remote.sca.com

- Svenska Cellulosa Aktiebolaget SCA -

Issued by TeliaSonera Server CA v2

About this certificate

This digital certificate with serial number 01:62:e3:4c:9d:5a:b0:7e:1f:b1:83:f9:85:5a:fb was issued on by TeliaSonera.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Svenska Cellulosa Aktiebolaget SCA

Organization: Svenska Cellulosa Aktiebolaget SCA
Locality: SDL
Country: SE

TeliaSonera

Organization: TeliaSonera
Country: FI

This certificate has expire since

Certificate Details

Serial Number (hex): 01:62:e3:4c:9d:5a:b0:7e:1f:b1:83:f9:85:5a:fb
Serial Number (int): 7197981503673798135026059336571643
Serial Number lenght: 113 bits, 15 octets

SubjectKeyId: 42:44:a9:17:46:d2:fa:8c:a5:25:24:0d:35:df:e8:66:6c:bd:2b:2b
AuthorityKeyId: 2f:49:3c:29:4f:d7:07:25:f9:c6:8c:d5:64:f5:66:3d:12:83:22:95

Fingerprint (sha1): d1:71:ad:c5:77:92:67:c5:db:43:dc:93:01:e4:3f:e7:a4:65:b2:a9
Fingerprint (sha256): 88:42:3b:18:df:ea:16:12:0d:66:60:68:9d:b6:16:91:5a:5a:5c:3d:c6:9d:81:1b:6e:01:d1:c3:c6:65:ed:e9

Issuing Certificate URL: http://repository.trust.teliasonera.com/teliasoneraservercav2.cer

Revocation information

OCSP Server: http://ocsp.trust.telia.com
CRL Distribution Point: http://crl-3.trust.teliasonera.com/teliasoneraservercav2.crl

Check the revocation status for certificate remote.sca.com

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for remote.sca.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

remote.sca.com
remote2.sca.com
remotetest.sca.com

Other certificates including the domain name sca.com

(limited to 100 certificates)
fpportaltest.sca.com
mail.sca.com
*.sca.com
extlogin.sca.com
ap1.sca.com
kortportal.sca.com
passg-svc.forestproducts.sca.com
drive.sca.com
mdm.sca.com
fpconnect.sca.com
confluence.sca.com
loginfp.sca.com
loginfp.sca.com
dlogon.sca.com
jira.sca.com
*.sca.com
*.sca.com
extlogin.sca.com
www.sca.com
gateway.logistics.sca.com
remote.sca.com
gw-us.sca.com
login.sca.com
*.app.sca.com
extlogin-test.sca.com
*.sca.com
passwordreset.sca.com
abbgenixostr01.sca.com
storefront.forestproducts.sca.com
passwordreset.sca.com
drive.sca.com
fritid.sca.com
gateway.logistics.sca.com
*.sca.com
guestauth.sca.com
storefront.forestproducts.sca.com
extlogin-test.sca.com
www.sca.com
gw-us.sca.com
imagevault.sca.com
mdmadmin.sca.com
test-bbs.sca.com
fpportal.sca.com
access.scasundsvall.se
fpsams.sca.com
www.sca.com
bbs.sca.com
crmauth.sca.com
mdm.sca.com
*.sca.com
integration.sca.com
idusis.sca.com
mdmadmin.sca.com
*.app.sca.com
integration.sca.com
fritid.sca.com
genai-test.sca.com
*.sca.com
*.app.sca.com
*.app.sca.com
passg-svc.forestproducts.sca.com
imagevault.sca.com
www.sca.com
gw-se.sca.com
mail.sca.com
gw-hk.sca.com
sip.sca.com
imagevault.sca.com
storefront.forestproducts.sca.com
login.sca.com
*.sca.com
fpportaltest.sca.com
www.sca.com
internalcrm.sca.com
*.sca.com
*.sca.com
gateway.logistics.sca.com
*.sca.com
imagevault.sca.com
remote.sca.com
integration.sca.com
remote.sca.com
www.sca.com
access.sca.com
fpportal.sca.com
idp.sca.com
*.app.sca.com
www.sca.com
bildarkiv.sca.com
ap1.sca.com
fpsync.sca.com
*.sca.com
test-confluence.sca.com
mail.sca.com
mysite.fpportal.sca.com
*.sca.com
fplcsvc.sca.com
fpps.sca.com
*.app.sca.com
*.app.sca.com

Certificate

The complete raw certificate details for remote.sca.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzW6UYQwf5truXpA87tTI
F4scyw9ksVix9GrlbNIP4OV6y+ImHP3xfaZsk3P5BzanLoFIcVY/LnUH/Q1BVB1f
n3NzM9hBYwzjpMbPxuvW/4+2Py0sgrKz5yfZJYBUfwUezmgUQtg21mTzyauJvLCe
zi6Sc2Vy/tbVyn1SM+RCKZpKmpWs+dwycr8GSWIV4d2d0xXPD2yMGX8QwIAsIesn
ayD+2YjNwJwFy5EtqdUlovoW8lK0nImVcmFjQZkpSavpr86sT7iCdlAW9jAbGpw6
dDg9puMiK5aJIY73Np1lSCFhcMUZJkxrYlc06t8YPlGZ9dLmZKUbvoMv1KiREkBC
KQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7197981503673798135026059336571643
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'TeliaSonera'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'TeliaSonera Server CA v2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-20 13:44:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-19 13:44:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SDL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Svenska Cellulosa Aktiebolaget SCA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'remote.sca.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25933381353991982377168372427821224854499792810692200376239291109937146744675369777164756494130794412172247015490110914546550110804238679215539948640775917609417786831968259482742824458830899959216714175489106718461339106981591643768180962295137931813578952989203903864881349536775619656043372924282743132071781922032821906021870258712812131896298245397813793936395295362153815954429898728793937659223913648265417885465286148713474512414482670184069816444915158675718643629761837339506383381273434214999087389532098841884096422182662372727216883938901973258573762268114395152282834531954882473912414114138553952780841
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 2f493c294fd70725f9c68cd564f5663d12832295
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4244a91746d2fa8ca525240d35dfe8666cbd2b2b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (71 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://repository.trust.teliasonera.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'remote.sca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'remote2.sca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'remotetest.sca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (70 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl-3.trust.teliasonera.com/teliasoneraservercav2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (122 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.trust.telia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repository.trust.teliasonera.com/teliasoneraservercav2.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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