TeliaSonera Root CA v1 OCSP Responder
- TeliaSonera -
Issued by TeliaSonera Root CA v1
About this certificate
This digital certificate with serial number 01:82:f3:08:4c:73:f8:c7:9f:e3:be:28:b1:2c:cd was issued on by TeliaSonera.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- KeyUsage [DigitalSignature KeyEncipherment] (00000101) inconsistent with ExtKeyUsage ocspSigning The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
- Certificate had 0 embedded SCTs. Browser policy may require 4 for this certificate. Check if certificate has enough embedded SCTs to meet Apple CT Policy (https://support.apple.com/en-us/HT205280)
TeliaSonera
Organization:
TeliaSonera
TeliaSonera
Organization:
TeliaSonera
This certificate will expire on
Certificate Details
Serial Number (hex): 01:82:f3:08:4c:73:f8:c7:9f:e3:be:28:b1:2c:cdSerial Number (int): 7848265118806613201677667131272397
Serial Number lenght: 113 bits, 15 octets
SubjectKeyId: e6:76:85:98:e0:6c:a5:37:0b:c8:3b:ee:d5:74:b1:8d:3b:2a:cb:3c
AuthorityKeyId: f0:8f:59:38:00:b3:f5:8f:9a:96:0c:d5:eb:fa:7b:aa:17:e8:13:12
Fingerprint (sha1): 0b:79:5a:60:cd:cd:8e:b4:cf:98:bd:73:ca:ea:99:88:ff:a0:7d:b8
Fingerprint (sha256): c1:2c:3c:1b:a3:54:1d:3c:0b:1c:4d:17:48:5e:c5:b8:4a:e9:55:3e:ca:6a:5d:9e:b4:b9:a6:d1:dc:1a:1d:e8
Revocation information
Check the revocation status for certificate TeliaSonera Root CA v1 OCSP Responder
0
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for TeliaSonera Root CA v1 OCSP Responder
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
OCSP Signing
Extensions
5 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
This certificate doesn't contain any subject alternative names.
Other certificates including the domain name
(limited to 100 certificates)
Certificate
The complete raw certificate details for TeliaSonera Root CA v1 OCSP Responder in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEgTCCAmmgAwIBAgIPAYLzCExz+Mef474osSzNMA0GCSqGSIb3DQEBCwUAMDcx FDASBgNVBAoMC1RlbGlhU29uZXJhMR8wHQYDVQQDDBZUZWxpYVNvbmVyYSBSb290 IENBIHYxMB4XDTIyMDgzMTA4MzI0OVoXDTI1MDgzMDA4MzI0OVowRjEUMBIGA1UE CgwLVGVsaWFTb25lcmExLjAsBgNVBAMMJVRlbGlhU29uZXJhIFJvb3QgQ0EgdjEg T0NTUCBSZXNwb25kZXIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDf JEROwZacss7F0CkueaS4yR7RMl088Pr6Vu/VlsWRXh42S/TGl8Y/GHfLyTqMFsDi QSdAjpUeGn8DQaMdPa3eouyMKUwRNfjizRn/e97LvA9rpBwxMd8HSgVI746NDt2H Fzueuj8432TIT//JXmeTPE+o23mccNHusbIWkJFd8c1F3wFCgxWmms2kce4dvmAV imJLIJhO8SuEFPnDsUzmRyG7XUO9bnjznWSM+noqSL/kaHuWtGk1VndXvQOUoKIZ /T/bvCSCpGT3gNscCD/LHZiMO6nGRpQTPJwxdKAG++9slsQUJRliDtQnNBB14443 zHYy2WrAn8MvTyAVupudAgMBAAGjezB5MB8GA1UdIwQYMBaAFPCPWTgAs/WPmpYM 1ev6e6oX6BMSMB0GA1UdDgQWBBTmdoWY4GylNwvIO+7VdLGNOyrLPDAOBgNVHQ8B Af8EBAMCBaAwFgYDVR0lAQH/BAwwCgYIKwYBBQUHAwkwDwYJKwYBBQUHMAEFBAIF ADANBgkqhkiG9w0BAQsFAAOCAgEAaMfTCK7ipMhgGBxslUIT3dxe/79/bJHKhkmq d4hGGKhlWLhNJc9jo42Ff9T8Jzb6FeD3f8bZ0nInKVy0FOUgYd1azMydKbIF49HT muQjDK0DWRM4t8XT+y3ubw+nzwX30W1L8co/J2w8yFJajdmzV5I+bpjsA40Hh+97 ofKLTnSBBVuS1kv8JSseT4guDXUftZLr9CVSRn0edxzgvG6GNvlFc8UVqvAc1m86 MhmtvxsH9jmVs8jg1cT0TdfWYxtGK3S4KH51BbNwsi38NbF7RaS+b1Sx/Y3A+hpT H3XbrMNYIyW7nVtp5a5hXxwKrRwRASQXJwQymqe4OCekJIkv6lcR7Eg34e6Yhpin gGoWawKbe56Z34LWwvJGQqookZRhU5c2N9mq+K5ydRH4b5ZILzmpHztOoqB7nQ3D bErUqtEZUNjwHg/VGQoVialZAivFuql+18wEcJzLV0UxMS+38Ulm9oEJEkBbt5eU tM8qWR52Grs3LFLuZqS3hXr7LhMUGNg6BASmTSxNYL6Nn49qBFff8F/Hzujb9TdK GH29Nq30z9ClZo+Yv70uZbaKM76g7M8d9J74TnfJt1++uTsnYYactXIWYEUQsaEa Tj41+QWcBWOC268Dla7gZUEkf6UeumMRhUax1VOiGYYZbiv4exNsqU0FZwsKLrX8 pNupZqs= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3yRETsGWnLLOxdApLnmk uMke0TJdPPD6+lbv1ZbFkV4eNkv0xpfGPxh3y8k6jBbA4kEnQI6VHhp/A0GjHT2t 3qLsjClMETX44s0Z/3vey7wPa6QcMTHfB0oFSO+OjQ7dhxc7nro/ON9kyE//yV5n kzxPqNt5nHDR7rGyFpCRXfHNRd8BQoMVpprNpHHuHb5gFYpiSyCYTvErhBT5w7FM 5kchu11DvW54851kjPp6Kki/5Gh7lrRpNVZ3V70DlKCiGf0/27wkgqRk94DbHAg/ yx2YjDupxkaUEzycMXSgBvvvbJbEFCUZYg7UJzQQdeOON8x2MtlqwJ/DL08gFbqb nQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 7848265118806613201677667131272397 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'TeliaSonera' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'TeliaSonera Root CA v1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-31 08:32:49 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-08-30 08:32:49 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'TeliaSonera' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'TeliaSonera Root CA v1 OCSP Responder' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28169025846228630206734626222350166370501546595552595392729687787504158711425885922810216195182739057076158805241060645834761513591051482259646702188748007298810044526932145722097067914277896054447106567959229446919100206886800261216059533803646648150228974603999429625467142518836475166667765194414909231138232527700885773456372040595774395759253088238857096104350479514845561149618030759053673126858778600240803436036771920597568545511811340136975911146625390557467757727729580126075917738528323809849434162428674940886925280495192924018249123101601652591374794039696761218125905264340308878318722881820304760019869 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f08f593800b3f58f9a960cd5ebfa7baa17e81312 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) e6768598e06ca5370bc83beed574b18d3b2acb3c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.9 (ocspSigning) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1.5 (ocspNoCheck) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 0068c7d308aee2a4c860181c6c954213dddc5effbf7f6c91ca8649aa77884618a86558b84d25cf63a38d857fd4fc2736fa15e0f77fc6d9d27227295cb414e52061dd5acccc9d29b205e3d1d39ae4230cad03591338b7c5d3fb2dee6f0fa7cf05f7d16d4bf1ca3f276c3cc8525a8dd9b357923e6e98ec038d0787ef7ba1f28b4e7481055b92d64bfc252b1e4f882e0d751fb592ebf42552467d1e771ce0bc6e8636f94573c515aaf01cd66f3a3219adbf1b07f63995b3c8e0d5c4f44dd7d6631b462b74b8287e7505b370b22dfc35b17b45a4be6f54b1fd8dc0fa1a531f75dbacc3582325bb9d5b69e5ae615f1c0aad1c110124172704329aa7b83827a424892fea5711ec4837e1ee988698a7806a166b029b7b9e99df82d6c2f24642aa2891946153973637d9aaf8ae727511f86f96482f39a91f3b4ea2a07b9d0dc36c4ad4aad11950d8f01e0fd5190a1589a959022bc5baa97ed7cc04709ccb574531312fb7f14966f6810912405bb79794b4cf2a591e761abb372c52ee66a4b7857afb2e131418d83a0404a64d2c4d60be8d9f8f6a0457dff05fc7cee8dbf5374a187dbd36adf4cfd0a5668f98bfbd2e65b68a33bea0eccf1df49ef84e77c9b75fbeb93b2761869cb57216604510b1a11a4e3e35f9059c056382dbaf0395aee06541247fa51eba63118546b1d553a21986196e2bf87b136ca94d05670b0a2eb5fca4dba966ab