www.tcs.com

- Tata Consultancy Services Ltd -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 5b:28:32:5a:cc:f6:fb:54:70:3a:44:42:12:be:7d:46 was issued on by Entrust, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Tata Consultancy Services Ltd

Organization: Tata Consultancy Services Ltd
State / Province: Mahārāshtra
Locality: Mumbai
Country: IN

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 5b:28:32:5a:cc:f6:fb:54:70:3a:44:42:12:be:7d:46
Serial Number (int): 121168460805217071033479389521054170438
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 6d:0d:db:4f:17:16:3a:89:34:d9:cd:8d:58:57:39:2c:cd:9f:33:44
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 4e:bf:ad:ec:d6:87:48:1d:15:84:47:ea:6c:ab:24:2e:f5:d5:35:59
Fingerprint (sha256): 0c:74:27:cc:f4:04:e3:bf:6a:e2:0f:19:00:bb:f5:79:25:49:2b:a1:3c:33:71:91:f3:cb:a1:6f:37:93:4e:60

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate www.tcs.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.tcs.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.tcs.com

Other certificates including the domain name tcs.com

(limited to 100 certificates)
INDSEZ.workspace.TCS.com
apg-eastus.tcs.com
inmumitv09.tcs.com
inmumm26.tcs.com
apg-eastus2.tcs.com
inmumgs02.tcs.com
login.ws.tcs.com
usnjyg01.tcs.com
inmumwtv01.tcs.com
inmumm27.tcs.com
patved.workspace.tcs.com
inmumgs01.tcs.com
cdc.workspace.tcs.com
inblrlf01.tcs.com
inmumitv03.tcs.com
mumspz.workspace.tcs.com
on.tcs.com
uklong02.tcs.com
slides.tcs.com
usnjym104.tcs.com
inmumg03.tcs.com
webchat.tcs.com
inkolm01.tcs.com
eventsdemo.tcs.com
inmumm106.tcs.com
partnerportal.tcs.com
on.tcs.com
inmumm12.tcs.com
inmumm02.tcs.com
usnjym05.tcs.com
mssp.tcs.com
inchnlf01.tcs.com
rexa.tcs.com
blrvic.workspace.tcs.com
inmumm24.tcs.com
isometrix.tcs.com
ecommerce.tcs.com
inchnm109.tcs.com
securitycommunity.tcs.com
webchat.tcs.com
inmumm105.tcs.com
lifeline.tcs.com
www.securitycommunity.tcs.com
vms.tcs.com
ustv02.tcs.com
INMUMM112.TCS.COM
uklong01.tcs.com
meeting.tcs.com
blrgla.workspace.tcs.com
www.tcs.com
secureaccess.tcs.com
indrusm01.tcs.com
cep.bpo.tcs.com
mastercraft.tcs.com
on.tcs.com
inmumm04.tcs.com
otpselfservice.tcs.com
link.tcs.com
link.tcs.com
vcseindia.tcs.com
mail.tcs.com
isometrix.tcs.com
fs.tcs.com
goitgirls.tcs.com
cto-cybersecurityresearch.tcs.com
mfgusauto.tcs.com
inpunspvpn.tcs.com
www.tcs.com
inggnloandepotvpn.tcs.com
inhydm02.tcs.com
safetyfirst.tcs.com
grs.tcs.com
usnjym03.tcs.com
vcseus.tcs.com
inblrm05.tcs.com
inmumg01.tcs.com
usprivpn.tcs.com
adminwindow.tcs.com
inkolm10.tcs.com
www.tcs-ca.tcs.com
kolkataconnect.tcs.com
bodstore.tcs.com
digitalsoftware.tcs.com
inblrg02.tcs.com
inmumitv08.tcs.com
dbs.tcs.com
inmumgs02.tcs.com
inblrm08.tcs.com
beta.tcs.com
vmsprocurement.tcs.com
inmumitv01.tcs.com
www.tcs.com
vmsprocurement.tcs.com
ibegin.tcs.com
inkolm03.tcs.com
dss.tcs.com
www.careers.tcs.com
isometrixb.tcs.com
usnjym02.tcs.com
on.tcs.com

Certificate

The complete raw certificate details for www.tcs.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPXi+jMe8GP+nsO2sIgN
9DtnlDEnoTZrz1zMMIHgRuwMU/6MnPgFC2YYX+d7kmSpLq0yn8SEVD0R6/PK61Mu
WxSnpPDcpqoAxpjKTwjsAWLtXk5gomCN9WwjInf+wz86Lm4k3aF+6fHcYw7R+YFW
+9k+2XnFzEHHJiKaPoYTLkbuQXwXpNjcbTnX6Bznr9ZGpw6620shtK3fzLUAXypg
GEiRmUgR/ruZTisQl2hT4B9mPBB9aKdZCeLy+qR2JjWy6c/xFrnth3bktP2Xv4dT
EbAgH2vibkeNncrohjQTMw/PYvr1pdpu/KhkBRJVCKqvmuCtnnPp5cEWS5JqFMSd
4wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 121168460805217071033479389521054170438
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-01 09:08:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-31 09:08:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Mahārāshtra'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Mumbai'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tata Consultancy Services Ltd'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.tcs.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20824333230901806247922931410259108719774460431505184786387029883107751885673277391246313254107556226225718077790606791851327626250276701819460893619715507130069873883165775888963561692357333783593458361695269232625101851457398639547547829518263812738538602347057354750604229622332245357175080978777212762150787114163784907077801536864122547067132818131588862108613708365121067826425586328135845396176514870457194773819728353227809529951475231317504664047028889202962236061201043067730572655686704586971595542914058711401376362548549280820231435798603185111153801422003531302902658530831154720389084319989330339995107
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6d0ddb4f17163a8934d9cd8d5857392ccd9f3344
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tcs.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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