ap1.sca.com
- Svenska Cellulosa Aktiebolaget SCA -
Issued by TeliaSonera Server CA v2
About this certificate
This digital certificate with serial number 01:64:ad:b5:db:ea:8c:80:dc:8f:97:76:ee:3d:2a was issued on by TeliaSonera.
With 41 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Svenska Cellulosa Aktiebolaget SCA
Organization:
Svenska Cellulosa Aktiebolaget SCA
Locality:
Sundsvall
Country: SE
Country: SE
TeliaSonera
Organization:
TeliaSonera
Country:
FI
This certificate has expire since
Certificate Details
Serial Number (hex): 01:64:ad:b5:db:ea:8c:80:dc:8f:97:76:ee:3d:2aSerial Number (int): 7234300573664120147006361753763114
Serial Number lenght: 113 bits, 15 octets
SubjectKeyId: d2:5c:c4:46:aa:9a:37:ed:33:6e:1d:ef:ea:8e:b3:aa:17:dd:8b:98
AuthorityKeyId: 2f:49:3c:29:4f:d7:07:25:f9:c6:8c:d5:64:f5:66:3d:12:83:22:95
Fingerprint (sha1): ca:94:95:a2:4f:93:80:cd:28:ee:d3:62:99:e3:18:bf:60:46:46:74
Fingerprint (sha256): 0e:2b:0c:aa:f1:c7:60:23:67:83:e2:ac:1b:cc:42:e7:ca:c0:c0:66:b4:15:f0:ae:c5:82:f0:0c:86:49:99:61
Issuing Certificate URL: http://repository.trust.teliasonera.com/teliasoneraservercav2.cer
Revocation information
OCSP Server: http://ocsp.trust.telia.comCRL Distribution Point: http://crl-3.trust.teliasonera.com/teliasoneraservercav2.crl
Check the revocation status for certificate ap1.sca.com
41
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for ap1.sca.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Data Encipherment
Extended Key Usages
Client Authentication
Server Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
ap1.sca.com
ap1as00Service.sca.com
app84stage.tenaidentifi.sca.com
app96tenaidentifi.sca.com
aq1.sca.com
aq1as00Service.sca.com
auth-gp1.sca.com
auth-gq1.sca.com
dlogon.sca.com
dsts.sca.com
fasttrack.sca.com
globalmediabank.sca.com
globalmediabankdev.sca.com
globalmediabanktest.sca.com
globalmediabankuat.sca.com
gq1.sca.com
gw-hk.sca.com
gw-se.sca.com
gw-us.sca.com
mapxr.sca.com
ndes1.sca.com
pimservice.sca.com
publicmediabank.sca.com
publicmediabankdev.sca.com
publicmediabanktest.sca.com
publicmediabankuat.sca.com
qapimservice.sca.com
rapp10.sca.com
rapp11.sca.com
rapp12.sca.com
stage.tenaidentifi.sca.com
sts.sca.com
tenaidentifi.sca.com
tenaidentifistage.sca.com
xd1.sca.com
xd2.sca.com
xp1.sca.com
xp2.sca.com
xq1.sca.com
xq2.sca.com
service1.sca.com
ap1as00Service.sca.com
app84stage.tenaidentifi.sca.com
app96tenaidentifi.sca.com
aq1.sca.com
aq1as00Service.sca.com
auth-gp1.sca.com
auth-gq1.sca.com
dlogon.sca.com
dsts.sca.com
fasttrack.sca.com
globalmediabank.sca.com
globalmediabankdev.sca.com
globalmediabanktest.sca.com
globalmediabankuat.sca.com
gq1.sca.com
gw-hk.sca.com
gw-se.sca.com
gw-us.sca.com
mapxr.sca.com
ndes1.sca.com
pimservice.sca.com
publicmediabank.sca.com
publicmediabankdev.sca.com
publicmediabanktest.sca.com
publicmediabankuat.sca.com
qapimservice.sca.com
rapp10.sca.com
rapp11.sca.com
rapp12.sca.com
stage.tenaidentifi.sca.com
sts.sca.com
tenaidentifi.sca.com
tenaidentifistage.sca.com
xd1.sca.com
xd2.sca.com
xp1.sca.com
xp2.sca.com
xq1.sca.com
xq2.sca.com
service1.sca.com
Other certificates including the domain name sca.com
(limited to 100 certificates)
fpportaltest.sca.com
mail.sca.com
*.sca.com
extlogin.sca.com
ap1.sca.com
kortportal.sca.com
passg-svc.forestproducts.sca.com
drive.sca.com
mdm.sca.com
fpconnect.sca.com
confluence.sca.com
loginfp.sca.com
loginfp.sca.com
dlogon.sca.com
jira.sca.com
*.sca.com
*.sca.com
extlogin.sca.com
www.sca.com
gateway.logistics.sca.com
remote.sca.com
gw-us.sca.com
login.sca.com
*.app.sca.com
extlogin-test.sca.com
*.sca.com
passwordreset.sca.com
abbgenixostr01.sca.com
storefront.forestproducts.sca.com
passwordreset.sca.com
drive.sca.com
fritid.sca.com
gateway.logistics.sca.com
*.sca.com
guestauth.sca.com
storefront.forestproducts.sca.com
extlogin-test.sca.com
www.sca.com
gw-us.sca.com
imagevault.sca.com
mdmadmin.sca.com
test-bbs.sca.com
fpportal.sca.com
access.scasundsvall.se
fpsams.sca.com
www.sca.com
bbs.sca.com
crmauth.sca.com
mdm.sca.com
*.sca.com
integration.sca.com
idusis.sca.com
mdmadmin.sca.com
*.app.sca.com
integration.sca.com
fritid.sca.com
genai-test.sca.com
*.sca.com
*.app.sca.com
*.app.sca.com
passg-svc.forestproducts.sca.com
imagevault.sca.com
www.sca.com
gw-se.sca.com
mail.sca.com
gw-hk.sca.com
sip.sca.com
imagevault.sca.com
storefront.forestproducts.sca.com
login.sca.com
*.sca.com
fpportaltest.sca.com
www.sca.com
internalcrm.sca.com
*.sca.com
*.sca.com
gateway.logistics.sca.com
*.sca.com
imagevault.sca.com
remote.sca.com
integration.sca.com
remote.sca.com
www.sca.com
access.sca.com
fpportal.sca.com
idp.sca.com
*.app.sca.com
www.sca.com
bildarkiv.sca.com
ap1.sca.com
fpsync.sca.com
*.sca.com
test-confluence.sca.com
mail.sca.com
mysite.fpportal.sca.com
*.sca.com
fplcsvc.sca.com
fpps.sca.com
*.app.sca.com
*.app.sca.com
mail.sca.com
*.sca.com
extlogin.sca.com
ap1.sca.com
kortportal.sca.com
passg-svc.forestproducts.sca.com
drive.sca.com
mdm.sca.com
fpconnect.sca.com
confluence.sca.com
loginfp.sca.com
loginfp.sca.com
dlogon.sca.com
jira.sca.com
*.sca.com
*.sca.com
extlogin.sca.com
www.sca.com
gateway.logistics.sca.com
remote.sca.com
gw-us.sca.com
login.sca.com
*.app.sca.com
extlogin-test.sca.com
*.sca.com
passwordreset.sca.com
abbgenixostr01.sca.com
storefront.forestproducts.sca.com
passwordreset.sca.com
drive.sca.com
fritid.sca.com
gateway.logistics.sca.com
*.sca.com
guestauth.sca.com
storefront.forestproducts.sca.com
extlogin-test.sca.com
www.sca.com
gw-us.sca.com
imagevault.sca.com
mdmadmin.sca.com
test-bbs.sca.com
fpportal.sca.com
access.scasundsvall.se
fpsams.sca.com
www.sca.com
bbs.sca.com
crmauth.sca.com
mdm.sca.com
*.sca.com
integration.sca.com
idusis.sca.com
mdmadmin.sca.com
*.app.sca.com
integration.sca.com
fritid.sca.com
genai-test.sca.com
*.sca.com
*.app.sca.com
*.app.sca.com
passg-svc.forestproducts.sca.com
imagevault.sca.com
www.sca.com
gw-se.sca.com
mail.sca.com
gw-hk.sca.com
sip.sca.com
imagevault.sca.com
storefront.forestproducts.sca.com
login.sca.com
*.sca.com
fpportaltest.sca.com
www.sca.com
internalcrm.sca.com
*.sca.com
*.sca.com
gateway.logistics.sca.com
*.sca.com
imagevault.sca.com
remote.sca.com
integration.sca.com
remote.sca.com
www.sca.com
access.sca.com
fpportal.sca.com
idp.sca.com
*.app.sca.com
www.sca.com
bildarkiv.sca.com
ap1.sca.com
fpsync.sca.com
*.sca.com
test-confluence.sca.com
mail.sca.com
mysite.fpportal.sca.com
*.sca.com
fplcsvc.sca.com
fpps.sca.com
*.app.sca.com
*.app.sca.com
Certificate
The complete raw certificate details for ap1.sca.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIKhjCCCG6gAwIBAgIPAWSttdvqjIDcj5d27j0qMA0GCSqGSIb3DQEBCwUAMEYx CzAJBgNVBAYTAkZJMRQwEgYDVQQKDAtUZWxpYVNvbmVyYTEhMB8GA1UEAwwYVGVs aWFTb25lcmEgU2VydmVyIENBIHYyMB4XDTE4MDcxODE0MDUzM1oXDTIwMDcxNzE0 MDUzM1owZDELMAkGA1UEBhMCU0UxEjAQBgNVBAcMCVN1bmRzdmFsbDErMCkGA1UE CgwiU3ZlbnNrYSBDZWxsdWxvc2EgQWt0aWVib2xhZ2V0IFNDQTEUMBIGA1UEAwwL YXAxLnNjYS5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgJXVb xmTrjJWpSV4elAxCLr5L+hIN0kNwJMYzdmhn+2UZV8Dhop+ctbNQUc2Z00KgMw3w Y95Th/uHEwHpVH+69cp4HE7rgrCfOTaId+L+3VJ5ohT93MFKimgCSqjiaotjqpDD m2mnvFMXxZKGnp1XjoKM5LQwlOvd1xMocQ6jOmthZ2IepbxToVztjl5VaQvZPc15 0qXPG3fbOpbGe0/vf4qM0+Po3nm6qUfyVKFruPrnY/4a98/qpb9BKsf6uCNEAN8t BQQI0Gd5LUXkesUjxqu2Quaad4ys4e+bEJaSDctPZKckb2TscKQrw/DPr+5nCFAh Z2O1po7bUYBfW9fBAgMBAAGjggZRMIIGTTAfBgNVHSMEGDAWgBQvSTwpT9cHJfnG jNVk9WY9EoMilTAdBgNVHQ4EFgQU0lzERqqaN+0zbh3v6o6zqhfdi5gwDgYDVR0P AQH/BAQDAgSwME4GA1UdIARHMEUwQwYGZ4EMAQICMDkwNwYIKwYBBQUHAgEWK2h0 dHA6Ly9yZXBvc2l0b3J5LnRydXN0LnRlbGlhc29uZXJhLmNvbS9DUFMwggMwBgNV HREEggMnMIIDI4ILYXAxLnNjYS5jb22CFmFwMWFzMDBTZXJ2aWNlLnNjYS5jb22C H2FwcDg0c3RhZ2UudGVuYWlkZW50aWZpLnNjYS5jb22CGWFwcDk2dGVuYWlkZW50 aWZpLnNjYS5jb22CC2FxMS5zY2EuY29tghZhcTFhczAwU2VydmljZS5zY2EuY29t ghBhdXRoLWdwMS5zY2EuY29tghBhdXRoLWdxMS5zY2EuY29tgg5kbG9nb24uc2Nh LmNvbYIMZHN0cy5zY2EuY29tghFmYXN0dHJhY2suc2NhLmNvbYIXZ2xvYmFsbWVk aWFiYW5rLnNjYS5jb22CGmdsb2JhbG1lZGlhYmFua2Rldi5zY2EuY29tghtnbG9i YWxtZWRpYWJhbmt0ZXN0LnNjYS5jb22CGmdsb2JhbG1lZGlhYmFua3VhdC5zY2Eu Y29tggtncTEuc2NhLmNvbYINZ3ctaGsuc2NhLmNvbYINZ3ctc2Uuc2NhLmNvbYIN Z3ctdXMuc2NhLmNvbYINbWFweHIuc2NhLmNvbYINbmRlczEuc2NhLmNvbYIScGlt c2VydmljZS5zY2EuY29tghdwdWJsaWNtZWRpYWJhbmsuc2NhLmNvbYIacHVibGlj bWVkaWFiYW5rZGV2LnNjYS5jb22CG3B1YmxpY21lZGlhYmFua3Rlc3Quc2NhLmNv bYIacHVibGljbWVkaWFiYW5rdWF0LnNjYS5jb22CFHFhcGltc2VydmljZS5zY2Eu Y29tgg5yYXBwMTAuc2NhLmNvbYIOcmFwcDExLnNjYS5jb22CDnJhcHAxMi5zY2Eu Y29tghpzdGFnZS50ZW5haWRlbnRpZmkuc2NhLmNvbYILc3RzLnNjYS5jb22CFHRl bmFpZGVudGlmaS5zY2EuY29tghl0ZW5haWRlbnRpZmlzdGFnZS5zY2EuY29tggt4 ZDEuc2NhLmNvbYILeGQyLnNjYS5jb22CC3hwMS5zY2EuY29tggt4cDIuc2NhLmNv bYILeHExLnNjYS5jb22CC3hxMi5zY2EuY29tghBzZXJ2aWNlMS5zY2EuY29tME0G A1UdHwRGMEQwQqBAoD6GPGh0dHA6Ly9jcmwtMy50cnVzdC50ZWxpYXNvbmVyYS5j b20vdGVsaWFzb25lcmFzZXJ2ZXJjYXYyLmNybDAdBgNVHSUEFjAUBggrBgEFBQcD AgYIKwYBBQUHAwEwgYYGCCsGAQUFBwEBBHoweDAnBggrBgEFBQcwAYYbaHR0cDov L29jc3AudHJ1c3QudGVsaWEuY29tME0GCCsGAQUFBzAChkFodHRwOi8vcmVwb3Np dG9yeS50cnVzdC50ZWxpYXNvbmVyYS5jb20vdGVsaWFzb25lcmFzZXJ2ZXJjYXYy LmNlcjCCAX4GCisGAQQB1nkCBAIEggFuBIIBagFoAHYAb1N2rDHwMRnYmQCkURX/ dxUcEdkCwQApBo2yCJo32RMAAAFkrbX4BwAABAMARzBFAiB2CyUMhAmKvOgdr748 NJrhEBjnAwmXI7v/lIYK8p/GoAIhAMhQE5GY4JFA3mZb2pSQeUYoScNfSzT4xbuT QVaYRkg9AHUAu9nfvB+KcbWTlCOXqpJ7RzhXlQqrUugakJZkNo4e0YUAAAFkrbX6 YgAABAMARjBEAiBKQEGDKncyATueTJhO1aYxQ+hZqLvBbEvQxlvuxW7oLwIgfDuX NMctakWITHnCVLzKQq+uBbHbgKUJ8ESb2+rF6bQAdwCHdb/nWXz4jEOZX73zbv9W jUdWNv9KtWDBtOr/XqCDDwAAAWSttfiaAAAEAwBIMEYCIQCDEnjTB+6Ea7s6EANf 4jF2i9OZeYWJDr1nXr8o0bLS9gIhAMNMV9K9W6XudDbQ6glW2Gp/xYCGjmiPTJMo keyfRJ/YMA0GCSqGSIb3DQEBCwUAA4ICAQCSlbKLvOZwuN5GyNwQq+BVfXTwYs+O /vIrLqLiEbgiqN/DSFerruT2Eag6S6fRQDJdNK1uMrVSQpEKMBhMJBut9q+EMeRe s6LEP2Im7OMF78Nkw3jsf1botKV1vtp44nw0kpBx5S7kydMRllnWjSo1pj50h1if 8u0ITNGhRLYj7EW4KBoK4S8/q+ju2ZqM34AHzQv4IVLW4t5fyPttzo4LHFtx8Q8+ +0iSghoVsojlqyIcRX7GxMVj/3dzApf1rUYh/nGrGicAdvwOj5gY8LiE8ro29Nd7 zkP1zIFNl31+qBaihqIT36OKVtsvCj881xwF21ZM5SN+MDfexhS3KOPXhexewUmw u/v0iDFU7/5bSbbSBtQFSqJF2O4D8OS9rrf8UiFZUYkBRWaGu7bEHtSDjMwowlos VZumqFN+vjR1nODyt5GUsDeYWj7fCQezOxRX18dk51XlHao5NGiJnAQ75vPeHi4/ xPcW7nKRlF03uZsn2NTGqTZOFGc1IxxFPXWaybTOG8vnUfIAiX8O1giXzkcMLZD0 lzEIFkKOyuRnlXTAk4tskD8bV2t2ByTDIVY4TWrlc3L90/zlS/5wh88GiUElt5lL DtPesRgHEPdes1ORd3R0KWgmz4ONk81/RlAd6hamAGf1YeeQpPeHkcFgh2+Rn/en jL/m34xEXKr6ew== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCV1W8Zk64yVqUleHpQM Qi6+S/oSDdJDcCTGM3ZoZ/tlGVfA4aKfnLWzUFHNmdNCoDMN8GPeU4f7hxMB6VR/ uvXKeBxO64Kwnzk2iHfi/t1SeaIU/dzBSopoAkqo4mqLY6qQw5tpp7xTF8WShp6d V46CjOS0MJTr3dcTKHEOozprYWdiHqW8U6Fc7Y5eVWkL2T3NedKlzxt32zqWxntP 73+KjNPj6N55uqlH8lSha7j652P+GvfP6qW/QSrH+rgjRADfLQUECNBneS1F5HrF I8artkLmmneMrOHvmxCWkg3LT2SnJG9k7HCkK8Pwz6/uZwhQIWdjtaaO21GAX1vX wQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 7234300573664120147006361753763114 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FI' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'TeliaSonera' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'TeliaSonera Server CA v2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-18 14:05:33 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-17 14:05:33 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Sundsvall' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Svenska Cellulosa Aktiebolaget SCA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'ap1.sca.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20216600235643714475712441642275276118319787441289902288500984319212103396507558873328333176581403779578162275210719547559358485024170284480795854924775991028288584887635291949845832206403723055867219177668591824866046986297268319723504534068545216058493719188796821956616980607847613751933465066441109106963009743672199834935005021090692369548588777213958975766430244158324165487564952445301514242533164520360333991268604156070699549337214605000965633524153374981614314840384986531745710128403533513773353496879498879741757009869658210174953980970739345470953815828316459431620851402638093551812268643544747103475649 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 2f493c294fd70725f9c68cd564f5663d12832295 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) d25cc446aa9a37ed336e1defea8eb3aa17dd8b98 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits) 04b0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (71 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://repository.trust.teliasonera.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (807 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ap1.sca.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ap1as00Service.sca.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app84stage.tenaidentifi.sca.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app96tenaidentifi.sca.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aq1.sca.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aq1as00Service.sca.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth-gp1.sca.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth-gq1.sca.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dlogon.sca.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dsts.sca.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fasttrack.sca.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalmediabank.sca.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalmediabankdev.sca.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalmediabanktest.sca.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalmediabankuat.sca.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gq1.sca.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gw-hk.sca.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gw-se.sca.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gw-us.sca.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mapxr.sca.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ndes1.sca.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pimservice.sca.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publicmediabank.sca.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publicmediabankdev.sca.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publicmediabanktest.sca.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publicmediabankuat.sca.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qapimservice.sca.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rapp10.sca.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rapp11.sca.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rapp12.sca.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.tenaidentifi.sca.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sts.sca.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tenaidentifi.sca.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tenaidentifistage.sca.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xd1.sca.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xd2.sca.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xp1.sca.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xp2.sca.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xq1.sca.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xq2.sca.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'service1.sca.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (70 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl-3.trust.teliasonera.com/teliasoneraservercav2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (122 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.trust.telia.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repository.trust.teliasonera.com/teliasoneraservercav2.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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