passwordreset.sca.com

- Svenska Cellulosa Aktiebolaget SCA -

Issued by Telia Server CA v3

About this certificate

This digital certificate with serial number 01:8e:0b:be:a3:94:98:f8:52:da:48:3b:79:7a:68 was issued on by Telia Finland Oyj.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Svenska Cellulosa Aktiebolaget SCA

Organization: Svenska Cellulosa Aktiebolaget SCA
Locality: Sundsvall
Country: SE

Telia Finland Oyj

Organization: Telia Finland Oyj
Country: FI

This certificate will expire on

Certificate Details

Serial Number (hex): 01:8e:0b:be:a3:94:98:f8:52:da:48:3b:79:7a:68
Serial Number (int): 8073329531949528427360332790987368
Serial Number lenght: 113 bits, 15 octets

SubjectKeyId: c3:ab:16:a3:bd:9b:c4:b3:22:d0:42:ab:ca:b8:4a:df:13:33:31:a7
AuthorityKeyId: 46:66:8d:0e:07:23:16:b0:ea:4f:05:eb:96:5a:de:a5:ee:c9:7e:a4

Fingerprint (sha1): 2a:b4:35:07:31:44:89:0d:f5:f8:45:11:4c:c0:91:42:5f:5a:1c:9d
Fingerprint (sha256): 36:fd:bf:72:8b:73:93:dc:e2:76:e9:46:ac:d9:87:5e:ca:91:6f:82:ef:49:cf:df:df:f0:0a:a0:50:25:03:81

Issuing Certificate URL: http://cps.trust.telia.com/teliaservercav3.cer

Revocation information

OCSP Server: http://ocsp.trust.telia.com
CRL Distribution Point: http://httpcrl.trust.telia.com/teliaservercav3.crl

Check the revocation status for certificate passwordreset.sca.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for passwordreset.sca.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

passwordreset.sca.com

Other certificates including the domain name sca.com

(limited to 100 certificates)
fpportaltest.sca.com
mail.sca.com
*.sca.com
extlogin.sca.com
ap1.sca.com
kortportal.sca.com
passg-svc.forestproducts.sca.com
drive.sca.com
mdm.sca.com
fpconnect.sca.com
confluence.sca.com
loginfp.sca.com
loginfp.sca.com
dlogon.sca.com
jira.sca.com
*.sca.com
*.sca.com
extlogin.sca.com
www.sca.com
gateway.logistics.sca.com
remote.sca.com
gw-us.sca.com
login.sca.com
*.app.sca.com
extlogin-test.sca.com
*.sca.com
passwordreset.sca.com
abbgenixostr01.sca.com
storefront.forestproducts.sca.com
passwordreset.sca.com
drive.sca.com
fritid.sca.com
gateway.logistics.sca.com
fritid.sca.com
*.sca.com
guestauth.sca.com
storefront.forestproducts.sca.com
extlogin-test.sca.com
www.sca.com
gw-us.sca.com
imagevault.sca.com
mdmadmin.sca.com
test-bbs.sca.com
fpportal.sca.com
access.scasundsvall.se
fpsams.sca.com
www.sca.com
bbs.sca.com
crmauth.sca.com
mdm.sca.com
*.sca.com
integration.sca.com
idusis.sca.com
mdmadmin.sca.com
*.app.sca.com
integration.sca.com
fritid.sca.com
genai-test.sca.com
*.sca.com
*.app.sca.com
*.app.sca.com
passg-svc.forestproducts.sca.com
imagevault.sca.com
www.sca.com
gw-se.sca.com
mail.sca.com
gw-hk.sca.com
sip.sca.com
imagevault.sca.com
storefront.forestproducts.sca.com
login.sca.com
*.sca.com
fpportaltest.sca.com
www.sca.com
internalcrm.sca.com
*.sca.com
*.sca.com
gateway.logistics.sca.com
*.sca.com
imagevault.sca.com
remote.sca.com
integration.sca.com
remote.sca.com
www.sca.com
access.sca.com
fpportal.sca.com
idp.sca.com
*.app.sca.com
www.sca.com
bildarkiv.sca.com
ap1.sca.com
fpsync.sca.com
*.sca.com
test-confluence.sca.com
mail.sca.com
mysite.fpportal.sca.com
*.sca.com
fplcsvc.sca.com
jira.sca.com
fpps.sca.com

Certificate

The complete raw certificate details for passwordreset.sca.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF4jCCA8qgAwIBAgIPAY4LvqOUmPhS2kg7eXpoMA0GCSqGSIb3DQEBCwUAMEYx
CzAJBgNVBAYTAkZJMRowGAYDVQQKDBFUZWxpYSBGaW5sYW5kIE95ajEbMBkGA1UE
AwwSVGVsaWEgU2VydmVyIENBIHYzMB4XDTI0MDMwNDIzMTM0NloXDTI1MDMyNTIz
MTM0NlowbjELMAkGA1UEBhMCU0UxEjAQBgNVBAcMCVN1bmRzdmFsbDErMCkGA1UE
CgwiU3ZlbnNrYSBDZWxsdWxvc2EgQWt0aWVib2xhZ2V0IFNDQTEeMBwGA1UEAwwV
cGFzc3dvcmRyZXNldC5zY2EuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2FfJ+j+XUaaVWfcEUOjRq9sXhFAmrOryR9NJm8n5KV4M0Q/gP7scVYLA
DV3+PMfX7KS5Ur31wJQSXhIH01AbqPLYtbhb5ydgL39/QItvG6yTfNcOXJakJWsk
nugS+cmPJavQCQm86KmDonF+Eq0QtUdt5jGHCXUHh3O4hqxaC06ilGvt0b4z6zom
ejg5XO+Rx1WXhRPXBujzX5CzSjFEqvvd1j1MRRFat5v3KL3ZtCQENzukpqqchfzX
RLXAeCxC4i8Q6b0ee2PZTh8WoZ3nxp4YDp63BlagRnTzSxcEdLVoJp2Mnhsx5X4t
wbU2qYHGN+h9F2WERNYHN5RzbLWVWQIDAQABo4IBozCCAZ8wHwYDVR0jBBgwFoAU
RmaNDgcjFrDqTwXrllrepe7JfqQwHQYDVR0OBBYEFMOrFqO9m8SzItBCq8q4St8T
MzGnMA4GA1UdDwEB/wQEAwIFoDA9BgNVHSAENjA0MDIGBmeBDAECAjAoMCYGCCsG
AQUFBwIBFhpodHRwOi8vY3BzLnRydXN0LnRlbGlhLmNvbTAgBgNVHREEGTAXghVw
YXNzd29yZHJlc2V0LnNjYS5jb20wQwYDVR0fBDwwOjA4oDagNIYyaHR0cDovL2h0
dHBjcmwudHJ1c3QudGVsaWEuY29tL3RlbGlhc2VydmVyY2F2My5jcmwwHQYDVR0l
BBYwFAYIKwYBBQUHAwIGCCsGAQUFBwMBMHMGCCsGAQUFBwEBBGcwZTAnBggrBgEF
BQcwAYYbaHR0cDovL29jc3AudHJ1c3QudGVsaWEuY29tMDoGCCsGAQUFBzAChi5o
dHRwOi8vY3BzLnRydXN0LnRlbGlhLmNvbS90ZWxpYXNlcnZlcmNhdjMuY2VyMBMG
CisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4ICAQBoJkKNfmN3UR+R
qA57XTf3ACN6hI3Xlb3w2KdsOBq8mLfhCoi9+U4lGomliZNYXeB4JWkU5C+MCWcE
rqRLGou4Bm689JdC2HSjCA8fQBXLMcmADeRU6UT3UpQP0//8g28J/Jw7ra1/E0b+
xrqbcy6nkImlAaqvGsixElFOhY1Ef87+T1IT2Exr8bEq4nNRIJO8q6fvaN7kXvR1
/Zqg/iNQytnxHLXWj8ETYNPpHqzAGx0qlSGec0e9WIuSKBJe1OeRRniuUHWAVEEZ
wxdGLkvR1zJv1MBcsXPzwavkTQXgt0liPDdDlBkHoHwbsn0B531KBgUEcwVCE3uu
O7YvQt+7E3bN4jTU7WydFblOuQfneU0kcUFI943VxAW4XDTuDVrUnXooSiyk7y03
mIqC64sqd2tJGG9NbyUsk6T2Ke0EfVoKGWcArkNFYuDT80kLG8o4X/KXKxE3A3Hf
QAp0sSiGwjrcnbCN+FZBSgghz3IXyTnAxqDwCOCT83mJ5Lt/t8juqUcGT9brUMWu
B9+fJblOaCS9z0UACbfIXZ8cy+ZYJnkhopzkGQWhMaxUB9Y8LVbqgwJIkxhvgzs3
V7C8mNCodxo0dLBYBkf65hFfqCimNfkKqz/cFP/IaFnnw13gHwz9PjDey+fK1TMz
Xwc/WSqstVPQbHV6wSJexzgEkHbaPg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2FfJ+j+XUaaVWfcEUOjR
q9sXhFAmrOryR9NJm8n5KV4M0Q/gP7scVYLADV3+PMfX7KS5Ur31wJQSXhIH01Ab
qPLYtbhb5ydgL39/QItvG6yTfNcOXJakJWsknugS+cmPJavQCQm86KmDonF+Eq0Q
tUdt5jGHCXUHh3O4hqxaC06ilGvt0b4z6zomejg5XO+Rx1WXhRPXBujzX5CzSjFE
qvvd1j1MRRFat5v3KL3ZtCQENzukpqqchfzXRLXAeCxC4i8Q6b0ee2PZTh8WoZ3n
xp4YDp63BlagRnTzSxcEdLVoJp2Mnhsx5X4twbU2qYHGN+h9F2WERNYHN5RzbLWV
WQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8073329531949528427360332790987368
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Telia Finland Oyj'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Telia Server CA v3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-04 23:13:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-25 23:13:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Sundsvall'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Svenska Cellulosa Aktiebolaget SCA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'passwordreset.sca.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27310764229565465122059507515847875170949604375106839273001877418429882815580959771003653843770090919401449316006555810966836499225079735492598148301355080500467715913022643979184365730970374065358828031702269235199578402222500884892070825718324452767982155972739670045677164146585005454216697781981042485622598617685920383467460358141842671780823511490430229910251418822882217366517864866323430709607870779778030443842430670396308065752186364721538229773118182248560199685178763378786241946022397477415681359145144525323073052361161920870083188791757145721588126202041426210496318767577953576613852538317070820283737
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 46668d0e072316b0ea4f05eb965adea5eec97ea4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c3ab16a3bd9bc4b322d042abcab84adf133331a7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.trust.telia.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'passwordreset.sca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://httpcrl.trust.telia.com/teliaservercav3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.trust.telia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cps.trust.telia.com/teliaservercav3.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		006826428d7e6377511f91a80e7b5d37f700237a848dd795bdf0d8a76c381abc98b7e10a88bdf94e251a89a58993585de078256914e42f8c096704aea44b1a8bb8066ebcf49742d874a3080f1f4015cb31c9800de454e944f752940fd3fffc836f09fc9c3badad7f1346fec6ba9b732ea79089a501aaaf1ac8b112514e858d447fcefe4f5213d84c6bf1b12ae273512093bcaba7ef68dee45ef475fd9aa0fe2350cad9f11cb5d68fc11360d3e91eacc01b1d2a95219e7347bd588b9228125ed4e7914678ae507580544119c317462e4bd1d7326fd4c05cb173f3c1abe44d05e0b749623c3743941907a07c1bb27d01e77d4a060504730542137bae3bb62f42dfbb1376cde234d4ed6c9d15b94eb907e7794d24714148f78dd5c405b85c34ee0d5ad49d7a284a2ca4ef2d37988a82eb8b2a776b49186f4d6f252c93a4f629ed047d5a0a196700ae434562e0d3f3490b1bca385ff2972b11370371df400a74b12886c23adc9db08df856414a0821cf7217c939c0c6a0f008e093f37989e4bb7fb7c8eea947064fd6eb50c5ae07df9f25b94e6824bdcf450009b7c85d9f1ccbe658267921a29ce41905a131ac5407d63c2d56ea83024893186f833b3757b0bc98d0a8771a3474b0580647fae6115fa828a635f90aab3fdc14ffc86859e7c35de01f0cfd3e30decbe7cad533335f073f592aacb553d06c757ac1225ec738049076da3e