*.consolis.com

- Consolis Oy Ab -

Issued by Telia Server CA v3

About this certificate

This digital certificate with serial number 01:8e:bd:58:6b:27:58:f4:d8:37:92:5a:6c:a5:ee was issued on by Telia Finland Oyj.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Consolis Oy Ab

Organization: Consolis Oy Ab
Locality: NUMMELA
Country: FI

Telia Finland Oyj

Organization: Telia Finland Oyj
Country: FI

This certificate will expire on

Certificate Details

Serial Number (hex): 01:8e:bd:58:6b:27:58:f4:d8:37:92:5a:6c:a5:ee
Serial Number (int): 8087400509190301014890599842358766
Serial Number lenght: 113 bits, 15 octets

SubjectKeyId: d9:92:5e:46:b5:0e:51:b0:43:f5:62:e9:8b:eb:01:28:02:93:1f:b8
AuthorityKeyId: 46:66:8d:0e:07:23:16:b0:ea:4f:05:eb:96:5a:de:a5:ee:c9:7e:a4

Fingerprint (sha1): 55:98:3a:e5:02:61:a4:d6:d8:34:a6:56:34:38:56:73:3e:1e:87:89
Fingerprint (sha256): 9b:bd:37:3b:05:be:8b:fe:3e:74:6a:f9:f3:59:f9:7e:e2:c0:ff:87:54:41:50:50:03:4a:bd:0e:ee:91:ab:dc

Issuing Certificate URL: http://cps.trust.telia.com/teliaservercav3.cer

Revocation information

OCSP Server: http://ocsp.trust.telia.com
CRL Distribution Point: http://httpcrl.trust.telia.com/teliaservercav3.crl

Check the revocation status for certificate *.consolis.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.consolis.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.consolis.com
consolis.com

Other certificates including the domain name consolis.com

(limited to 100 certificates)
staging5.ces.consolis.com
consolis.com
email-fr.consolis.com
email.consolis.com
access03.benecontact.com
access-am02.sipfed.oninteroute.com
consolis.com
ces.consolis.com
adfs.consolis.com
consolis.com
lease-dev.consolis.com
consolis.com
access-am02.sipfed.oninteroute.com
access-am02.sipfed.oninteroute.com
access-am02.sipfed.oninteroute.com
consolis.com
xenmobile.consolis.com
ces.consolis.com
e05.vmr.omvideo.se
infocenter.consolis.com
access-am02.sipfed.oninteroute.com
external.consolis.com
access-am02.sipfed.oninteroute.com
www.consolis.com
access-am02.sipfed.oninteroute.com
consolis.com
polaris-dev.consolis.com
consolis.com
consolis.com
access-am02.sipfed.oninteroute.com
access-am02.sipfed.oninteroute.com
access-am02.sipfed.oninteroute.com
www.consolis.com
access03.benecontact.com
adfs.consolis.com
xenmobile.consolis.com
connect.consolis.com
consolis.com
access03.benecontact.com
access03.benecontact.com
adfs.consolis.com
www.consolis.com
access03.benecontact.com
e05.vmr.omvideo.se
ces.consolis.com
access03.benecontact.com
email.consolis.com
connect.consolis.com
sfbaccess.benecontact.com
consolis.com
access03.benecontact.com
www.consolis.com
adfs.consolis.com
e05.vmr.omvideo.se
consolis.com
e05.vmr.omvideo.se
connect.consolis.com
ces.consolis.com
access03.benecontact.com
*.consolis.com
access03.benecontact.com
polaris-dev.consolis.com
polaris.consolis.com
consolis.com
access03.benecontact.com
e05.vmr.omvideo.se
consolis.com
access-am02.sipfed.oninteroute.com
polaris-dev.consolis.com
access03.benecontact.com
www.consolis.com
consolis.com
*.consolis.com
access-am02.sipfed.oninteroute.com
www.consolis.com
access-am02.sipfed.oninteroute.com
consolis.com
e05.vmr.omvideo.se
*.consolis.com
www.consolis.com
www.consolis.com
access03.benecontact.com
polaris.consolis.com
*.consolis.com
access-am02.sipfed.oninteroute.com
e05.vmr.omvideo.se
access03.benecontact.com
consolis.com
consolis.com
polaris.consolis.com
infocenter.consolis.com
infocenter.consolis.com
access03.benecontact.com
access03.benecontact.com
consolis.com
access03.benecontact.com
consolis.com
azvpn.consolis.com
connect.consolis.com
medialibrary.consolis.com

Certificate

The complete raw certificate details for *.consolis.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAloa0xkZLt7sWZOrODaVH
LIhZ3VRV7Y7jCAYOu6iUAkwVv+v7Ba1+hHq/s7asJx1SHm47rpTHSaz3TR3SHRG5
0wlSgFjD5twG7TWKipkceqzHdg1kX+4zHhE1+2TKfpCx/QSgXAHj8B8rRjXCTnTP
CbsQasevYhMEAxVIakvw2JsLQcNbHKOYTaH4+gnx9uRUsbMijaceuBAFibZc8I/l
qpFkcEC26Zm3ocMyUecB0kskhnwk20fIqw9ZsPpQhZuaCs5lSa3UYbc6M1yoWPU3
UfzUsBQEiQVeK39KgqnNhVfWoz62X1gZKDFchOWTAT+y5u8HZNB3HlwPA9puN/pw
HwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8087400509190301014890599842358766
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Telia Finland Oyj'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Telia Server CA v3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-08 10:54:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-04-08 10:54:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'NUMMELA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Consolis Oy Ab'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.consolis.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19002171823419769732692801450311589108952623204725772738691588229306960939442009637186733913472873711142248905355547080520492166927130956117071772558062008735398108136399444771901842098214380945740587479767271842465347814651504252166766469299726620555320425309304931846516684659130073996692863594686972132570267774189107248599977122635469869138657467391038689757417985030584687305317628005688001769162019565080617842660939516937692148130673296746626266451840624334194449527385092004692381349831023356635823241503458421093644929567113331607844210381582481976538302211015927532690394439079330331678011444963389747130399
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 46668d0e072316b0ea4f05eb965adea5eec97ea4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d9925e46b50e51b043f562e98beb012802931fb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.trust.telia.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.consolis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consolis.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://httpcrl.trust.telia.com/teliaservercav3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.trust.telia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cps.trust.telia.com/teliaservercav3.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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