crmauth.sca.com

- Svenska Cellulosa Aktiebolaget SCA -

Issued by TeliaSonera Server CA v2

About this certificate

This digital certificate with serial number 01:69:70:e5:24:d5:49:13:09:e4:a0:55:a9:f8:67 was issued on by TeliaSonera.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Svenska Cellulosa Aktiebolaget SCA

Organization: Svenska Cellulosa Aktiebolaget SCA
Locality: Sundsvall
Country: SE

TeliaSonera

Organization: TeliaSonera
Country: FI

This certificate has expire since

Certificate Details

Serial Number (hex): 01:69:70:e5:24:d5:49:13:09:e4:a0:55:a9:f8:67
Serial Number (int): 7330894337715641268050376922888295
Serial Number lenght: 113 bits, 15 octets

SubjectKeyId: d5:80:f0:6d:98:cc:99:a7:dc:3c:0d:f7:7a:a5:4f:b3:83:2d:20:11
AuthorityKeyId: 2f:49:3c:29:4f:d7:07:25:f9:c6:8c:d5:64:f5:66:3d:12:83:22:95

Fingerprint (sha1): 49:ff:3e:d5:d7:81:50:8c:d3:a8:90:3d:41:3d:96:18:b2:00:34:ec
Fingerprint (sha256): 58:39:a4:4f:f1:16:6e:f5:9d:d0:e1:fa:57:c8:5f:04:d5:45:f0:8f:33:e2:9d:88:9f:f8:d2:fa:f2:d3:f2:87

Issuing Certificate URL: http://repository.trust.teliasonera.com/teliasoneraservercav2.cer

Revocation information

OCSP Server: http://ocsp.trust.telia.com
CRL Distribution Point: http://crl-3.trust.teliasonera.com/teliasoneraservercav2.crl

Check the revocation status for certificate crmauth.sca.com

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for crmauth.sca.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

crmauth.sca.com
crmdisco.sca.com
crmgraphic.sca.com
crmlogistics.sca.com
crmskog.sca.com
crmpulp.sca.com

Other certificates including the domain name sca.com

(limited to 100 certificates)
fpportaltest.sca.com
mail.sca.com
*.sca.com
extlogin.sca.com
ap1.sca.com
kortportal.sca.com
passg-svc.forestproducts.sca.com
drive.sca.com
mdm.sca.com
fpconnect.sca.com
confluence.sca.com
loginfp.sca.com
loginfp.sca.com
dlogon.sca.com
jira.sca.com
*.sca.com
*.sca.com
extlogin.sca.com
www.sca.com
gateway.logistics.sca.com
remote.sca.com
gw-us.sca.com
login.sca.com
*.app.sca.com
extlogin-test.sca.com
*.sca.com
passwordreset.sca.com
abbgenixostr01.sca.com
storefront.forestproducts.sca.com
passwordreset.sca.com
drive.sca.com
fritid.sca.com
gateway.logistics.sca.com
*.sca.com
guestauth.sca.com
storefront.forestproducts.sca.com
extlogin-test.sca.com
www.sca.com
gw-us.sca.com
imagevault.sca.com
mdmadmin.sca.com
test-bbs.sca.com
fpportal.sca.com
access.scasundsvall.se
fpsams.sca.com
www.sca.com
bbs.sca.com
crmauth.sca.com
mdm.sca.com
*.sca.com
integration.sca.com
idusis.sca.com
mdmadmin.sca.com
*.app.sca.com
integration.sca.com
fritid.sca.com
genai-test.sca.com
*.sca.com
*.app.sca.com
*.app.sca.com
passg-svc.forestproducts.sca.com
imagevault.sca.com
www.sca.com
gw-se.sca.com
mail.sca.com
gw-hk.sca.com
sip.sca.com
imagevault.sca.com
storefront.forestproducts.sca.com
login.sca.com
*.sca.com
fpportaltest.sca.com
www.sca.com
internalcrm.sca.com
*.sca.com
*.sca.com
gateway.logistics.sca.com
*.sca.com
imagevault.sca.com
remote.sca.com
integration.sca.com
remote.sca.com
www.sca.com
access.sca.com
fpportal.sca.com
idp.sca.com
*.app.sca.com
www.sca.com
bildarkiv.sca.com
ap1.sca.com
fpsync.sca.com
*.sca.com
test-confluence.sca.com
mail.sca.com
mysite.fpportal.sca.com
*.sca.com
fplcsvc.sca.com
fpps.sca.com
*.app.sca.com
*.app.sca.com

Certificate

The complete raw certificate details for crmauth.sca.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZJo1CkCva64kZZfsWLw
uVuxcn56T/G6fGcEKkuUZiIouiK6GYazB7Xfpd+edaq+iMM2kpleZq4HmbyFM2Pn
NR/uRHe3A1yvU+Pc9P6Dl0ekoXSWQTVa8L2TeSnOtoRaO921Xt4Qo5giEJr4WJeR
lYvmvYrgfb4udC8m2ElPyc5sUjlWQSWkXoN85E+WYKZstcUYUv/js9K88BtyOyv0
6NM/NhG7mSIQzJ/xTACYTN7MzFCpz/5DRsfr27Gbk8yy9dfpnJIaqMNE/1nHhRq9
soX1dK8IcCNReNVhyDRiL55ReM0Mc1O1HqydYfO3ufXSk2YY6e5QprNNTWMiPfkt
6wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7330894337715641268050376922888295
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'TeliaSonera'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'TeliaSonera Server CA v2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-12 07:54:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-11 07:54:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Sundsvall'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Svenska Cellulosa Aktiebolaget SCA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'crmauth.sca.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23426283627739106708476251200474633638266781555154229146422156952942324088157662813021419399853001960710640468564017594029456662245738069093184734172239591294366527295798609917642071764633428180016081778671469770411853171640252743151272307959285668768434731206392252036952011454418524797109479907193858639326446043325524646039214269551348708922960613744333837256486528582640876722566161429366778467331123026467637986810952344591773547307120516622573618696391122601961694584858258887989450446896569190633850891647772839873420874963953415081980523609017215375040134279823784868572363186793453705699673283535243132349931
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 2f493c294fd70725f9c68cd564f5663d12832295
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d580f06d98cc99a7dc3c0df77aa54fb3832d2011
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (71 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://repository.trust.teliasonera.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (113 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crmauth.sca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crmdisco.sca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crmgraphic.sca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crmlogistics.sca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crmskog.sca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crmpulp.sca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (70 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl-3.trust.teliasonera.com/teliasoneraservercav2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (122 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.trust.telia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repository.trust.teliasonera.com/teliasoneraservercav2.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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