mail.sca.com

- Svenska Cellulosa Aktiebolaget SCA -

Issued by TeliaSonera Server CA v2

About this certificate

This digital certificate with serial number 01:70:7c:c6:8f:56:8a:5d:b4:be:50:a6:7f:37:42 was issued on by TeliaSonera.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Svenska Cellulosa Aktiebolaget SCA

Organization: Svenska Cellulosa Aktiebolaget SCA
Organization unit: IT Operations
Locality: Sundsvall
Country: SE

TeliaSonera

Organization: TeliaSonera
Country: FI

This certificate has expire since

Certificate Details

Serial Number (hex): 01:70:7c:c6:8f:56:8a:5d:b4:be:50:a6:7f:37:42
Serial Number (int): 7473812477612596245529723754460994
Serial Number lenght: 113 bits, 15 octets

SubjectKeyId: f0:af:4f:73:78:7c:06:f2:bf:6a:e6:b9:d3:78:40:c4:a6:68:de:2f
AuthorityKeyId: 2f:49:3c:29:4f:d7:07:25:f9:c6:8c:d5:64:f5:66:3d:12:83:22:95

Fingerprint (sha1): dd:5c:27:86:97:cd:0d:a2:6e:35:20:12:71:c6:3b:b6:ca:c3:05:80
Fingerprint (sha256): 6b:3e:89:a8:22:a8:19:e4:c7:3e:89:fe:d1:9b:6a:9f:ea:37:68:9d:3e:ef:8d:ae:74:1a:42:0b:22:65:73:2a

Issuing Certificate URL: http://repository.trust.teliasonera.com/teliasoneraservercav2.cer

Revocation information

OCSP Server: http://ocsp.trust.telia.com
CRL Distribution Point: http://crl-3.trust.teliasonera.com/teliasoneraservercav2.crl

Check the revocation status for certificate mail.sca.com

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mail.sca.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mail.sca.com
autodiscover.sca.com
autodiscover.scasundsvall.se
fpsync.sca.com
smtp.sca.com
smtp.forestproducts.sca.com
mail.forestproducts.sca.com

Other certificates including the domain name sca.com

(limited to 100 certificates)
fpportaltest.sca.com
mail.sca.com
*.sca.com
extlogin.sca.com
ap1.sca.com
kortportal.sca.com
passg-svc.forestproducts.sca.com
drive.sca.com
mdm.sca.com
fpconnect.sca.com
confluence.sca.com
loginfp.sca.com
loginfp.sca.com
dlogon.sca.com
jira.sca.com
*.sca.com
*.sca.com
extlogin.sca.com
www.sca.com
gateway.logistics.sca.com
remote.sca.com
gw-us.sca.com
login.sca.com
*.app.sca.com
extlogin-test.sca.com
*.sca.com
passwordreset.sca.com
abbgenixostr01.sca.com
storefront.forestproducts.sca.com
passwordreset.sca.com
drive.sca.com
fritid.sca.com
gateway.logistics.sca.com
*.sca.com
guestauth.sca.com
storefront.forestproducts.sca.com
extlogin-test.sca.com
www.sca.com
gw-us.sca.com
imagevault.sca.com
mdmadmin.sca.com
test-bbs.sca.com
fpportal.sca.com
access.scasundsvall.se
fpsams.sca.com
www.sca.com
bbs.sca.com
crmauth.sca.com
mdm.sca.com
*.sca.com
integration.sca.com
idusis.sca.com
mdmadmin.sca.com
*.app.sca.com
integration.sca.com
fritid.sca.com
genai-test.sca.com
*.sca.com
*.app.sca.com
*.app.sca.com
passg-svc.forestproducts.sca.com
imagevault.sca.com
www.sca.com
gw-se.sca.com
mail.sca.com
gw-hk.sca.com
sip.sca.com
imagevault.sca.com
storefront.forestproducts.sca.com
login.sca.com
*.sca.com
fpportaltest.sca.com
www.sca.com
internalcrm.sca.com
*.sca.com
*.sca.com
gateway.logistics.sca.com
*.sca.com
imagevault.sca.com
remote.sca.com
integration.sca.com
remote.sca.com
www.sca.com
access.sca.com
fpportal.sca.com
idp.sca.com
*.app.sca.com
www.sca.com
bildarkiv.sca.com
ap1.sca.com
fpsync.sca.com
*.sca.com
test-confluence.sca.com
mail.sca.com
mysite.fpportal.sca.com
*.sca.com
fplcsvc.sca.com
fpps.sca.com
*.app.sca.com
*.app.sca.com

Certificate

The complete raw certificate details for mail.sca.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlmjgKwb2ICNYmV/wKuQQ
OtGJJ/UKyUmEHXB3wDGtv3MAhoLDVLj5hZDHUOYGAD5kdBW36fkBpX1jTUmNXOTh
KyHF8KA5zcyKUlmfBiCqvaaRj0Mb0ahnLA6eryXo7rfjtbDhKAXOUiHGSyFs43T0
wAO9SMaX4IKhtXQXO7slfcuhIy2VrjWsJGCU0GOq3BukVuBb4TRckpcWglUU72un
TvY9PzYhu8UuWLEC2NkqxCjvBdYkV6rdlnyvbl6wkqSx1L1R1DTsZ+IL3PcQMO98
nuJoWockhonTiXb0c74adQeeovNHmd4StZawJYWaw5OCDdZ93sTxqPIsZAoGVz8Z
rQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7473812477612596245529723754460994
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'TeliaSonera'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'TeliaSonera Server CA v2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-25 14:35:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-24 14:35:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Sundsvall'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Svenska Cellulosa Aktiebolaget SCA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'IT Operations'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'mail.sca.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18987461858636033872817666467653674048687251706647883627484112442933848133946463889258322484636106414248342040783168513793394268351275507900020835470249116104525389610127416852214331305513671025549299174588372251067850711357389216877138004136262514484228623620805466587748964427322599522736139765506972582604781706679366729725612218268545152793562806530177467247087421146908312685932521754009871996241469849245918893921871130497198334231893126392447600598321989347467848921643053226122196041206151875510564553806928510167594872030460170803035240646170444921283114008522503834025279634072625675876188123422558343076269
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 2f493c294fd70725f9c68cd564f5663d12832295
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f0af4f73787c06f2bf6ae6b9d37840c4a668de2f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (71 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://repository.trust.teliasonera.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (157 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.sca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.sca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.scasundsvall.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fpsync.sca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smtp.sca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smtp.forestproducts.sca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.forestproducts.sca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (70 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl-3.trust.teliasonera.com/teliasoneraservercav2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (122 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.trust.telia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repository.trust.teliasonera.com/teliasoneraservercav2.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		0083f305393982679f35fc6f8e5f344b00b505a26a09aa384b4efe780b8aa8193abb62991bc56aeb17e63693e783eb178474460848404a178142ab2a045df183b10601cd6631ba5839b2d63f1037c8e1a8b95ecf10e37e6429112149366ce95a54cc0d9e65f659299001bf445e73e77d1345ff23ba152594e9115c1ed7d73f4c41c3ba18a652f98018392ab5fa7fb585a7397484c27703f84bdaff5b59eee57325ecc7d6dff838abb6d4f188c9514e6896c4f7f12d319a278db5afd086cbda6acd025ada6be9c4345c1b50d13e6ac4e6c26795e3fedb8fef453bde395cea062f14be9a21d537fb4c0469d10115ef2571b3ab128fd5c401f1c1eabe9e5fef98f40d77a23e4a2c6f40d5e136640d9dd5646af0044582a472afe2e4b750e9e16d8bc01740498e67935a94f9ec7fc5c475b438c3936495368519dd3d6df1140860913205b0c35f77cf74e5afe7dc2f4d34dbb0377337c6161d7b5a54b21b6746d535da8b56b3a5dc9b9d8010928e06b713a7d8bc5cb1368682685d78228d9bd3c18483f3a6202bfcd8dd9528250fdc415aa36aee1923c68f682997aa4a6b23a08bd2690e40af81232164099aadafc6b6f33bfae0b0811e34b8ab8ea3ea140275855cf72423190623a7c2a95a3f9e96eb4493b132dc1f0cd13715b597e14a731ed6b3906d244fc5b413a00d4383e9fce9e45a4826f82efeee67f0362628732edae0a452