adfs.consolis.com

- Consolis Oy Ab -

Issued by Telia Server CA v3

About this certificate

This digital certificate with serial number 01:8e:3d:44:d7:ab:6a:89:a2:1a:f7:81:38:9a:22 was issued on by Telia Finland Oyj.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Consolis Oy Ab

Organization: Consolis Oy Ab
Locality: NUMMELA
Country: FI

Telia Finland Oyj

Organization: Telia Finland Oyj
Country: FI

This certificate will expire on

Certificate Details

Serial Number (hex): 01:8e:3d:44:d7:ab:6a:89:a2:1a:f7:81:38:9a:22
Serial Number (int): 8077253245875943962895660334225954
Serial Number lenght: 113 bits, 15 octets

SubjectKeyId: 70:20:9f:30:a4:80:44:17:c8:4c:a4:c4:29:4c:ac:2a:72:ee:75:d2
AuthorityKeyId: 46:66:8d:0e:07:23:16:b0:ea:4f:05:eb:96:5a:de:a5:ee:c9:7e:a4

Fingerprint (sha1): 41:a4:4e:53:9d:e6:e9:47:fd:a9:4c:34:9d:e2:c9:94:60:af:06:4f
Fingerprint (sha256): 6f:62:93:3c:36:53:ce:1b:88:2d:8e:38:af:53:25:53:49:3a:cf:fe:7a:12:db:94:17:a6:6c:4c:bd:32:7c:ef

Issuing Certificate URL: http://cps.trust.telia.com/teliaservercav3.cer

Revocation information

OCSP Server: http://ocsp.trust.telia.com
CRL Distribution Point: http://httpcrl.trust.telia.com/teliaservercav3.crl

Check the revocation status for certificate adfs.consolis.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for adfs.consolis.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

adfs.consolis.com

Other certificates including the domain name consolis.com

(limited to 100 certificates)
staging5.ces.consolis.com
consolis.com
email-fr.consolis.com
email.consolis.com
access03.benecontact.com
access-am02.sipfed.oninteroute.com
consolis.com
ces.consolis.com
adfs.consolis.com
consolis.com
lease-dev.consolis.com
consolis.com
access-am02.sipfed.oninteroute.com
access-am02.sipfed.oninteroute.com
access-am02.sipfed.oninteroute.com
consolis.com
xenmobile.consolis.com
ces.consolis.com
e05.vmr.omvideo.se
infocenter.consolis.com
access-am02.sipfed.oninteroute.com
external.consolis.com
access-am02.sipfed.oninteroute.com
www.consolis.com
access-am02.sipfed.oninteroute.com
consolis.com
polaris-dev.consolis.com
consolis.com
consolis.com
access-am02.sipfed.oninteroute.com
access-am02.sipfed.oninteroute.com
access-am02.sipfed.oninteroute.com
www.consolis.com
access03.benecontact.com
adfs.consolis.com
xenmobile.consolis.com
connect.consolis.com
consolis.com
access03.benecontact.com
access03.benecontact.com
adfs.consolis.com
www.consolis.com
access03.benecontact.com
e05.vmr.omvideo.se
ces.consolis.com
access03.benecontact.com
email.consolis.com
connect.consolis.com
sfbaccess.benecontact.com
consolis.com
access03.benecontact.com
www.consolis.com
adfs.consolis.com
e05.vmr.omvideo.se
consolis.com
e05.vmr.omvideo.se
connect.consolis.com
ces.consolis.com
access03.benecontact.com
*.consolis.com
access03.benecontact.com
polaris-dev.consolis.com
polaris.consolis.com
consolis.com
access03.benecontact.com
e05.vmr.omvideo.se
consolis.com
access-am02.sipfed.oninteroute.com
polaris-dev.consolis.com
access03.benecontact.com
www.consolis.com
consolis.com
*.consolis.com
access-am02.sipfed.oninteroute.com
www.consolis.com
access-am02.sipfed.oninteroute.com
consolis.com
e05.vmr.omvideo.se
*.consolis.com
www.consolis.com
www.consolis.com
access03.benecontact.com
polaris.consolis.com
*.consolis.com
access-am02.sipfed.oninteroute.com
e05.vmr.omvideo.se
access03.benecontact.com
consolis.com
consolis.com
polaris.consolis.com
infocenter.consolis.com
infocenter.consolis.com
access03.benecontact.com
access03.benecontact.com
consolis.com
access03.benecontact.com
consolis.com
azvpn.consolis.com
connect.consolis.com
medialibrary.consolis.com

Certificate

The complete raw certificate details for adfs.consolis.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGxDCCBKygAwIBAgIPAY49RNeraomiGveBOJoiMA0GCSqGSIb3DQEBCwUAMEYx
CzAJBgNVBAYTAkZJMRowGAYDVQQKDBFUZWxpYSBGaW5sYW5kIE95ajEbMBkGA1UE
AwwSVGVsaWEgU2VydmVyIENBIHYzMB4XDTI0MDMxNDE0MDE0MVoXDTI1MDMxNDE0
MDE0MVowVDELMAkGA1UEBhMCRkkxEDAOBgNVBAcMB05VTU1FTEExFzAVBgNVBAoM
DkNvbnNvbGlzIE95IEFiMRowGAYDVQQDDBFhZGZzLmNvbnNvbGlzLmNvbTCCAiIw
DQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAM98v0k/gtKHNx2UPm+pyfcuqoM6
heDxWI72Ke+k0eDmNowencQ7FdcQvglB/VvsL4xlRl+Z7WkfiCn2XM72IW7rgNCq
ZwSxAhD337ksk/3IEIGKv0sm3n4wCs+boNHOeNu3aPwoffD0pQxNgmleQ/M+esL5
ci250ae5xPpfibxMn0Lacq08wVDbNmHzRlqRi8As/iVIxgG0sC1WIsS2wJluJzW6
idmBHVecWUNjxl3Gynj9hWQwJU8a1ZC0h7foGYwi3xAP+dmC669+VHjCd+hSxQYn
VMC7HmjmYkdnxSR3uev/iPurVUdrkYaqMNwsCjcb0H88A6TFv0kCirLKopuCacxJ
6gWnVkalvNSNtPRysQDfw/u6u9dnKIDr9YY6u5pDTF3OOX/xE33mHdmB4wiGnaNw
p0XWRCRWzLfF1G+FcsWY40y+AhbyudT0iPjan0oDPfvjhPYA4sU76iMib5E+tCB4
qk5LDb44OIXf8510ViikMN5Kgco9owktIaZ4F/MaxwY/KCbwtOP9CONR1l9xYPfD
3iJPnZ9ZS+gOy1Oi4d4eSbr/s3L84BDl9o0R9gU3hg29/MUrgqUk1Q2wQSF4H0Xb
+x/Kwjz9ce26owc3rDwGzui3n8/U35Odt/RT74KsB33lVCJh2D8h779B/VAnqOO+
SK8tuQ20H58gp3V1AgMBAAGjggGfMIIBmzAfBgNVHSMEGDAWgBRGZo0OByMWsOpP
BeuWWt6l7sl+pDAdBgNVHQ4EFgQUcCCfMKSARBfITKTEKUysKnLuddIwDgYDVR0P
AQH/BAQDAgWgMD0GA1UdIAQ2MDQwMgYGZ4EMAQICMCgwJgYIKwYBBQUHAgEWGmh0
dHA6Ly9jcHMudHJ1c3QudGVsaWEuY29tMBwGA1UdEQQVMBOCEWFkZnMuY29uc29s
aXMuY29tMEMGA1UdHwQ8MDowOKA2oDSGMmh0dHA6Ly9odHRwY3JsLnRydXN0LnRl
bGlhLmNvbS90ZWxpYXNlcnZlcmNhdjMuY3JsMB0GA1UdJQQWMBQGCCsGAQUFBwMC
BggrBgEFBQcDATBzBggrBgEFBQcBAQRnMGUwJwYIKwYBBQUHMAGGG2h0dHA6Ly9v
Y3NwLnRydXN0LnRlbGlhLmNvbTA6BggrBgEFBQcwAoYuaHR0cDovL2Nwcy50cnVz
dC50ZWxpYS5jb20vdGVsaWFzZXJ2ZXJjYXYzLmNlcjATBgorBgEEAdZ5AgQDAQH/
BAIFADANBgkqhkiG9w0BAQsFAAOCAgEApv0/MOLwExsJaU7obvF+uQZJNOE7fiYG
lTK3znxTQC/4w1gg3OUFk6nid1maoGFw5pzhpH4Jddc0B10Kwk0w0lg+aiMZO+It
Q+OdmrSt/YV7e8CQDgWZ3XT6Iksh0JJJgG+Yg4IwFRMmE+r1AA/NoWi5xXGpexVt
DJIqOwnelzj2e96b688mcPao7y1Yvx0BzeI05zTpnlTjFLWh2rchBHKXOB3fAGGA
rckGCoDnMVWyD6RLUYKOWHPHVS88DLviCPH0TjRcfNAvyQjEviJP/NBeu11Bg0N3
ZqILgR9bdPXXvKQfa1w9xGAFCTG7qsLX6V0USnvB+POeMEB8EDC78YirOw2jrgVU
qeFRPL68cgym9jVNEzjgq2x5B99+iV14XAedUaSoL8xhssKQNvy5alHraFGrGb7B
eMEGJpU6jtC9zM57KEhABzGi+RCi3qq9dNULEOLTBli8NO61GboIYH7zxEJma+Ft
oOrsb+0KIPxMewOa1xNxbM4Jz2PD798tXUlP0GyhZ6p2ttiVTLI4SkJ6q2h1j0Mu
rvXCcKCRUsvWv+Sp7gq3OMOImZQNmqIQOVwmDP7i8KznGs3vyorlAq968p3DFMGy
vv4RUBEiJM36Z9oTOnvwaBD4A7xMu+CejgpVH23kvvlmhNJ1VsF7xTXzD9pI+Uey
dZkEw3Jqgcc=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8077253245875943962895660334225954
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Telia Finland Oyj'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Telia Server CA v3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-14 14:01:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-14 14:01:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'NUMMELA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Consolis Oy Ab'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'adfs.consolis.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 846474307318841440767800728639024154059452616604801571146350300385801323459433827888681488814233125781893704368076324137471454130371149506362757061072713044452455376409407738257102140998766414938381365269786964235235387736947907253731195285887029072134154897962931250905126136619044081793034876292947337961180487153503890922035417387664728187674496090476394376415029247877198165929312812519726196335837461704119431767607715062063799067106412972360638783700862446872749408850664583490449003638084109307190781589332915936673532436454610003429677255939273724749376034350573211740983315273716845588177600081378516126304289803377872150556581855260860888123154091190137181985934728456542653470779691933355746280393724336977394546674652158217772659405270304812715142864084068430361377891785137698096952961625917138486815542013935217356064659630322903096182459447744902640509304207895288128436459673112846610792900743924917574373055134978135853609634815380002855227367477311057572826203256599622498590065603723376554465522872824531481990509129674476010380547952917508576007925268068137052539281294236283130834897695061229799854475074806377059853923239320588920330454416994331212708292000434742867726242352259402422690070132193375546935571829
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 46668d0e072316b0ea4f05eb965adea5eec97ea4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							70209f30a4804417c84ca4c4294cac2a72ee75d2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.trust.telia.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adfs.consolis.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://httpcrl.trust.telia.com/teliaservercav3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.trust.telia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cps.trust.telia.com/teliaservercav3.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		00a6fd3f30e2f0131b09694ee86ef17eb9064934e13b7e26069532b7ce7c53402ff8c35820dce50593a9e277599aa06170e69ce1a47e0975d734075d0ac24d30d2583e6a23193be22d43e39d9ab4adfd857b7bc0900e0599dd74fa224b21d09249806f9883823015132613eaf5000fcda168b9c571a97b156d0c922a3b09de9738f67bde9bebcf2670f6a8ef2d58bf1d01cde234e734e99e54e314b5a1dab721047297381ddf006180adc9060a80e73155b20fa44b51828e5873c7552f3c0cbbe208f1f44e345c7cd02fc908c4be224ffcd05ebb5d4183437766a20b811f5b74f5d7bca41f6b5c3dc460050931bbaac2d7e95d144a7bc1f8f39e30407c1030bbf188ab3b0da3ae0554a9e1513cbebc720ca6f6354d1338e0ab6c7907df7e895d785c079d51a4a82fcc61b2c29036fcb96a51eb6851ab19bec178c10626953a8ed0bdccce7b2848400731a2f910a2deaabd74d50b10e2d30658bc34eeb519ba08607ef3c442666be16da0eaec6fed0a20fc4c7b039ad713716cce09cf63c3efdf2d5d494fd06ca167aa76b6d8954cb2384a427aab68758f432eaef5c270a09152cbd6bfe4a9ee0ab738c38899940d9aa210395c260cfee2f0ace71acdefca8ae502af7af29dc314c1b2befe1150112224cdfa67da133a7bf06810f803bc4cbbe09e8e0a551f6de4bef96684d27556c17bc535f30fda48f947b2759904c3726a81c7