*.sodra.com

- Södra Skogsägarna ek för -

Issued by Telia Server CA v3

About this certificate

This digital certificate with serial number 01:8e:e7:a3:6b:3e:d0:e4:63:a1:cb:d0:2d:24:c6 was issued on by Telia Finland Oyj.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Södra Skogsägarna ek för

Organization: Södra Skogsägarna ek för
Locality: VÄXJÖ
Country: SE

Telia Finland Oyj

Organization: Telia Finland Oyj
Country: FI

This certificate will expire on

Certificate Details

Serial Number (hex): 01:8e:e7:a3:6b:3e:d0:e4:63:a1:cb:d0:2d:24:c6
Serial Number (int): 8090751303502463570607248172197062
Serial Number lenght: 113 bits, 15 octets

SubjectKeyId: bd:9f:f5:7d:55:77:25:51:c5:45:94:11:da:ea:79:24:ce:92:4f:fb
AuthorityKeyId: 46:66:8d:0e:07:23:16:b0:ea:4f:05:eb:96:5a:de:a5:ee:c9:7e:a4

Fingerprint (sha1): 85:09:3a:56:62:c2:36:7e:45:67:51:89:fe:a2:be:0c:a5:f0:bc:b1
Fingerprint (sha256): 2a:54:1f:3e:3b:0f:a6:c6:51:e0:bc:36:ef:5f:61:2e:41:14:db:8d:79:46:5a:ce:62:7d:39:1c:62:e0:d6:8c

Issuing Certificate URL: http://cps.trust.telia.com/teliaservercav3.cer

Revocation information

OCSP Server: http://ocsp.trust.telia.com
CRL Distribution Point: http://httpcrl.trust.telia.com/teliaservercav3.crl

Check the revocation status for certificate *.sodra.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.sodra.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sodra.com
*.sodra.com

Other certificates including the domain name sodra.com

(limited to 100 certificates)
webmail.sodra.com
energiprodukter.sodra.com
pptest.sodra.com
ehub.sodra.com
latvia.sodra.com
lrf.sodra.com
support.sodra.com
VPN.Sodra.com
oncemore.sodra.com
*.sodra.com
redirect.sodra.com
latvia.sodra.com
guider.sodra.com
ucexternal.sodra.com
energiprodukter.sodra.com
latvia.sodra.com
karriar.sodra.com
psol.sodra.com
skog.sodra.com
sip.sodra.com
*.og.sodra.com
*.og-test.sodra.com
energiprodukter.sodra.com
*.og-test.sodra.com
karriar.sodra.com
energiprodukter.sodra.com
*.og.sodra.com
medlem.sodra.com
el.sodra.com
oncemore.sodra.com
servicedesk.ecm.software
*.sodra.com
energiprodukter.sodra.com
career.sodra.com
webmail.sodra.com
career.sodra.com
*.sodra.com
*.sodra.com
*.sodra.com
*.sodra.com
support.sodra.com
servicedesk.ecm.software
latvia.sodra.com
support.sodra.com
pellets.sodra.com
ucexternal.sodra.com
b2bwood.sodra.com
energiprodukter.sodra.com
vpn.sodra.com
webmail.sodra.com
entreprenor.sodra.com
pellets.sodra.com
karriar.sodra.com
lc.sodra.com
latvia.sodra.com
PULPSERVICES.SODRA.COM
*.og-test.sodra.com
wood1.sodra.com
energiprodukter.sodra.com
oncemore.sodra.com
ehubtest.sodra.com
*.og-test.sodra.com
energiprodukter.sodra.com
career.sodra.com
support.sodra.com
sip.sodra.com
*.sodra.com
latvia.sodra.com
pulpit.sodra.com
workplace.sodra.com
energiprodukter.sodra.com
vpn.sodra.com
energiprodukter.sodra.com
energiprodukter.sodra.com

Certificate

The complete raw certificate details for *.sodra.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuklLdg90QiIo3+nU6Ouf
LZju8UQSS1yQjTy36XYaPovYcKErxxuYG+I3rLnBFAaTO3T6vhqoBMjz6Z9vyiW8
tuz05nvKJ1iuALkMT2WUfaukAXRBHH2E8Ynl2hM4/zcVnKMvVYtpe25sbv4X6oHP
rDCWrBNyF4kWUaT5G77dOKq1O44K3FT5dZQIvw8ztvwoU6Mgh89ly2O7lw9GR/Sj
QYhdebxo/1brdl0E4waAjQqkEQcwwn8wA/v+DmTRa97ArbJV+6hEAimHyBKZ9CMi
XDKhtLK5nyr6L/WmqPQ8GknX8wvm6g3V5afsegOq6d4lePItrb9PAe2yCamsh9hg
YQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8090751303502463570607248172197062
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Telia Finland Oyj'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Telia Server CA v3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-16 16:00:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-11 16:00:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'VÄXJÖ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Södra Skogsägarna ek för'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.sodra.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23516467721944583203500736251437933065220251308732046727623423605140942880784665690084555459735752556766257977111255695188955301834867084891330527285485075667869346035584812240804269437070473224298886369002296803714044630969425266465820628905714889419752639313969705176208522303857703840769455948057836257750936052243490698769351865236337394366857799707950042000883595149542020564103338495594361793628766643233253427199841039011586829457809909535300427248004264377503570121648592223834586287315204876163877698416351253286373390404317769179374868518331879847479262841488521322429303784960209649776990658521126751723617
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 46668d0e072316b0ea4f05eb965adea5eec97ea4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bd9ff57d55772551c5459411daea7924ce924ffb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.trust.telia.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sodra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sodra.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://httpcrl.trust.telia.com/teliaservercav3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.trust.telia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cps.trust.telia.com/teliaservercav3.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							01680076004e75a3275c9a10c3385b6cd4df3f52eb1df0e08e1b8d69c0b1fa64b1629a39df0000018ee7a36cdd00000403004730450221009987d0277fa34c7b855b6ba6df41e812e9a08573cd7263f6bc58aa894902eccd02207bac713fceb526fb92e323784a19ed5394dfdc245216576b090af60916a76962007600cf1156eed52e7caff3875bd9692e9be91a71674ab017ecac01d25b77cecc3b080000018ee7a36c9c000004030047304502205be6d645e7c42b687140c1fc1ddf144b4e54477a8f2d832273702f7a50b877a7022100b7ce9103611804e4b37ce3b4d25f0068ba9c8657c2347abeb38d4763aad8696a007600ccfb0f6a85710965fe959b53cee9b27c22e9855c0d978db6a97e54c0fe4c0db00000018ee7a36d640000040300473045022100e69df17e55a8b6fd2737c2cbdb7600261ed02862f3f09522de4b966062d395000220571ac868a76c07e07851fee3abe573c318e0a7fb4de3174967ccf139e1dc1e6e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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