TeliaSonera Root CA v1 OCSP Responder

- TeliaSonera -

Issued by TeliaSonera Root CA v1

About this certificate

This digital certificate with serial number 01:82:f3:05:66:0e:ee:8b:3e:25:c5:6d:17:92:43 was issued on by TeliaSonera.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Certificate had 0 embedded SCTs. Browser policy may require 4 for this certificate. Check if certificate has enough embedded SCTs to meet Apple CT Policy (https://support.apple.com/en-us/HT205280)

TeliaSonera

Organization: TeliaSonera

TeliaSonera

Organization: TeliaSonera

This certificate will expire on

Certificate Details

Serial Number (hex): 01:82:f3:05:66:0e:ee:8b:3e:25:c5:6d:17:92:43
Serial Number (int): 7848264221306507214444657223635523
Serial Number lenght: 113 bits, 15 octets

SubjectKeyId: eb:ce:e7:8e:ab:b7:c4:93:b0:a0:10:7d:9d:f0:0f:bb:5e:6c:e3:aa
AuthorityKeyId: f0:8f:59:38:00:b3:f5:8f:9a:96:0c:d5:eb:fa:7b:aa:17:e8:13:12

Fingerprint (sha1): 36:7a:f1:51:84:77:97:60:14:3b:2c:36:46:06:93:bc:e5:6e:f1:0b
Fingerprint (sha256): 1f:e8:ca:a1:dd:4b:51:74:10:83:4c:40:e8:94:51:cb:43:30:36:6c:28:33:1d:99:a4:dd:47:2f:5d:30:f1:c1


Revocation information


Check the revocation status for certificate TeliaSonera Root CA v1 OCSP Responder

0

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for TeliaSonera Root CA v1 OCSP Responder

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

OCSP Signing

Extensions

5 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any subject alternative names.

Other certificates including the domain name

(limited to 100 certificates)

Certificate

The complete raw certificate details for TeliaSonera Root CA v1 OCSP Responder in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyJJimHQHjEgVf/D/Jmh
vhyWEMUfZhWippnOEGMU0hqq8eCcM7IgpWcFZI1Zx82v6HtSMQsaLWlTVQ4yAS6k
lnn/N6kYr0JAzEAbBvLXmLnUBUiQaWUsDnvdp48Rvkpi+wFTjOgKfmex1zA/M2xS
OJX3R9VD1KARsji85Q/glUkXyFrCgYHniYgZWI/CE/RTRysw5Jk/+lTd7GuFXbsK
sphbnIlmrXjC0xyEXFUEm7VJaORNZHbJ9YXUTPqOge2NYGUj8YP4uinwXnCP3ygA
CemM2UL4rOIn3sy8CZeQUoEJogmwwD2n8XLVNRb0AR+kSp55ZRgwiJ0S1tSpcJoC
WwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7848264221306507214444657223635523
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'TeliaSonera'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'TeliaSonera Root CA v1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-31 08:29:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-08-30 08:29:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'TeliaSonera'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'TeliaSonera Root CA v1 OCSP Responder'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24128423930423858281872758278373429685138984007277538329716828363226555989952052358816305167952895765194045740888890229652779821654378113201768010497514810084199014866778814269801254329248647453720495319430850225092803029258088489631485246573152334885720640998942224950816710219494825810093604397109501725391984006026947931885187940351399737488497341490811446537083608151394851521771574397439791456175378012554000740579132933688148562115473466745732438130595574215042275204164909517960186197042652572670104141241028216280608125883071884318737804481160067989951897923338747999203460568932669399061137903241748152975963
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f08f593800b3f58f9a960cd5ebfa7baa17e81312
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ebcee78eabb7c493b0a0107d9df00fbb5e6ce3aa
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.9 (ocspSigning)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1.5 (ocspNoCheck)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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