genai-test.sca.com

- Svenska Cellulosa Aktiebolaget SCA -

Issued by Telia Server CA v3

About this certificate

This digital certificate with serial number 01:8d:e5:c6:d9:8b:0e:7d:ad:27:7d:56:61:6f:06 was issued on by Telia Finland Oyj.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Svenska Cellulosa Aktiebolaget SCA

Organization: Svenska Cellulosa Aktiebolaget SCA
Locality: Sundsvall
Country: SE

Telia Finland Oyj

Organization: Telia Finland Oyj
Country: FI

This certificate will expire on

Certificate Details

Serial Number (hex): 01:8d:e5:c6:d9:8b:0e:7d:ad:27:7d:56:61:6f:06
Serial Number (int): 8070321402891003425787876347047686
Serial Number lenght: 113 bits, 15 octets

SubjectKeyId: 42:9f:56:eb:22:1b:90:0c:da:46:48:11:51:2b:7a:b1:19:63:16:fb
AuthorityKeyId: 46:66:8d:0e:07:23:16:b0:ea:4f:05:eb:96:5a:de:a5:ee:c9:7e:a4

Fingerprint (sha1): cc:eb:29:8c:45:98:c4:3c:56:46:f4:3c:65:34:04:2e:4c:1d:1d:5e
Fingerprint (sha256): 61:d9:7d:04:b1:58:e2:c7:12:44:a8:ea:5d:d1:29:f3:4e:35:ea:a3:8b:f8:c4:a3:ed:cc:e8:04:cd:0a:77:22

Issuing Certificate URL: http://cps.trust.telia.com/teliaservercav3.cer

Revocation information

OCSP Server: http://ocsp.trust.telia.com
CRL Distribution Point: http://httpcrl.trust.telia.com/teliaservercav3.crl

Check the revocation status for certificate genai-test.sca.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for genai-test.sca.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

genai-test.sca.com

Other certificates including the domain name sca.com

(limited to 100 certificates)
fpportaltest.sca.com
mail.sca.com
*.sca.com
extlogin.sca.com
ap1.sca.com
kortportal.sca.com
passg-svc.forestproducts.sca.com
drive.sca.com
mdm.sca.com
fpconnect.sca.com
confluence.sca.com
loginfp.sca.com
loginfp.sca.com
dlogon.sca.com
jira.sca.com
*.sca.com
*.sca.com
extlogin.sca.com
www.sca.com
gateway.logistics.sca.com
remote.sca.com
gw-us.sca.com
login.sca.com
*.app.sca.com
extlogin-test.sca.com
*.sca.com
passwordreset.sca.com
abbgenixostr01.sca.com
storefront.forestproducts.sca.com
passwordreset.sca.com
drive.sca.com
fritid.sca.com
gateway.logistics.sca.com
fritid.sca.com
*.sca.com
guestauth.sca.com
storefront.forestproducts.sca.com
extlogin-test.sca.com
www.sca.com
gw-us.sca.com
imagevault.sca.com
mdmadmin.sca.com
test-bbs.sca.com
fpportal.sca.com
access.scasundsvall.se
fpsams.sca.com
www.sca.com
bbs.sca.com
crmauth.sca.com
mdm.sca.com
*.sca.com
integration.sca.com
idusis.sca.com
mdmadmin.sca.com
*.app.sca.com
integration.sca.com
fritid.sca.com
genai-test.sca.com
*.sca.com
*.app.sca.com
*.app.sca.com
passg-svc.forestproducts.sca.com
imagevault.sca.com
www.sca.com
gw-se.sca.com
mail.sca.com
gw-hk.sca.com
sip.sca.com
imagevault.sca.com
storefront.forestproducts.sca.com
login.sca.com
*.sca.com
fpportaltest.sca.com
www.sca.com
internalcrm.sca.com
*.sca.com
*.sca.com
gateway.logistics.sca.com
*.sca.com
imagevault.sca.com
remote.sca.com
integration.sca.com
remote.sca.com
www.sca.com
access.sca.com
fpportal.sca.com
idp.sca.com
*.app.sca.com
www.sca.com
bildarkiv.sca.com
ap1.sca.com
fpsync.sca.com
*.sca.com
test-confluence.sca.com
mail.sca.com
mysite.fpportal.sca.com
*.sca.com
fplcsvc.sca.com
jira.sca.com
fpps.sca.com

Certificate

The complete raw certificate details for genai-test.sca.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntVU0hb5Cqf9qqzau8Ph
f2uSSJNwRJYFlXzkS64GGTDxEfzzyIy+c2rD+GydeBAvw8t6YFF1adR57BP4Blcm
gEGLg//gksKvmgFu01EfCca85LDwMCuyBedE+LlhTCGQFYL7RO8/q+/qPeUewYUp
Oozh/TfbumLlNH1XC5kXGxQf4oghV3uObhe2sGLm4tr3zbHeU1I3J6TE9zlE0T5G
ZQ2neVn7/qj6wfP0oPIpKH8T8Y5BZBp+oZy1MvdtFrjQoKdkmV2pOSNt1Dg786Si
VPaaTgZ67oaMOVwjgBcikUFZh0O03p+4zX1zdJdWGvxwHo7eI2G70NzVA7qk0sV4
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8070321402891003425787876347047686
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Telia Finland Oyj'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Telia Server CA v3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-26 14:17:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-25 14:17:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Sundsvall'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Svenska Cellulosa Aktiebolaget SCA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'genai-test.sca.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20050849784581066987232722376816424580244536544138304999421897747147930286938119103163401194304001488614100794094107745973113986989323947213062704960033855829895632448674210262762406411583031028706885658570810912967678030818962679796902418284491409590360969565788309201750778991065645347831417665731327645472352152427345850024023564814195800363806449085596638967559549300796573077604475506890190890102140610270176975223108643387366031901220413651378412191834995280450877857940586701954658784313272456327168636187939051312640823609986040738515086259831484862161458078565724316963443703282164257848561501924024987777109
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 46668d0e072316b0ea4f05eb965adea5eec97ea4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							429f56eb221b900cda464811512b7ab1196316fb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.trust.telia.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'genai-test.sca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://httpcrl.trust.telia.com/teliaservercav3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.trust.telia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cps.trust.telia.com/teliaservercav3.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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