vpn.metria.se

- Metria AB -

Issued by TeliaSonera Gateway CA v1

About this certificate

This digital certificate with serial number 33:99:60:18:26:a4:4d:ad:94:f7:10:e5:b8:8e:bd:d1 was issued on by TeliaSonera.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Metria AB

Organization: Metria AB
Organization unit: Telia Secure Remote User
State / Province: Norrbotten
Locality: Lulea
Country: SE

TeliaSonera

Organization: TeliaSonera

This certificate has expire since

Certificate Details

Serial Number (hex): 33:99:60:18:26:a4:4d:ad:94:f7:10:e5:b8:8e:bd:d1
Serial Number (int): 68586998229143450079832011520164675025
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 6e:e7:92:e1:07:6b:6a:25:f2:61:94:2a:65:1d:a9:3f:ab:7a:57:dd
AuthorityKeyId: 8f:59:95:28:26:a2:b0:6d:19:49:99:d2:fb:b0:84:47:4d:cb:95:fc

Fingerprint (sha1): 44:45:29:b7:ce:42:5d:eb:09:88:ae:98:61:9f:27:8a:16:1b:73:df
Fingerprint (sha256): a7:3b:39:87:40:80:4d:cf:0f:c9:ee:16:4a:e1:8c:32:23:ba:73:66:d7:60:54:f0:d9:55:9d:ee:e9:17:1d:ac

Issuing Certificate URL: http://repository.trust.teliasonera.com/teliasoneragatewaycav1.cer

Revocation information

OCSP Server: http://ocsp.trust.teliasonera.com
CRL Distribution Point: http://crl-3.trust.teliasonera.com/teliasoneragatewaycav1.crl
CRL Distribution Point: ldap://crl-1.trust.teliasonera.com/cn=TeliaSonera%20Gateway%20CA%20v1,o=TeliaSonera?certificaterevocationlist;binary

Check the revocation status for certificate vpn.metria.se

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for vpn.metria.se

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

vpn.metria.se

Other certificates including the domain name metria.se

(limited to 100 certificates)
vpn.metria.se
sip.metria.se
*.metria.se
fastighetsok.metria.se
www.metria.org
vpn.metria.se
metria.se
metria.se
metria.se
*.metria.se
metria.se
metria.se
metria.se
vpn.metria.se
sip.metria.se
*.metria.se
mail.metria.se
metria.se
metria.se
chat.metria.se
www.metria.org
*.metria.se
metria.se
chat.metria.se
www.metria.org
*.metria.se
metria.se
vpn.metria.se
metria.se
metria.se
fastighetsok.metria.se
metria.se
*.metria.se
fastighetsok.metria.se
fastighetsok.metria.se
*.metria.se
vpn.metria.se
vpn.metria.se
vpn.metria.se
*.metria.se
*.metria.se
*.metria.se
fastighetsok.metria.se
vpn.metria.se
*.metria.se
chat.metria.se
metria.se
metria.se
butiken.metria.se
vpn.metria.se
*.metria.se
metria.se
metria.se
www.metria.org
metria.se
metria.se
*.metria.se
vpn.metria.se
metria.se

Certificate

The complete raw certificate details for vpn.metria.se in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKln2rryOw/frAIIFL8i
wEfkd8VKhd2z2uGWZv2AbQgzoHTYys5+uWC6zICDLsPhIyXd4h+XaVLhsYa52jZg
e81/A5fDJ2Tvi24izg8AlsNn4YVcbeSZ8YJTBlAHGjm07o5FlIdXpHw0K0aSiQ9O
O9AW3csiMFmXwk0TZAuqxAEFsjcN2fN9XVvjnIGTHrzGA9NtjBVrJwd6sARCSN8v
V9Wj3pQjPUBG6jC+KQqxfz3nG7l7MmHN7i2HxAzzBe/EesLKd71OFMfuxzvew5OS
XVOZDkIgRB5tniBt5piz/+qGCG62SroVWXS9aN6NogEEFt2mIhG0kZrMdE7H9DF5
aQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 68586998229143450079832011520164675025
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'TeliaSonera'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'TeliaSonera Gateway CA v1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-04-14 08:48:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-04-13 08:48:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Norrbotten'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Lulea'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Metria AB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Telia Secure Remote User'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'vpn.metria.se'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23816338388541103463034226253206380451053844123729865454803105804196120950129952564803746986995830586534330599097723580935914168569925178836132634114743423873802030927435870844786787924246469490732982927312415741326802641208784365795940119887291099296818563667336390441297846354799479919146752230653662585456753642200347748303517164506455378918157951478895035729864649508846858774723460210703913514345490921682046599227643528195067977704822383262120622792140294104777540505680162030744458150260929637208208310464688618639439664457658438485223239884177016767321231561127188072092082853841635696487296677130406837975401
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.trust.teliasonera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repository.trust.teliasonera.com/teliasoneragatewaycav1.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8f59952826a2b06d194999d2fbb084474dcb95fc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.271.2.3.1.1.16
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (196 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl-3.trust.teliasonera.com/teliasoneragatewaycav1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://crl-1.trust.teliasonera.com/cn=TeliaSonera%20Gateway%20CA%20v1,o=TeliaSonera?certificaterevocationlist;binary'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpn.metria.se'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6ee792e1076b6a25f261942a651da93fab7a57dd
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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