ap1.sca.com
- Svenska Cellulosa Aktiebolaget SCA -
Issued by TeliaSonera Server CA v2
About this certificate
This digital certificate with serial number 01:64:ad:b5:db:ea:8c:80:dc:8f:97:76:ee:3d:2a was issued on by TeliaSonera.
With 41 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Svenska Cellulosa Aktiebolaget SCA
Organization:
Svenska Cellulosa Aktiebolaget SCA
Locality:
Sundsvall
Country: SE
Country: SE
TeliaSonera
Organization:
TeliaSonera
Country:
FI
This certificate has expire since
Certificate Details
Serial Number (hex): 01:64:ad:b5:db:ea:8c:80:dc:8f:97:76:ee:3d:2aSerial Number (int): 7234300573664120147006361753763114
Serial Number lenght: 113 bits, 15 octets
SubjectKeyId: d2:5c:c4:46:aa:9a:37:ed:33:6e:1d:ef:ea:8e:b3:aa:17:dd:8b:98
AuthorityKeyId: 2f:49:3c:29:4f:d7:07:25:f9:c6:8c:d5:64:f5:66:3d:12:83:22:95
Fingerprint (sha1): 38:24:8d:2d:98:8a:07:df:a3:0f:f0:a4:2d:90:ce:94:d4:c3:eb:c3
Fingerprint (sha256): 93:0f:f3:34:88:44:ea:ac:f6:e3:bf:0a:87:3c:5b:15:35:34:8f:97:8d:1a:cf:1d:16:a7:b9:53:42:29:dd:49
Issuing Certificate URL: http://repository.trust.teliasonera.com/teliasoneraservercav2.cer
Revocation information
OCSP Server: http://ocsp.trust.telia.comCRL Distribution Point: http://crl-3.trust.teliasonera.com/teliasoneraservercav2.crl
Check the revocation status for certificate ap1.sca.com
41
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for ap1.sca.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Data Encipherment
Extended Key Usages
Client Authentication
Server Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
ap1.sca.com
ap1as00Service.sca.com
app84stage.tenaidentifi.sca.com
app96tenaidentifi.sca.com
aq1.sca.com
aq1as00Service.sca.com
auth-gp1.sca.com
auth-gq1.sca.com
dlogon.sca.com
dsts.sca.com
fasttrack.sca.com
globalmediabank.sca.com
globalmediabankdev.sca.com
globalmediabanktest.sca.com
globalmediabankuat.sca.com
gq1.sca.com
gw-hk.sca.com
gw-se.sca.com
gw-us.sca.com
mapxr.sca.com
ndes1.sca.com
pimservice.sca.com
publicmediabank.sca.com
publicmediabankdev.sca.com
publicmediabanktest.sca.com
publicmediabankuat.sca.com
qapimservice.sca.com
rapp10.sca.com
rapp11.sca.com
rapp12.sca.com
stage.tenaidentifi.sca.com
sts.sca.com
tenaidentifi.sca.com
tenaidentifistage.sca.com
xd1.sca.com
xd2.sca.com
xp1.sca.com
xp2.sca.com
xq1.sca.com
xq2.sca.com
service1.sca.com
ap1as00Service.sca.com
app84stage.tenaidentifi.sca.com
app96tenaidentifi.sca.com
aq1.sca.com
aq1as00Service.sca.com
auth-gp1.sca.com
auth-gq1.sca.com
dlogon.sca.com
dsts.sca.com
fasttrack.sca.com
globalmediabank.sca.com
globalmediabankdev.sca.com
globalmediabanktest.sca.com
globalmediabankuat.sca.com
gq1.sca.com
gw-hk.sca.com
gw-se.sca.com
gw-us.sca.com
mapxr.sca.com
ndes1.sca.com
pimservice.sca.com
publicmediabank.sca.com
publicmediabankdev.sca.com
publicmediabanktest.sca.com
publicmediabankuat.sca.com
qapimservice.sca.com
rapp10.sca.com
rapp11.sca.com
rapp12.sca.com
stage.tenaidentifi.sca.com
sts.sca.com
tenaidentifi.sca.com
tenaidentifistage.sca.com
xd1.sca.com
xd2.sca.com
xp1.sca.com
xp2.sca.com
xq1.sca.com
xq2.sca.com
service1.sca.com
Other certificates including the domain name sca.com
(limited to 100 certificates)
fpportaltest.sca.com
mail.sca.com
*.sca.com
extlogin.sca.com
ap1.sca.com
kortportal.sca.com
passg-svc.forestproducts.sca.com
drive.sca.com
mdm.sca.com
fpconnect.sca.com
confluence.sca.com
loginfp.sca.com
loginfp.sca.com
dlogon.sca.com
jira.sca.com
*.sca.com
*.sca.com
extlogin.sca.com
www.sca.com
gateway.logistics.sca.com
remote.sca.com
gw-us.sca.com
login.sca.com
*.app.sca.com
extlogin-test.sca.com
*.sca.com
passwordreset.sca.com
abbgenixostr01.sca.com
storefront.forestproducts.sca.com
passwordreset.sca.com
drive.sca.com
fritid.sca.com
gateway.logistics.sca.com
*.sca.com
guestauth.sca.com
storefront.forestproducts.sca.com
extlogin-test.sca.com
www.sca.com
gw-us.sca.com
imagevault.sca.com
mdmadmin.sca.com
test-bbs.sca.com
fpportal.sca.com
access.scasundsvall.se
fpsams.sca.com
www.sca.com
bbs.sca.com
crmauth.sca.com
mdm.sca.com
*.sca.com
integration.sca.com
idusis.sca.com
mdmadmin.sca.com
*.app.sca.com
integration.sca.com
fritid.sca.com
genai-test.sca.com
*.sca.com
*.app.sca.com
*.app.sca.com
passg-svc.forestproducts.sca.com
imagevault.sca.com
www.sca.com
gw-se.sca.com
mail.sca.com
gw-hk.sca.com
sip.sca.com
imagevault.sca.com
storefront.forestproducts.sca.com
login.sca.com
*.sca.com
fpportaltest.sca.com
www.sca.com
internalcrm.sca.com
*.sca.com
*.sca.com
gateway.logistics.sca.com
*.sca.com
imagevault.sca.com
remote.sca.com
integration.sca.com
remote.sca.com
www.sca.com
access.sca.com
fpportal.sca.com
idp.sca.com
*.app.sca.com
www.sca.com
bildarkiv.sca.com
ap1.sca.com
fpsync.sca.com
*.sca.com
test-confluence.sca.com
mail.sca.com
mysite.fpportal.sca.com
*.sca.com
fplcsvc.sca.com
fpps.sca.com
*.app.sca.com
*.app.sca.com
mail.sca.com
*.sca.com
extlogin.sca.com
ap1.sca.com
kortportal.sca.com
passg-svc.forestproducts.sca.com
drive.sca.com
mdm.sca.com
fpconnect.sca.com
confluence.sca.com
loginfp.sca.com
loginfp.sca.com
dlogon.sca.com
jira.sca.com
*.sca.com
*.sca.com
extlogin.sca.com
www.sca.com
gateway.logistics.sca.com
remote.sca.com
gw-us.sca.com
login.sca.com
*.app.sca.com
extlogin-test.sca.com
*.sca.com
passwordreset.sca.com
abbgenixostr01.sca.com
storefront.forestproducts.sca.com
passwordreset.sca.com
drive.sca.com
fritid.sca.com
gateway.logistics.sca.com
*.sca.com
guestauth.sca.com
storefront.forestproducts.sca.com
extlogin-test.sca.com
www.sca.com
gw-us.sca.com
imagevault.sca.com
mdmadmin.sca.com
test-bbs.sca.com
fpportal.sca.com
access.scasundsvall.se
fpsams.sca.com
www.sca.com
bbs.sca.com
crmauth.sca.com
mdm.sca.com
*.sca.com
integration.sca.com
idusis.sca.com
mdmadmin.sca.com
*.app.sca.com
integration.sca.com
fritid.sca.com
genai-test.sca.com
*.sca.com
*.app.sca.com
*.app.sca.com
passg-svc.forestproducts.sca.com
imagevault.sca.com
www.sca.com
gw-se.sca.com
mail.sca.com
gw-hk.sca.com
sip.sca.com
imagevault.sca.com
storefront.forestproducts.sca.com
login.sca.com
*.sca.com
fpportaltest.sca.com
www.sca.com
internalcrm.sca.com
*.sca.com
*.sca.com
gateway.logistics.sca.com
*.sca.com
imagevault.sca.com
remote.sca.com
integration.sca.com
remote.sca.com
www.sca.com
access.sca.com
fpportal.sca.com
idp.sca.com
*.app.sca.com
www.sca.com
bildarkiv.sca.com
ap1.sca.com
fpsync.sca.com
*.sca.com
test-confluence.sca.com
mail.sca.com
mysite.fpportal.sca.com
*.sca.com
fplcsvc.sca.com
fpps.sca.com
*.app.sca.com
*.app.sca.com
Certificate
The complete raw certificate details for ap1.sca.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIJGTCCBwGgAwIBAgIPAWSttdvqjIDcj5d27j0qMA0GCSqGSIb3DQEBCwUAMEYx CzAJBgNVBAYTAkZJMRQwEgYDVQQKDAtUZWxpYVNvbmVyYTEhMB8GA1UEAwwYVGVs aWFTb25lcmEgU2VydmVyIENBIHYyMB4XDTE4MDcxODE0MDUzM1oXDTIwMDcxNzE0 MDUzM1owZDELMAkGA1UEBhMCU0UxEjAQBgNVBAcMCVN1bmRzdmFsbDErMCkGA1UE CgwiU3ZlbnNrYSBDZWxsdWxvc2EgQWt0aWVib2xhZ2V0IFNDQTEUMBIGA1UEAwwL YXAxLnNjYS5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgJXVb xmTrjJWpSV4elAxCLr5L+hIN0kNwJMYzdmhn+2UZV8Dhop+ctbNQUc2Z00KgMw3w Y95Th/uHEwHpVH+69cp4HE7rgrCfOTaId+L+3VJ5ohT93MFKimgCSqjiaotjqpDD m2mnvFMXxZKGnp1XjoKM5LQwlOvd1xMocQ6jOmthZ2IepbxToVztjl5VaQvZPc15 0qXPG3fbOpbGe0/vf4qM0+Po3nm6qUfyVKFruPrnY/4a98/qpb9BKsf6uCNEAN8t BQQI0Gd5LUXkesUjxqu2Quaad4ys4e+bEJaSDctPZKckb2TscKQrw/DPr+5nCFAh Z2O1po7bUYBfW9fBAgMBAAGjggTkMIIE4DAfBgNVHSMEGDAWgBQvSTwpT9cHJfnG jNVk9WY9EoMilTAdBgNVHQ4EFgQU0lzERqqaN+0zbh3v6o6zqhfdi5gwDgYDVR0P AQH/BAQDAgSwME4GA1UdIARHMEUwQwYGZ4EMAQICMDkwNwYIKwYBBQUHAgEWK2h0 dHA6Ly9yZXBvc2l0b3J5LnRydXN0LnRlbGlhc29uZXJhLmNvbS9DUFMwggMwBgNV HREEggMnMIIDI4ILYXAxLnNjYS5jb22CFmFwMWFzMDBTZXJ2aWNlLnNjYS5jb22C H2FwcDg0c3RhZ2UudGVuYWlkZW50aWZpLnNjYS5jb22CGWFwcDk2dGVuYWlkZW50 aWZpLnNjYS5jb22CC2FxMS5zY2EuY29tghZhcTFhczAwU2VydmljZS5zY2EuY29t ghBhdXRoLWdwMS5zY2EuY29tghBhdXRoLWdxMS5zY2EuY29tgg5kbG9nb24uc2Nh LmNvbYIMZHN0cy5zY2EuY29tghFmYXN0dHJhY2suc2NhLmNvbYIXZ2xvYmFsbWVk aWFiYW5rLnNjYS5jb22CGmdsb2JhbG1lZGlhYmFua2Rldi5zY2EuY29tghtnbG9i YWxtZWRpYWJhbmt0ZXN0LnNjYS5jb22CGmdsb2JhbG1lZGlhYmFua3VhdC5zY2Eu Y29tggtncTEuc2NhLmNvbYINZ3ctaGsuc2NhLmNvbYINZ3ctc2Uuc2NhLmNvbYIN Z3ctdXMuc2NhLmNvbYINbWFweHIuc2NhLmNvbYINbmRlczEuc2NhLmNvbYIScGlt c2VydmljZS5zY2EuY29tghdwdWJsaWNtZWRpYWJhbmsuc2NhLmNvbYIacHVibGlj bWVkaWFiYW5rZGV2LnNjYS5jb22CG3B1YmxpY21lZGlhYmFua3Rlc3Quc2NhLmNv bYIacHVibGljbWVkaWFiYW5rdWF0LnNjYS5jb22CFHFhcGltc2VydmljZS5zY2Eu Y29tgg5yYXBwMTAuc2NhLmNvbYIOcmFwcDExLnNjYS5jb22CDnJhcHAxMi5zY2Eu Y29tghpzdGFnZS50ZW5haWRlbnRpZmkuc2NhLmNvbYILc3RzLnNjYS5jb22CFHRl bmFpZGVudGlmaS5zY2EuY29tghl0ZW5haWRlbnRpZmlzdGFnZS5zY2EuY29tggt4 ZDEuc2NhLmNvbYILeGQyLnNjYS5jb22CC3hwMS5zY2EuY29tggt4cDIuc2NhLmNv bYILeHExLnNjYS5jb22CC3hxMi5zY2EuY29tghBzZXJ2aWNlMS5zY2EuY29tME0G A1UdHwRGMEQwQqBAoD6GPGh0dHA6Ly9jcmwtMy50cnVzdC50ZWxpYXNvbmVyYS5j b20vdGVsaWFzb25lcmFzZXJ2ZXJjYXYyLmNybDAdBgNVHSUEFjAUBggrBgEFBQcD AgYIKwYBBQUHAwEwgYYGCCsGAQUFBwEBBHoweDAnBggrBgEFBQcwAYYbaHR0cDov L29jc3AudHJ1c3QudGVsaWEuY29tME0GCCsGAQUFBzAChkFodHRwOi8vcmVwb3Np dG9yeS50cnVzdC50ZWxpYXNvbmVyYS5jb20vdGVsaWFzb25lcmFzZXJ2ZXJjYXYy LmNlcjATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAgEAOXHC m30NCIG3vCSnG+VpcMzuzjaMzc7mtq0hkRub+DklHZ/ViLkSjM/YgvkUqlkoBv2Z PLZan5ZT8lQEf+KGVnHpMjc8EWkOwGCo/TeAej2SrFEnfH4MsNNysSkYB5pc6U9W u2wf0sqmsSWwYVE44qdQbI5DYjg7Qfr+9Op1Bk9QLJAXzJC6En8yWaxxIRT1itju izmel9+IU/yaqmNSNPZdV7EPDXGCV6dZ/0WGa7D+Q2t8yvpI+1tpOqtNTYU9iWC6 R8zSYxQl2Nt3FvEDNpHjJWLx7zpkVdZZcUuMd8VeB15FY5q4tae3FwETGqC/Nx8H tmc742vVWE5FjaVwjVsqC5j2YQteegPEJkdPdpXbK7xx4wHzFVt7jIbeWIMEe599 7g6X/vNlOqPd3SE7qJMnkKC63RYWWelYZM33clCMyoJqHN7LOWkvP03zWff9vsIQ eg0xJqyfJ4unN9II9zeJjfa8GQuG7xHDfRtYcGkL+QsleHWqMHlF8HJ8zBaOB1TN Col8QC/fruGOJIDdWg0VLDZi3Ao+oSTtXU3Wb6peLaWraInT1oW1S2AclRcBPWkE gHg9l8ghMhhVySo+BThdFmAur+/vvyWx7HymdpTnWY7Y0Ga8iONZ7qU9AuFMrx3h MVuDseXVDlKd+3H3wmK3oHAg1K2htJVYygo3MTw= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCV1W8Zk64yVqUleHpQM Qi6+S/oSDdJDcCTGM3ZoZ/tlGVfA4aKfnLWzUFHNmdNCoDMN8GPeU4f7hxMB6VR/ uvXKeBxO64Kwnzk2iHfi/t1SeaIU/dzBSopoAkqo4mqLY6qQw5tpp7xTF8WShp6d V46CjOS0MJTr3dcTKHEOozprYWdiHqW8U6Fc7Y5eVWkL2T3NedKlzxt32zqWxntP 73+KjNPj6N55uqlH8lSha7j652P+GvfP6qW/QSrH+rgjRADfLQUECNBneS1F5HrF I8artkLmmneMrOHvmxCWkg3LT2SnJG9k7HCkK8Pwz6/uZwhQIWdjtaaO21GAX1vX wQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 7234300573664120147006361753763114 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FI' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'TeliaSonera' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'TeliaSonera Server CA v2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-18 14:05:33 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-17 14:05:33 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Sundsvall' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Svenska Cellulosa Aktiebolaget SCA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'ap1.sca.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20216600235643714475712441642275276118319787441289902288500984319212103396507558873328333176581403779578162275210719547559358485024170284480795854924775991028288584887635291949845832206403723055867219177668591824866046986297268319723504534068545216058493719188796821956616980607847613751933465066441109106963009743672199834935005021090692369548588777213958975766430244158324165487564952445301514242533164520360333991268604156070699549337214605000965633524153374981614314840384986531745710128403533513773353496879498879741757009869658210174953980970739345470953815828316459431620851402638093551812268643544747103475649 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 2f493c294fd70725f9c68cd564f5663d12832295 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) d25cc446aa9a37ed336e1defea8eb3aa17dd8b98 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits) 04b0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (71 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://repository.trust.teliasonera.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (807 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ap1.sca.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ap1as00Service.sca.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app84stage.tenaidentifi.sca.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app96tenaidentifi.sca.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aq1.sca.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aq1as00Service.sca.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth-gp1.sca.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth-gq1.sca.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dlogon.sca.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dsts.sca.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fasttrack.sca.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalmediabank.sca.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalmediabankdev.sca.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalmediabanktest.sca.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalmediabankuat.sca.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gq1.sca.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gw-hk.sca.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gw-se.sca.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gw-us.sca.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mapxr.sca.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ndes1.sca.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pimservice.sca.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publicmediabank.sca.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publicmediabankdev.sca.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publicmediabanktest.sca.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publicmediabankuat.sca.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qapimservice.sca.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rapp10.sca.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rapp11.sca.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rapp12.sca.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.tenaidentifi.sca.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sts.sca.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tenaidentifi.sca.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tenaidentifistage.sca.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xd1.sca.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xd2.sca.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xp1.sca.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xp2.sca.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xq1.sca.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xq2.sca.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'service1.sca.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (70 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl-3.trust.teliasonera.com/teliasoneraservercav2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (122 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.trust.telia.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repository.trust.teliasonera.com/teliasoneraservercav2.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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