rexa.tcs.com

- Tata Consultancy Services Ltd -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number f9:61:45:8c:c1:05:65:bf:00:00:00:00:50:f6:32:08 was issued on by Entrust, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Tata Consultancy Services Ltd

Organization: Tata Consultancy Services Ltd
Locality: Chennai
Country: IN

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): f9:61:45:8c:c1:05:65:bf:00:00:00:00:50:f6:32:08
Serial Number (int): 331482834383664466602242490934037459464
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 2d:47:4e:79:14:93:d6:6b:3e:fc:f9:fe:4c:e9:00:03:a6:e3:f1:d3
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 1b:43:df:92:72:b0:eb:35:79:b8:45:e6:11:99:2b:ed:a4:62:01:a2
Fingerprint (sha256): 07:02:f9:41:5a:3c:c8:ca:c1:76:e9:89:30:c2:47:bf:a7:3e:5c:bc:95:2b:3a:5a:46:4a:6c:ac:85:5b:f3:b3

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate rexa.tcs.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for rexa.tcs.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

rexa.tcs.com
www.rexa.tcs.com

Other certificates including the domain name tcs.com

(limited to 100 certificates)
INDSEZ.workspace.TCS.com
apg-eastus.tcs.com
inmumitv09.tcs.com
inmumm26.tcs.com
apg-eastus2.tcs.com
inmumgs02.tcs.com
login.ws.tcs.com
usnjyg01.tcs.com
inmumwtv01.tcs.com
inmumm27.tcs.com
patved.workspace.tcs.com
inmumgs01.tcs.com
cdc.workspace.tcs.com
inblrlf01.tcs.com
inmumitv03.tcs.com
mumspz.workspace.tcs.com
on.tcs.com
uklong02.tcs.com
slides.tcs.com
usnjym104.tcs.com
inmumg03.tcs.com
webchat.tcs.com
inkolm01.tcs.com
eventsdemo.tcs.com
inmumm106.tcs.com
partnerportal.tcs.com
on.tcs.com
inmumm12.tcs.com
inmumm02.tcs.com
usnjym05.tcs.com
mssp.tcs.com
inchnlf01.tcs.com
rexa.tcs.com
blrvic.workspace.tcs.com
inmumm24.tcs.com
isometrix.tcs.com
ecommerce.tcs.com
inchnm109.tcs.com
securitycommunity.tcs.com
webchat.tcs.com
inmumm105.tcs.com
lifeline.tcs.com
www.securitycommunity.tcs.com
vms.tcs.com
ustv02.tcs.com
INMUMM112.TCS.COM
uklong01.tcs.com
meeting.tcs.com
blrgla.workspace.tcs.com
www.tcs.com
secureaccess.tcs.com
indrusm01.tcs.com
cep.bpo.tcs.com
mastercraft.tcs.com
on.tcs.com
inmumm04.tcs.com
otpselfservice.tcs.com
link.tcs.com
link.tcs.com
vcseindia.tcs.com
mail.tcs.com
isometrix.tcs.com
fs.tcs.com
goitgirls.tcs.com
cto-cybersecurityresearch.tcs.com
mfgusauto.tcs.com
inpunspvpn.tcs.com
www.tcs.com
inggnloandepotvpn.tcs.com
inhydm02.tcs.com
safetyfirst.tcs.com
grs.tcs.com
usnjym03.tcs.com
vcseus.tcs.com
bap.workspace.tcs.com
inblrm05.tcs.com
inmumg01.tcs.com
usprivpn.tcs.com
adminwindow.tcs.com
ngpmih2.workspace.tcs.com
inkolm10.tcs.com
www.tcs-ca.tcs.com
kolkataconnect.tcs.com
bodstore.tcs.com
digitalsoftware.tcs.com
inblrg02.tcs.com
inmumitv08.tcs.com
dbs.tcs.com
inmumgs02.tcs.com
inblrm08.tcs.com
beta.tcs.com
vmsprocurement.tcs.com
inmumitv01.tcs.com
www.tcs.com
vmsprocurement.tcs.com
ibegin.tcs.com
inkolm03.tcs.com
dss.tcs.com
www.careers.tcs.com
isometrixb.tcs.com

Certificate

The complete raw certificate details for rexa.tcs.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJDLmiGVdJhcCSZRfkfF
YxHiP8qfM0mOo9H7w07uVGuqI2buH7ByvD1Py2vDrotSASAQGHSy0kY9m0woMjkp
fowVrMo8XmcJxoj9jPo8wAd1Av8PWt7vNZ/EzuzFBTBmU5nOPg4HWr1jIshuLGyO
NzhGQhrbY20tK8i/+uq27bHhXHZ3VTkxt4PHF44/M07wlgOm9W3HAG9n/dvemF0w
UQC3gqrE5WD10Mn2CX13uf0IxsxuETVzREkPVdI1GRtUxQOyuFHHGxaJOBM1gBJq
uyJ0ajCu/nLwaZOid+gLduBrtaryyJzIvEV7nwOgJ3uuvwPsmQzIUNofjzH/EWku
LQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 331482834383664466602242490934037459464
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-22 07:07:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-22 07:37:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Chennai'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tata Consultancy Services Ltd'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'rexa.tcs.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25319062226962606840481446943115018168696005593538635276276551141221733975132835944996428458314288865214055020528819590117173910614471253338167006340101871961171533047991118487866182869043829407267466142577082106890719888252848923642922367353178089158768987073130382529405839695416970422085386954887451109509918923629596508457767354352310377056697704679563594594518057854727362598276868880897273787657470796210771841616528475050449640179122136953259247860137725689551137183090623393793738185338722180091378757798483296377237235169958626917080711639122874502085326482683276441031607772768297250211605400571076636388909
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rexa.tcs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rexa.tcs.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2d474e791493d66b3efcf9fe4ce90003a6e3f1d3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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