aineistopankki.hel.fi

- City of Helsinki -

Issued by Telia Server CA v3

About this certificate

This digital certificate with serial number 01:8d:83:1f:34:2f:d3:97:63:48:bf:9c:f2:5b:0d was issued on by Telia Finland Oyj.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

City of Helsinki

Organization: City of Helsinki
Locality: HELSINKI
Country: FI

Telia Finland Oyj

Organization: Telia Finland Oyj
Country: FI

This certificate will expire on

Certificate Details

Serial Number (hex): 01:8d:83:1f:34:2f:d3:97:63:48:bf:9c:f2:5b:0d
Serial Number (int): 8062505159064383264526796841966349
Serial Number lenght: 113 bits, 15 octets

SubjectKeyId: b3:37:39:04:73:ee:c1:fe:d0:6b:4b:92:e6:6c:fd:0a:62:38:48:88
AuthorityKeyId: 46:66:8d:0e:07:23:16:b0:ea:4f:05:eb:96:5a:de:a5:ee:c9:7e:a4

Fingerprint (sha1): b9:dc:9d:0c:fd:29:84:5c:bb:36:ee:31:eb:f0:2f:ef:e6:b1:79:9b
Fingerprint (sha256): 01:60:a3:a3:fd:6a:92:ce:8d:50:cd:dc:4b:90:91:31:bc:bc:ea:b5:fc:4c:0e:f1:78:7a:35:57:5c:bf:e7:f8

Issuing Certificate URL: http://cps.trust.telia.com/teliaservercav3.cer

Revocation information

OCSP Server: http://ocsp.trust.telia.com
CRL Distribution Point: http://httpcrl.trust.telia.com/teliaservercav3.crl

Check the revocation status for certificate aineistopankki.hel.fi

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aineistopankki.hel.fi

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aineistopankki.hel.fi

Other certificates including the domain name hel.fi

(limited to 100 certificates)
liikuntakauppa.hel.fi
digi.hel.fi
shared2.anders.fi
aineistopankki.hel.fi
www.kasarmitorinkesa.hel.fi
*.edu.hel.fi
koulurekisteri.hel.fi
*.movendosplatform.com
numerot.hel.fi
dev.hel.fi
misi.hel.fi
kehmet.hel.fi
tilanvaraus.edu.hel.fi
muistopaikat1918.hel.fi
linkedevents.hel.fi
ohjaamo.hel.fi
varaamo.hel.fi
digineuvonta.hel.fi
palvelukeskus.crm.hel.fi
kerrokantasi.hel.fi
securemail2.hel.fi
tyoterveys.ajanvaraus.hel.fi
toimintaymparisto.hel.fi
api.hel.fi
kerrokantasi.hel.fi
beeblebrox.edu.hel.fi
shared2.anders.fi
keskustelu.hel.fi
omastadi.hel.fi
aromi.hel.fi
salasana.hel.fi
huonevaraus.hel.ninja
linkedevents.hel.fi
pohjavesi.hel.fi
opehuone.edu.hel.fi
opehuone.fi
uutiskirjeet.hel.fi
varaamo.hel.fi
webmail.ish.edu.hel.fi
digi.hel.fi
helluntaiseurakunta.fi
osallistu.hel.fi
ideapaahtimo.osallistu.hel.fi
*.movendosplatform.com
kruunusillat.hel.fi
helvi.hel.fi
shared2.anders.fi
tcm.hel.fi
huonevaraus.hel.ninja
omastadi.hel.fi
newsletter-newcohelsinki.hel.fi
finalsite.net
numerot.helmi.hel.fi
kaupunkitilaohje.hel.fi
koulurekisteri.hel.fi
linkedevents.hel.fi
tunnistus.hel.fi
*.lib.hel.fi
*.movendosplatform.com
kerrokantasi.hel.fi
koulurekisteri.hel.fi
shared2.anders.fi
uutiskirjeet.hel.fi
www.att.hel.fi
nextlevel.hel.fi
nextlevel.hel.fi
numerot.helmi.hel.fi
geoserver.hel.fi
linkedevents.hel.fi
www.hel.fi
eterveys.hel.fi
ohjaamo.hel.fi
palvelukartta.hel.fi
linkedevents.hel.fi
webcal.edu.hel.fi
api.hel.fi
www.influenssarokotus.hel.fi
geoserver.hel.fi
palvelukeskustest.crm.hel.fi
sts.hel.fi
servicekarta.hel.fi
turvalomake.hel.fi
sip.hel.fi
palvelukartta.hel.fi
winhawiivi.edu.hel.fi
digi.hel.fi
helluntaiseurakunta.fi
brand.hel.fi
numerot.hel.fi
uutiskirjeet.hel.fi
misi.hel.fi
palvelukartta.hel.fi
numerot.helmi.hel.fi
www.kruunusillat.fi
dev.hel.fi
beeblebrox.edu.hel.fi
nextlevel.hel.fi
palvelukeskustest.hel.fi
tilajakehitys.hel.fi
*.movendosplatform.com

Certificate

The complete raw certificate details for aineistopankki.hel.fi in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqC22B+nSwTUv05AFsazN
tA0KRS86xAkONe69kl8U4udW/UDiAKm0oet5S5J4GxiaaqsgodVbzX7sXA2i/Gtc
CwRMqKL6ccf9+LejlnONVclkEzN1GFrDwoTWRlzgITkF+iwU7VrtVSFlCei628nr
WqlhwiKH5Jt3dSZV7V2VghUBi4/qOS0WU2NWue272cg4OjchciW1krmUvMWp91Yb
Oo/VJ8L/gIZ+ocPO29mIIexbwy7037axIREaS5To2nLs0oT/AhY/fmHegj5+/ITG
AimFQc+YEqq3QuvS+r/8YRaa0akPtDaZLo8TzC+vMvO11cTPZvAwnNQAknW/B9uV
RwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8062505159064383264526796841966349
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Telia Finland Oyj'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Telia Server CA v3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-07 10:31:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-27 10:31:16 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'HELSINKI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'City of Helsinki'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'aineistopankki.hel.fi'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21230576197233365575899545984341261080555455555011007793402706922418096209412434122747021905319240467963415970492441877087150174840401473391962939473137388628112909778413588048366101817773667593341844953246187160625272796017192688161992086395023908313344845438734643769465568507696286534362252804182308381176587560014536791646533818035355663868517733754447554316432432133321166213336632085071447031139684005906998771568569792626659222288268791868262121730598374745697847976312008253806279912108491887628268891029264787911862845615502846795693653390040172873164653759209417240043870911112893878474014951954041500570951
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 46668d0e072316b0ea4f05eb965adea5eec97ea4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b337390473eec1fed06b4b92e66cfd0a62384888
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.trust.telia.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aineistopankki.hel.fi'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://httpcrl.trust.telia.com/teliaservercav3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.trust.telia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cps.trust.telia.com/teliaservercav3.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		0039e4964b775fb9a87d952ec34ef153608c5e79604d49f76594162340bb4ad086b51f06d6a16096fabc0114b21684dfbfe4b1427a14aaadee37b04feb8a04a79a9ca52f9095e0a682b07b7015248360f904095064d2f392c06ea876933a5049869c6580607ee24f0767ada8b93fbcafa962c121d31de190aed5efef10dc1100b6b463c2e4aaa56e70d9d06af5149e59d18fb6f12113f32af4452ed36611ac9fd972e3a2785556ddfdf261a544b43c3f3886ca5c39d704200e5be7eaca0751efc8abfc9eebbaf4efeb365994a3bff2e1a67497ee1ed1376640800a6ffe2d2f0f0b4989409777ae6ac3ced2af48e896b82705033a05c32f8160d7fc424315e500b864371f4dfa6f9bb0aabe705f81f02aa1257e078b6dab905dfd3c5281b1cfaf7e8dcfa67d22d08a749693e8ed6b3f951d738af5fabb02d13e246a7376e4bfa55b528b0c42a4a644b3bcae96bcb489ee314573c2b7611c2a2b6dfa528362336d9d38e615082b67b0821da355ee1e81a2268d79951174ca604b8e91e5a0e2e5b01ed67fc8bd09a4a9bdfa2d7fd44045a436b30cfea52e13afdb3937d86a08f9ba909422c5a5410705d6a98167f527c1ab084e9c89e8cb8dc302a3735fae156720a06958e3a40537e8051223395f9ae125045aae46631b896b3b5a8a056c12d079494bdd03b562f64195928ce2e84c575b345ba3a46a8a289323b7d6c53cdea33a47