ap1.sca.com

- Svenska Cellulosa Aktiebolaget SCA -

Issued by TeliaSonera Server CA v2

About this certificate

This digital certificate with serial number 01:64:ad:b5:db:ea:8c:80:dc:8f:97:76:ee:3d:2a was issued on by TeliaSonera.

With 41 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Svenska Cellulosa Aktiebolaget SCA

Organization: Svenska Cellulosa Aktiebolaget SCA
Locality: Sundsvall
Country: SE

TeliaSonera

Organization: TeliaSonera
Country: FI

This certificate has expire since

Certificate Details

Serial Number (hex): 01:64:ad:b5:db:ea:8c:80:dc:8f:97:76:ee:3d:2a
Serial Number (int): 7234300573664120147006361753763114
Serial Number lenght: 113 bits, 15 octets

SubjectKeyId: d2:5c:c4:46:aa:9a:37:ed:33:6e:1d:ef:ea:8e:b3:aa:17:dd:8b:98
AuthorityKeyId: 2f:49:3c:29:4f:d7:07:25:f9:c6:8c:d5:64:f5:66:3d:12:83:22:95

Fingerprint (sha1): 38:24:8d:2d:98:8a:07:df:a3:0f:f0:a4:2d:90:ce:94:d4:c3:eb:c3
Fingerprint (sha256): 93:0f:f3:34:88:44:ea:ac:f6:e3:bf:0a:87:3c:5b:15:35:34:8f:97:8d:1a:cf:1d:16:a7:b9:53:42:29:dd:49

Issuing Certificate URL: http://repository.trust.teliasonera.com/teliasoneraservercav2.cer

Revocation information

OCSP Server: http://ocsp.trust.telia.com
CRL Distribution Point: http://crl-3.trust.teliasonera.com/teliasoneraservercav2.crl

Check the revocation status for certificate ap1.sca.com

41

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ap1.sca.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ap1.sca.com
ap1as00Service.sca.com
app84stage.tenaidentifi.sca.com
app96tenaidentifi.sca.com
aq1.sca.com
aq1as00Service.sca.com
auth-gp1.sca.com
auth-gq1.sca.com
dlogon.sca.com
dsts.sca.com
fasttrack.sca.com
globalmediabank.sca.com
globalmediabankdev.sca.com
globalmediabanktest.sca.com
globalmediabankuat.sca.com
gq1.sca.com
gw-hk.sca.com
gw-se.sca.com
gw-us.sca.com
mapxr.sca.com
ndes1.sca.com
pimservice.sca.com
publicmediabank.sca.com
publicmediabankdev.sca.com
publicmediabanktest.sca.com
publicmediabankuat.sca.com
qapimservice.sca.com
rapp10.sca.com
rapp11.sca.com
rapp12.sca.com
stage.tenaidentifi.sca.com
sts.sca.com
tenaidentifi.sca.com
tenaidentifistage.sca.com
xd1.sca.com
xd2.sca.com
xp1.sca.com
xp2.sca.com
xq1.sca.com
xq2.sca.com
service1.sca.com

Other certificates including the domain name sca.com

(limited to 100 certificates)
fpportaltest.sca.com
mail.sca.com
*.sca.com
extlogin.sca.com
ap1.sca.com
kortportal.sca.com
passg-svc.forestproducts.sca.com
drive.sca.com
mdm.sca.com
fpconnect.sca.com
confluence.sca.com
loginfp.sca.com
loginfp.sca.com
dlogon.sca.com
jira.sca.com
*.sca.com
*.sca.com
extlogin.sca.com
www.sca.com
gateway.logistics.sca.com
remote.sca.com
gw-us.sca.com
login.sca.com
*.app.sca.com
extlogin-test.sca.com
*.sca.com
passwordreset.sca.com
abbgenixostr01.sca.com
storefront.forestproducts.sca.com
passwordreset.sca.com
drive.sca.com
fritid.sca.com
gateway.logistics.sca.com
*.sca.com
guestauth.sca.com
storefront.forestproducts.sca.com
extlogin-test.sca.com
www.sca.com
gw-us.sca.com
imagevault.sca.com
mdmadmin.sca.com
test-bbs.sca.com
fpportal.sca.com
access.scasundsvall.se
fpsams.sca.com
www.sca.com
bbs.sca.com
crmauth.sca.com
mdm.sca.com
*.sca.com
integration.sca.com
idusis.sca.com
mdmadmin.sca.com
*.app.sca.com
integration.sca.com
fritid.sca.com
genai-test.sca.com
*.sca.com
*.app.sca.com
*.app.sca.com
passg-svc.forestproducts.sca.com
imagevault.sca.com
www.sca.com
gw-se.sca.com
mail.sca.com
gw-hk.sca.com
sip.sca.com
imagevault.sca.com
storefront.forestproducts.sca.com
login.sca.com
*.sca.com
fpportaltest.sca.com
www.sca.com
internalcrm.sca.com
*.sca.com
*.sca.com
gateway.logistics.sca.com
*.sca.com
imagevault.sca.com
remote.sca.com
integration.sca.com
remote.sca.com
www.sca.com
access.sca.com
fpportal.sca.com
idp.sca.com
*.app.sca.com
www.sca.com
bildarkiv.sca.com
ap1.sca.com
fpsync.sca.com
*.sca.com
test-confluence.sca.com
mail.sca.com
mysite.fpportal.sca.com
*.sca.com
fplcsvc.sca.com
fpps.sca.com
*.app.sca.com
*.app.sca.com

Certificate

The complete raw certificate details for ap1.sca.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCV1W8Zk64yVqUleHpQM
Qi6+S/oSDdJDcCTGM3ZoZ/tlGVfA4aKfnLWzUFHNmdNCoDMN8GPeU4f7hxMB6VR/
uvXKeBxO64Kwnzk2iHfi/t1SeaIU/dzBSopoAkqo4mqLY6qQw5tpp7xTF8WShp6d
V46CjOS0MJTr3dcTKHEOozprYWdiHqW8U6Fc7Y5eVWkL2T3NedKlzxt32zqWxntP
73+KjNPj6N55uqlH8lSha7j652P+GvfP6qW/QSrH+rgjRADfLQUECNBneS1F5HrF
I8artkLmmneMrOHvmxCWkg3LT2SnJG9k7HCkK8Pwz6/uZwhQIWdjtaaO21GAX1vX
wQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7234300573664120147006361753763114
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'TeliaSonera'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'TeliaSonera Server CA v2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-18 14:05:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-17 14:05:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Sundsvall'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Svenska Cellulosa Aktiebolaget SCA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'ap1.sca.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20216600235643714475712441642275276118319787441289902288500984319212103396507558873328333176581403779578162275210719547559358485024170284480795854924775991028288584887635291949845832206403723055867219177668591824866046986297268319723504534068545216058493719188796821956616980607847613751933465066441109106963009743672199834935005021090692369548588777213958975766430244158324165487564952445301514242533164520360333991268604156070699549337214605000965633524153374981614314840384986531745710128403533513773353496879498879741757009869658210174953980970739345470953815828316459431620851402638093551812268643544747103475649
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 2f493c294fd70725f9c68cd564f5663d12832295
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d25cc446aa9a37ed336e1defea8eb3aa17dd8b98
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (71 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://repository.trust.teliasonera.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (807 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ap1.sca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ap1as00Service.sca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app84stage.tenaidentifi.sca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app96tenaidentifi.sca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aq1.sca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aq1as00Service.sca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth-gp1.sca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth-gq1.sca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dlogon.sca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dsts.sca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fasttrack.sca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalmediabank.sca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalmediabankdev.sca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalmediabanktest.sca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalmediabankuat.sca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gq1.sca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gw-hk.sca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gw-se.sca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gw-us.sca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mapxr.sca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ndes1.sca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pimservice.sca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publicmediabank.sca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publicmediabankdev.sca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publicmediabanktest.sca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publicmediabankuat.sca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qapimservice.sca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rapp10.sca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rapp11.sca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rapp12.sca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.tenaidentifi.sca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sts.sca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tenaidentifi.sca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tenaidentifistage.sca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xd1.sca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xd2.sca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xp1.sca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xp2.sca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xq1.sca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xq2.sca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'service1.sca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (70 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl-3.trust.teliasonera.com/teliasoneraservercav2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (122 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.trust.telia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repository.trust.teliasonera.com/teliasoneraservercav2.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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