fs.tcs.com

- Tata Consultancy Services Ltd -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 50:ff:45:ba:90:c1:f1:a1:c0:57:e3:5d:20:17:cb:2d was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Tata Consultancy Services Ltd

Organization: Tata Consultancy Services Ltd
State / Province: Maharashtra
Locality: Mumbai
Country: IN

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 50:ff:45:ba:90:c1:f1:a1:c0:57:e3:5d:20:17:cb:2d
Serial Number (int): 107663689629220835667573163292079147821
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: d0:7c:78:c4:f6:47:71:f2:42:ca:1c:e7:63:a0:23:7c:8d:14:84:23
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 6d:8d:82:d6:d0:88:2e:9c:f0:22:c3:b1:78:ee:aa:9f:14:33:7c:c7
Fingerprint (sha256): 0b:9d:23:de:0c:c6:2f:dd:af:e0:96:38:e2:eb:c7:21:86:34:b6:de:6c:c6:77:6e:20:3c:14:66:2c:80:12:49

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate fs.tcs.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fs.tcs.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fs.tcs.com

Other certificates including the domain name tcs.com

(limited to 100 certificates)
INDSEZ.workspace.TCS.com
apg-eastus.tcs.com
inmumitv09.tcs.com
inmumm26.tcs.com
apg-eastus2.tcs.com
inmumgs02.tcs.com
login.ws.tcs.com
usnjyg01.tcs.com
inmumwtv01.tcs.com
inmumm27.tcs.com
patved.workspace.tcs.com
inmumgs01.tcs.com
cdc.workspace.tcs.com
inblrlf01.tcs.com
inmumitv03.tcs.com
mumspz.workspace.tcs.com
on.tcs.com
uklong02.tcs.com
slides.tcs.com
usnjym104.tcs.com
inmumg03.tcs.com
webchat.tcs.com
inkolm01.tcs.com
eventsdemo.tcs.com
inmumm106.tcs.com
partnerportal.tcs.com
on.tcs.com
inmumm12.tcs.com
inmumm02.tcs.com
usnjym05.tcs.com
mssp.tcs.com
inchnlf01.tcs.com
rexa.tcs.com
blrvic.workspace.tcs.com
inmumm24.tcs.com
isometrix.tcs.com
ecommerce.tcs.com
inchnm109.tcs.com
securitycommunity.tcs.com
webchat.tcs.com
inmumm105.tcs.com
lifeline.tcs.com
www.securitycommunity.tcs.com
vms.tcs.com
ustv02.tcs.com
INMUMM112.TCS.COM
uklong01.tcs.com
meeting.tcs.com
blrgla.workspace.tcs.com
www.tcs.com
secureaccess.tcs.com
indrusm01.tcs.com
cep.bpo.tcs.com
mastercraft.tcs.com
on.tcs.com
inmumm04.tcs.com
otpselfservice.tcs.com
link.tcs.com
link.tcs.com
vcseindia.tcs.com
mail.tcs.com
isometrix.tcs.com
fs.tcs.com
goitgirls.tcs.com
cto-cybersecurityresearch.tcs.com
mfgusauto.tcs.com
inpunspvpn.tcs.com
www.tcs.com
inggnloandepotvpn.tcs.com
inhydm02.tcs.com
safetyfirst.tcs.com
grs.tcs.com
usnjym03.tcs.com
vcseus.tcs.com
bap.workspace.tcs.com
inblrm05.tcs.com
inmumg01.tcs.com
usprivpn.tcs.com
adminwindow.tcs.com
ngpmih2.workspace.tcs.com
inkolm10.tcs.com
www.tcs-ca.tcs.com
kolkataconnect.tcs.com
bodstore.tcs.com
digitalsoftware.tcs.com
inblrg02.tcs.com
inmumitv08.tcs.com
dbs.tcs.com
inmumgs02.tcs.com
inblrm08.tcs.com
beta.tcs.com
vmsprocurement.tcs.com
inmumitv01.tcs.com
www.tcs.com
vmsprocurement.tcs.com
ibegin.tcs.com
inkolm03.tcs.com
dss.tcs.com
www.careers.tcs.com
isometrixb.tcs.com

Certificate

The complete raw certificate details for fs.tcs.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgCz83gH55dWD/joLb0t
s2efTTTKJUPkpkHO5b2KXDYH9rdfF0SEq9R6A8H3Kfw+9F84beiWUtfv3H+fdHrT
ac8RfYWq2yg72SfMJE5U3XbPT+EGWlmruvE97QQVQeHUnMPS7QY6nqn6+W5ypqqB
+YZhM95rcxVZTxkYorVFgsiXKrDMYRK92GVkbDEya12eeLe+eN9Vo2ZV+VLgPlg3
/vYdYZjte5eGdTJlGkLjjplmEqHhvaGwzfpiovxCHEiY+4g5FqCbH6/Wfg4jgQyS
BGuvrAnpBxY4XvCJEDS1TNIQuAwYybrEcDjE3Gvo2YQbh8vkYUZAvw6lwk+BE/+t
ywIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 107663689629220835667573163292079147821
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-28 06:01:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-28 06:01:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Maharashtra'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Mumbai'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tata Consultancy Services Ltd'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fs.tcs.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19441045594344006897799778531653299835610068972582816021449506267880492184145323960069253983538076602662463870573822575581617421204768264777270244533717279859148206513191038104716394128186538511051076410781943824720373384773487130652220397832440840236902270417709717876431105811944506872076527385898240688415258216585379546078250606406373044017150332250829166866881073961368823969809767661812015037192283934071145707093715866371707278811787307295564550814081556515348450428828160547566086049250773220937760578150961467445019740187778730458848426861957630846188523608685090892370855166537327824899875413806287786323403
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d07c78c4f64771f242ca1ce763a0237c8d148423
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fs.tcs.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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