passg-svc.forestproducts.sca.com

- Svenska Cellulosa Aktiebolaget SCA -

Issued by Telia Server CA v3

About this certificate

This digital certificate with serial number 01:8e:17:fb:eb:f7:b8:b9:f9:04:ed:ee:c0:5e:53 was issued on by Telia Finland Oyj.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Svenska Cellulosa Aktiebolaget SCA

Organization: Svenska Cellulosa Aktiebolaget SCA
Locality: Sundsvall
Country: SE

Telia Finland Oyj

Organization: Telia Finland Oyj
Country: FI

This certificate will expire on

Certificate Details

Serial Number (hex): 01:8e:17:fb:eb:f7:b8:b9:f9:04:ed:ee:c0:5e:53
Serial Number (int): 8074299235996057798471714600934995
Serial Number lenght: 113 bits, 15 octets

SubjectKeyId: 3e:f1:d5:99:cd:26:22:2d:d8:7c:d5:7c:17:1c:be:fd:3a:c2:81:82
AuthorityKeyId: 46:66:8d:0e:07:23:16:b0:ea:4f:05:eb:96:5a:de:a5:ee:c9:7e:a4

Fingerprint (sha1): 8a:32:7d:b6:00:7a:bf:0f:00:59:ac:d1:b6:5f:69:3c:d5:2d:c0:2c
Fingerprint (sha256): 66:ec:14:d4:db:38:98:67:8e:26:82:1d:3d:92:4a:a9:51:27:70:c6:e3:e8:84:95:a7:f2:a5:5b:ad:7c:c5:98

Issuing Certificate URL: http://cps.trust.telia.com/teliaservercav3.cer

Revocation information

OCSP Server: http://ocsp.trust.telia.com
CRL Distribution Point: http://httpcrl.trust.telia.com/teliaservercav3.crl

Check the revocation status for certificate passg-svc.forestproducts.sca.com

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for passg-svc.forestproducts.sca.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

passg-svc.forestproducts.sca.com
passg2-svc.forestproducts.sca.com
passg-svc-test.forestproducts.sca.com
passg-svc-bck.forestproducts.sca.com

Other certificates including the domain name sca.com

(limited to 100 certificates)
fpportaltest.sca.com
mail.sca.com
*.sca.com
extlogin.sca.com
ap1.sca.com
kortportal.sca.com
passg-svc.forestproducts.sca.com
drive.sca.com
mdm.sca.com
fpconnect.sca.com
confluence.sca.com
loginfp.sca.com
loginfp.sca.com
dlogon.sca.com
jira.sca.com
*.sca.com
*.sca.com
extlogin.sca.com
www.sca.com
gateway.logistics.sca.com
remote.sca.com
gw-us.sca.com
login.sca.com
*.app.sca.com
extlogin-test.sca.com
*.sca.com
passwordreset.sca.com
abbgenixostr01.sca.com
storefront.forestproducts.sca.com
passwordreset.sca.com
drive.sca.com
fritid.sca.com
gateway.logistics.sca.com
fritid.sca.com
*.sca.com
guestauth.sca.com
storefront.forestproducts.sca.com
extlogin-test.sca.com
www.sca.com
gw-us.sca.com
imagevault.sca.com
mdmadmin.sca.com
test-bbs.sca.com
fpportal.sca.com
access.scasundsvall.se
fpsams.sca.com
www.sca.com
bbs.sca.com
crmauth.sca.com
mdm.sca.com
*.sca.com
integration.sca.com
idusis.sca.com
mdmadmin.sca.com
*.app.sca.com
integration.sca.com
fritid.sca.com
genai-test.sca.com
*.sca.com
*.app.sca.com
*.app.sca.com
passg-svc.forestproducts.sca.com
imagevault.sca.com
www.sca.com
gw-se.sca.com
mail.sca.com
gw-hk.sca.com
sip.sca.com
imagevault.sca.com
storefront.forestproducts.sca.com
login.sca.com
*.sca.com
fpportaltest.sca.com
www.sca.com
internalcrm.sca.com
*.sca.com
*.sca.com
gateway.logistics.sca.com
*.sca.com
imagevault.sca.com
remote.sca.com
integration.sca.com
remote.sca.com
www.sca.com
access.sca.com
fpportal.sca.com
idp.sca.com
*.app.sca.com
www.sca.com
bildarkiv.sca.com
ap1.sca.com
fpsync.sca.com
*.sca.com
test-confluence.sca.com
mail.sca.com
mysite.fpportal.sca.com
*.sca.com
fplcsvc.sca.com
jira.sca.com
fpps.sca.com

Certificate

The complete raw certificate details for passg-svc.forestproducts.sca.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEqG3RVJxD5T6GJJ5k+p
8e+mFkVp7OH1CFT5DQLzaTewv+0seyD+mIceddlwW0aTEd9QUwHB96SHBgX2uE86
kff8ID71qXm+SZmLiU5dgVi3au334GVIsfKpnwbZRI0RqSoX1TQ9/GbQ1Skll8Uz
6wDuVVsVhbOwCw6yevCk72GZ/LPx0h09ge0WwK6awBpB407fTDcrSU4Hwy25USGc
ds2xVFJJLNw/RKaFUZ18sD5I25QU1jgTTsxbRst5x762cu/nz242GHvXQHQXuhOK
3uBMKplIOa/JOUBdvOkT94zZ2p6TuRvNzLwYj27nLStB4PM0hQczHOvqW3dEAPgm
3QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8074299235996057798471714600934995
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Telia Finland Oyj'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Telia Server CA v3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-07 08:16:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-22 08:16:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Sundsvall'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Svenska Cellulosa Aktiebolaget SCA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'passg-svc.forestproducts.sca.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24779458313543875780375511828140146016302053478555503540561095381242851367356772521573760419964560859903507578278008011646497336798973351071030891266782569913807426725878531471675765452635008614465646496990889366542633139633938486062874939988516588697197996877330100255741375450004341776937089632182943978606205380334214801820200574942928160263242183378688482592415408458819552635167937505689972119401475864608122721487289847018448225124257079617128544652252808010985858910214555091320578942156396453821313751356050976263893213748649229343158068139377485411465536297001038189517322983813998120357417599699934403634909
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 46668d0e072316b0ea4f05eb965adea5eec97ea4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3ef1d599cd26222dd87cd57c171cbefd3ac28182
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.trust.telia.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'passg-svc.forestproducts.sca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'passg2-svc.forestproducts.sca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'passg-svc-test.forestproducts.sca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'passg-svc-bck.forestproducts.sca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://httpcrl.trust.telia.com/teliaservercav3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.trust.telia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cps.trust.telia.com/teliaservercav3.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		00246eb6e8d414aa071904b66eabf18cc35270164984c639b2e07199d51f29c5c02df9c1edfd832b05b0911dac9de728e560e87f2ad6089cc5b15afa9cd72e202186de418945c3d06c9b03b73b3964f600321acbc63040877b95a0d694302d274fef0e4db31a7c48506f1807b7c73f6308d323f053bd7e27aad1add10cf01efa5e910fb9ce0d92c28bb9b7ad300dc50d63cd1df10d02c34431184d63fc5811f6eeea2f17edaa80263fc7221c429c66b22513dabb3d3f1e62875c00fd69bfc6518b8b0e27cb2a085858ac448b2cd32e5b9cf2f05c081f496ab621199eca21dbec1c197bcdac5160758eabf8b6e4d11740f21636462f531a5587a8fb7ffe3663262c738e3b88d40a74843fb25c73f518b122c9b15ac48df555595e5451ec73b0857260d137ffa9e82c876a4d2b2b1104608f1e3bf452a269262a2ee89b6279880a211c74276f1fe7e3c4b7aaae749932d6aabd8829d5af41ae1ece2aedf18318778ecc13b03aab845a380320ffca766ce2cd074f818713301d4a0cc0f63e925eee8cf69dc00aa72ea890192cebfa9b9a3c3bc4e7d8ec682b4069205c39c75c45930fcbf5cd89bec53d6aeeda20f101962a7c94a3be50d5911f3db031494a02b2415101806e52ce6e3b025237ad7f797ecde98eedf972643aa0563dd2b795537b794c5f27fb45986a6728fdb628832b3bc8c515cab1c11dc311afb2abae7ed382589b