
ehotel.bix.tieto.com
*.domstolsverket.pub.tds.tieto.com
lyncweb.tieto.com
*.petovsam3.pubdev.tds.tieto.com
tsu-eon-gw.ext.tieto.com
ir-report.tieto.com
*.artifactory.shared.getswish.etds.tieto.com
rtlrds-prod-tsuvf.service.tieto.com
api.appservice.azurestacklab.demo.tieto.com
*.adminhosting.sta2.no.azs.service.tieto.com
ehotel.bix.tieto.com
banktestmts.getswish.pub.tds.tieto.com
www.tieto.com
venni.service.tieto.com
cmf.portal.tieto.com
*.trfcc.service.tieto.com
web-test-tsufortum.service.tieto.com
ar2018.tieto.com
cas.dev.gapps.tieto.fi
customer-experience.tieto.com
eb.tieto.com
secens01.eu.tieto.com
*.core.intdev.tds.tieto.com
browse.ssb.tieto.com
connect.tieto.com
api-utb.tsuge.service.tieto.com
jira.pcoe.etb.tieto.com
tetcdev01.iot.tieto.com
jira.oss.tieto.com
idp.tieto.com
sni.cloudflaressl.com
*.appservice.azurestacklab.demo.tieto.com
*.devops.pub.tds.tieto.com
c105s149vm020.eu.tieto.com
ar2015.tieto.com
tetcdev01.iot.tieto.com
analyticsd.portal.tieto.com
ubuntupetovsam.core.pubdev.tds.tieto.com
portal.alv1.se.azs.service.tieto.com
requeste.tieto.com
monitoring.service.tieto.com
oftp.tix.tieto.com
broker.service.tieto.com
hsl.etb.tieto.com
ftp.tix.tieto.com
sfbedgepool2.eu.tieto.com
conf.tieto.com
ttp.service.tieto.com

Certificate

The complete raw certificate details for hws.tieto.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtps2tUA+Fjndc0DqfjYz
W2Xsf6n0+RbIqwjjjglFFh0+NcMUoa3e/8Wf+kSBdyjPT0Lw45sKQNVsd2uTt16x
7A80GgOYWwwAeiKProokx6PkT6YXXelN8PbvD3jTZy0VPO1u8e3ouzAHNrEpj3Xh
T8SAi/BflhX1oxoy2E3q0TclU7ZNuWRm2Ve5LLUIzih56bipDYRZYldIgjtPjfmK
DkvFQ2bpUVMVp7ucPK8sBs2CWmDemBs58sDBEAzUobZ9yiqErB4bWyGIa8Rkl6To
tlzJyVmwyn1L2PugYx4OW2zAdqWH39maGUYsWqMo2XRHiP3HyF1PmOcwpF640fM/
dQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 113961054412990720473673303121782160683
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte SSL CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-05-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-30 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Helsinki'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Helsinki'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Tieto Finland Oy'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'ICT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'hws.tieto.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23051910233493303582583087456139337027351426783258205464635287813344460254481985222838806569283514267562956427422496588855668621720212244445323736196504903813656048508215375249005843059165372225757865939677351580451511028447721476883751686696896870701189733121523943571168358383851594468824653436803225595499040432425955220372785280232037642681362035754964311441564143584302718381011183177195912949111976670170701350533392272039034846873239922044360126503273943593781969438529430976453108759277887079658130913856290859978112192233276176718019865718240131216052264734537935428633475486280846967731403121329603907633013
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hws.tieto.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c24f4857fcd14f9ac05d387d0e05dbd92eb55260
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crt'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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