test-confluence.sca.com

- Svenska Cellulosa Aktiebolaget SCA -

Issued by TeliaSonera Server CA v2

About this certificate

This digital certificate with serial number 01:70:3a:09:17:a3:c6:e5:49:7f:a1:70:b6:90:8c was issued on by TeliaSonera.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Svenska Cellulosa Aktiebolaget SCA

Organization: Svenska Cellulosa Aktiebolaget SCA
Organization unit: IT
Locality: Sundsvall
Country: SE

TeliaSonera

Organization: TeliaSonera
Country: FI

This certificate has expire since

Certificate Details

Serial Number (hex): 01:70:3a:09:17:a3:c6:e5:49:7f:a1:70:b6:90:8c
Serial Number (int): 7468524781513439004746489567547532
Serial Number lenght: 113 bits, 15 octets

SubjectKeyId: 1c:f7:01:66:60:fa:ab:e0:6d:56:4b:fe:7d:d9:23:b7:e2:e8:6f:0f
AuthorityKeyId: 2f:49:3c:29:4f:d7:07:25:f9:c6:8c:d5:64:f5:66:3d:12:83:22:95

Fingerprint (sha1): 27:ad:3b:56:5f:80:7a:5e:9f:c3:84:54:43:83:6d:10:5d:b0:83:09
Fingerprint (sha256): 99:1f:3c:3b:89:c2:ee:c7:b1:85:a2:0c:a1:3f:4b:9e:a2:ea:ba:51:41:6b:2c:eb:ca:36:8a:bd:28:d3:63:d3

Issuing Certificate URL: http://repository.trust.teliasonera.com/teliasoneraservercav2.cer

Revocation information

OCSP Server: http://ocsp.trust.telia.com
CRL Distribution Point: http://crl-3.trust.teliasonera.com/teliasoneraservercav2.crl

Check the revocation status for certificate test-confluence.sca.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for test-confluence.sca.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

test-confluence.sca.com

Other certificates including the domain name sca.com

(limited to 100 certificates)
fpportaltest.sca.com
mail.sca.com
*.sca.com
extlogin.sca.com
ap1.sca.com
kortportal.sca.com
passg-svc.forestproducts.sca.com
drive.sca.com
mdm.sca.com
fpconnect.sca.com
confluence.sca.com
loginfp.sca.com
loginfp.sca.com
dlogon.sca.com
jira.sca.com
*.sca.com
*.sca.com
extlogin.sca.com
www.sca.com
gateway.logistics.sca.com
remote.sca.com
gw-us.sca.com
login.sca.com
*.app.sca.com
extlogin-test.sca.com
*.sca.com
passwordreset.sca.com
abbgenixostr01.sca.com
storefront.forestproducts.sca.com
passwordreset.sca.com
drive.sca.com
fritid.sca.com
gateway.logistics.sca.com
*.sca.com
guestauth.sca.com
storefront.forestproducts.sca.com
extlogin-test.sca.com
www.sca.com
gw-us.sca.com
imagevault.sca.com
mdmadmin.sca.com
test-bbs.sca.com
fpportal.sca.com
access.scasundsvall.se
fpsams.sca.com
www.sca.com
bbs.sca.com
crmauth.sca.com
mdm.sca.com
*.sca.com
integration.sca.com
idusis.sca.com
mdmadmin.sca.com
*.app.sca.com
integration.sca.com
fritid.sca.com
genai-test.sca.com
*.sca.com
*.app.sca.com
*.app.sca.com
passg-svc.forestproducts.sca.com
imagevault.sca.com
www.sca.com
gw-se.sca.com
mail.sca.com
gw-hk.sca.com
sip.sca.com
imagevault.sca.com
storefront.forestproducts.sca.com
login.sca.com
*.sca.com
fpportaltest.sca.com
www.sca.com
internalcrm.sca.com
*.sca.com
*.sca.com
gateway.logistics.sca.com
*.sca.com
imagevault.sca.com
remote.sca.com
integration.sca.com
remote.sca.com
www.sca.com
access.sca.com
fpportal.sca.com
idp.sca.com
*.app.sca.com
www.sca.com
bildarkiv.sca.com
ap1.sca.com
fpsync.sca.com
*.sca.com
test-confluence.sca.com
mail.sca.com
mysite.fpportal.sca.com
*.sca.com
fplcsvc.sca.com
fpps.sca.com
*.app.sca.com
*.app.sca.com

Certificate

The complete raw certificate details for test-confluence.sca.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz61RrKBeUxkuQ7a2QjaZ
EZgRSRwiFGFgqNxgwhLcnrRgZD/o2nqtEz+WTx/kdFTYYcvyDE37Z72sv838tCiy
iql9M9RaVBvUtN/FrbJ3Y2qWIHCI456QA71dNKdYcfzTbNu2/yKJ2LW0kThLCyEI
ve4Iz8Y9xGzn08D0d05g7yZz/ogYs+l9OR5lOMbQlyL4KKOmCd7/RAuPBX2W5OZf
HX3d3XjeQ0ix+qfpPKOBNxmA983eZtddqNNEuOumpnKapC3tN0FeHARgIDKRp5WC
TC5Wala/hgN1rK+CpXaT2c2ynYsa4Qmy5dCFlBdo4izV+zdfHmMm9+9+4DWCuiW4
oQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7468524781513439004746489567547532
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'TeliaSonera'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'TeliaSonera Server CA v2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-12 15:33:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-11 15:33:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Sundsvall'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Svenska Cellulosa Aktiebolaget SCA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'test-confluence.sca.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26216795932147549815838216457194748037766144712442733411121153653230441030064497025064143131224271181211347053115960599443243046785137330398832751058302599811525104731436531527313884043705392183819695912474301968826866055669826246406962860737813186347979986429891157251794445678251973991751921140258280614820266260304780545540306071850895333662910745990546583814375569836578787357878486535126427476721655116030540508513235836225821531387930783341860602192693464272437794121525393318330270329502458689797891924275690653453318308924793736175987026088583217316026799882915202689405203537632020315358021718280647314094241
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 2f493c294fd70725f9c68cd564f5663d12832295
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1cf7016660faabe06d564bfe7dd923b7e2e86f0f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (71 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://repository.trust.teliasonera.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-confluence.sca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (70 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl-3.trust.teliasonera.com/teliasoneraservercav2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (122 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.trust.telia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repository.trust.teliasonera.com/teliasoneraservercav2.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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