adfs.consolis.com

- Consolis Oy Ab -

Issued by TeliaSonera Server CA v2

About this certificate

This digital certificate with serial number 01:63:ce:9e:05:ae:ce:7f:41:aa:81:cc:45:2f:15 was issued on by TeliaSonera.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Consolis Oy Ab

Organization: Consolis Oy Ab
Organization unit: ICT
Locality: Vantaa
Country: FI

TeliaSonera

Organization: TeliaSonera
Country: FI

This certificate has expire since

Certificate Details

Serial Number (hex): 01:63:ce:9e:05:ae:ce:7f:41:aa:81:cc:45:2f:15
Serial Number (int): 7216625316275963291735841841688341
Serial Number lenght: 113 bits, 15 octets

SubjectKeyId: be:e8:3b:5e:75:47:65:a9:8a:88:e9:c2:5a:35:bd:61:9e:89:e2:17
AuthorityKeyId: 2f:49:3c:29:4f:d7:07:25:f9:c6:8c:d5:64:f5:66:3d:12:83:22:95

Fingerprint (sha1): 8d:8b:c3:6c:ca:49:c6:ab:d9:b7:d7:c8:25:ec:1c:1f:a2:45:0c:9e
Fingerprint (sha256): 4a:47:88:61:1f:82:05:08:d7:6a:5c:c4:00:26:94:c8:1d:5d:20:34:b4:83:2f:20:cd:cf:64:4d:f9:f8:71:4a

Issuing Certificate URL: http://repository.trust.teliasonera.com/teliasoneraservercav2.cer

Revocation information

OCSP Server: http://ocsp.trust.telia.com
CRL Distribution Point: http://crl-3.trust.teliasonera.com/teliasoneraservercav2.crl

Check the revocation status for certificate adfs.consolis.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for adfs.consolis.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

adfs.consolis.com

Other certificates including the domain name consolis.com

(limited to 100 certificates)
staging5.ces.consolis.com
consolis.com
email-fr.consolis.com
email.consolis.com
access03.benecontact.com
access-am02.sipfed.oninteroute.com
consolis.com
ces.consolis.com
adfs.consolis.com
consolis.com
lease-dev.consolis.com
consolis.com
access-am02.sipfed.oninteroute.com
access-am02.sipfed.oninteroute.com
access-am02.sipfed.oninteroute.com
consolis.com
xenmobile.consolis.com
ces.consolis.com
e05.vmr.omvideo.se
infocenter.consolis.com
access-am02.sipfed.oninteroute.com
external.consolis.com
access-am02.sipfed.oninteroute.com
www.consolis.com
access-am02.sipfed.oninteroute.com
consolis.com
polaris-dev.consolis.com
consolis.com
consolis.com
access-am02.sipfed.oninteroute.com
access-am02.sipfed.oninteroute.com
access-am02.sipfed.oninteroute.com
www.consolis.com
access03.benecontact.com
adfs.consolis.com
xenmobile.consolis.com
connect.consolis.com
consolis.com
access03.benecontact.com
access03.benecontact.com
adfs.consolis.com
www.consolis.com
access03.benecontact.com
e05.vmr.omvideo.se
ces.consolis.com
access03.benecontact.com
email.consolis.com
connect.consolis.com
sfbaccess.benecontact.com
consolis.com
access03.benecontact.com
www.consolis.com
adfs.consolis.com
e05.vmr.omvideo.se
consolis.com
e05.vmr.omvideo.se
connect.consolis.com
ces.consolis.com
access03.benecontact.com
*.consolis.com
access03.benecontact.com
polaris-dev.consolis.com
polaris.consolis.com
consolis.com
access03.benecontact.com
e05.vmr.omvideo.se
consolis.com
access-am02.sipfed.oninteroute.com
polaris-dev.consolis.com
access03.benecontact.com
www.consolis.com
consolis.com
*.consolis.com
access-am02.sipfed.oninteroute.com
www.consolis.com
access-am02.sipfed.oninteroute.com
consolis.com
e05.vmr.omvideo.se
*.consolis.com
www.consolis.com
www.consolis.com
access03.benecontact.com
polaris.consolis.com
*.consolis.com
access-am02.sipfed.oninteroute.com
e05.vmr.omvideo.se
access03.benecontact.com
consolis.com
consolis.com
polaris.consolis.com
infocenter.consolis.com
infocenter.consolis.com
access03.benecontact.com
access03.benecontact.com
consolis.com
access03.benecontact.com
consolis.com
azvpn.consolis.com
connect.consolis.com
medialibrary.consolis.com

Certificate

The complete raw certificate details for adfs.consolis.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1kYbTpBbFDw+v7+eVnmt
o1iDuYZW6qsla4tSeNoGywG/zCwDjmNot51INhhiY4e2b3iWIAeGSBFWnSP2q+95
CxJGC87sfPe0pdSmD2nJLFIHVyqrf6IyQNj/Ccb5TSioW1cWQ6fZD2ffklzukzGP
3fPLxlGK1OoPH7fBRjiDq5FuZujRenDhbvIIFR/N9XaBakwy5j42ygsq+KlbDGc7
5yP0TCu2nnCH0Dhb/8p09Sn8r4Wzm2nESir22x6VnsXNVAeTsFS4ksbfPb0B9fDX
94oHKEQ4iZX1vNys0S4/c6rs3y8Wh9ELbGfMQa+xeQpeOkOI0ch0mE+essY9QGhd
NQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7216625316275963291735841841688341
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'TeliaSonera'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'TeliaSonera Server CA v2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-05 06:24:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-04 06:24:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Vantaa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Consolis Oy Ab'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'ICT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'adfs.consolis.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27049568148975006479656453360411823374901018969033528539510721983644512803065885498217178474391521332986182619871043163527900429787037549856437857760289598883043408556905772006612979424842627482187617398609162330031657500188806186049981887650899968043109790781944929741630429279784217501546006578081489577032383458114792614834941284340998963518133618146617855987156303728149229397154940591088486904054434907816962663007058639695435218006829192957343541554272837926203357666804280873447086340828771227639938581701764646562633904159715782976034478836324812131768106087170588471088274547162434015549081624268783244303669
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 2f493c294fd70725f9c68cd564f5663d12832295
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bee83b5e754765a98a88e9c25a35bd619e89e217
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (71 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://repository.trust.teliasonera.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adfs.consolis.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (70 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl-3.trust.teliasonera.com/teliasoneraservercav2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (122 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.trust.telia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repository.trust.teliasonera.com/teliasoneraservercav2.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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