TeliaSonera Root CA v1 OCSP Responder

- TeliaSonera -

Issued by TeliaSonera Root CA v1

About this certificate

This digital certificate with serial number 01:82:f3:08:4c:73:f8:c7:9f:e3:be:28:b1:2c:cd was issued on by TeliaSonera.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DigitalSignature KeyEncipherment] (00000101) inconsistent with ExtKeyUsage ocspSigning The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Certificate had 0 embedded SCTs. Browser policy may require 4 for this certificate. Check if certificate has enough embedded SCTs to meet Apple CT Policy (https://support.apple.com/en-us/HT205280)

TeliaSonera

Organization: TeliaSonera

TeliaSonera

Organization: TeliaSonera

This certificate will expire on

Certificate Details

Serial Number (hex): 01:82:f3:08:4c:73:f8:c7:9f:e3:be:28:b1:2c:cd
Serial Number (int): 7848265118806613201677667131272397
Serial Number lenght: 113 bits, 15 octets

SubjectKeyId: e6:76:85:98:e0:6c:a5:37:0b:c8:3b:ee:d5:74:b1:8d:3b:2a:cb:3c
AuthorityKeyId: f0:8f:59:38:00:b3:f5:8f:9a:96:0c:d5:eb:fa:7b:aa:17:e8:13:12

Fingerprint (sha1): 0b:79:5a:60:cd:cd:8e:b4:cf:98:bd:73:ca:ea:99:88:ff:a0:7d:b8
Fingerprint (sha256): c1:2c:3c:1b:a3:54:1d:3c:0b:1c:4d:17:48:5e:c5:b8:4a:e9:55:3e:ca:6a:5d:9e:b4:b9:a6:d1:dc:1a:1d:e8


Revocation information


Check the revocation status for certificate TeliaSonera Root CA v1 OCSP Responder

0

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for TeliaSonera Root CA v1 OCSP Responder

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

OCSP Signing

Extensions

5 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any subject alternative names.

Other certificates including the domain name

(limited to 100 certificates)

Certificate

The complete raw certificate details for TeliaSonera Root CA v1 OCSP Responder in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3yRETsGWnLLOxdApLnmk
uMke0TJdPPD6+lbv1ZbFkV4eNkv0xpfGPxh3y8k6jBbA4kEnQI6VHhp/A0GjHT2t
3qLsjClMETX44s0Z/3vey7wPa6QcMTHfB0oFSO+OjQ7dhxc7nro/ON9kyE//yV5n
kzxPqNt5nHDR7rGyFpCRXfHNRd8BQoMVpprNpHHuHb5gFYpiSyCYTvErhBT5w7FM
5kchu11DvW54851kjPp6Kki/5Gh7lrRpNVZ3V70DlKCiGf0/27wkgqRk94DbHAg/
yx2YjDupxkaUEzycMXSgBvvvbJbEFCUZYg7UJzQQdeOON8x2MtlqwJ/DL08gFbqb
nQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7848265118806613201677667131272397
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'TeliaSonera'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'TeliaSonera Root CA v1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-31 08:32:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-08-30 08:32:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'TeliaSonera'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'TeliaSonera Root CA v1 OCSP Responder'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28169025846228630206734626222350166370501546595552595392729687787504158711425885922810216195182739057076158805241060645834761513591051482259646702188748007298810044526932145722097067914277896054447106567959229446919100206886800261216059533803646648150228974603999429625467142518836475166667765194414909231138232527700885773456372040595774395759253088238857096104350479514845561149618030759053673126858778600240803436036771920597568545511811340136975911146625390557467757727729580126075917738528323809849434162428674940886925280495192924018249123101601652591374794039696761218125905264340308878318722881820304760019869
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f08f593800b3f58f9a960cd5ebfa7baa17e81312
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e6768598e06ca5370bc83beed574b18d3b2acb3c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.9 (ocspSigning)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1.5 (ocspNoCheck)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		0068c7d308aee2a4c860181c6c954213dddc5effbf7f6c91ca8649aa77884618a86558b84d25cf63a38d857fd4fc2736fa15e0f77fc6d9d27227295cb414e52061dd5acccc9d29b205e3d1d39ae4230cad03591338b7c5d3fb2dee6f0fa7cf05f7d16d4bf1ca3f276c3cc8525a8dd9b357923e6e98ec038d0787ef7ba1f28b4e7481055b92d64bfc252b1e4f882e0d751fb592ebf42552467d1e771ce0bc6e8636f94573c515aaf01cd66f3a3219adbf1b07f63995b3c8e0d5c4f44dd7d6631b462b74b8287e7505b370b22dfc35b17b45a4be6f54b1fd8dc0fa1a531f75dbacc3582325bb9d5b69e5ae615f1c0aad1c110124172704329aa7b83827a424892fea5711ec4837e1ee988698a7806a166b029b7b9e99df82d6c2f24642aa2891946153973637d9aaf8ae727511f86f96482f39a91f3b4ea2a07b9d0dc36c4ad4aad11950d8f01e0fd5190a1589a959022bc5baa97ed7cc04709ccb574531312fb7f14966f6810912405bb79794b4cf2a591e761abb372c52ee66a4b7857afb2e131418d83a0404a64d2c4d60be8d9f8f6a0457dff05fc7cee8dbf5374a187dbd36adf4cfd0a5668f98bfbd2e65b68a33bea0eccf1df49ef84e77c9b75fbeb93b2761869cb57216604510b1a11a4e3e35f9059c056382dbaf0395aee06541247fa51eba63118546b1d553a21986196e2bf87b136ca94d05670b0a2eb5fca4dba966ab