*.edu.hel.fi

- Helsingin kaupunki -

Issued by TeliaSonera Server CA v2

About this certificate

This digital certificate with serial number 01:64:03:2e:43:30:6e:d0:8c:0a:75:3e:8e:41:47 was issued on by TeliaSonera.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Helsingin kaupunki

Organization: Helsingin kaupunki
Organization unit: Kasvatus ja koulutus
Locality: Helsinki
Country: FI

TeliaSonera

Organization: TeliaSonera
Country: FI

This certificate has expire since

Certificate Details

Serial Number (hex): 01:64:03:2e:43:30:6e:d0:8c:0a:75:3e:8e:41:47
Serial Number (int): 7220789820924736920414724461314375
Serial Number lenght: 113 bits, 15 octets

SubjectKeyId: 43:98:08:bc:c2:af:da:b3:4c:92:d8:31:73:2c:c6:39:91:4d:c7:7d
AuthorityKeyId: 2f:49:3c:29:4f:d7:07:25:f9:c6:8c:d5:64:f5:66:3d:12:83:22:95

Fingerprint (sha1): 0e:a9:15:2b:b0:92:f8:30:ef:82:91:6c:cd:4e:1e:13:a6:72:13:0a
Fingerprint (sha256): 02:a3:c1:39:ec:ba:bb:d5:2c:3d:65:0c:f7:e5:ba:de:ca:2b:ca:7f:d0:dd:65:7f:15:06:97:f3:ef:91:96:7f

Issuing Certificate URL: http://repository.trust.teliasonera.com/teliasoneraservercav2.cer

Revocation information

OCSP Server: http://ocsp.trust.telia.com
CRL Distribution Point: http://crl-3.trust.teliasonera.com/teliasoneraservercav2.crl

Check the revocation status for certificate *.edu.hel.fi

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.edu.hel.fi

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.edu.hel.fi

Other certificates including the domain name hel.fi

(limited to 100 certificates)
liikuntakauppa.hel.fi
digi.hel.fi
shared2.anders.fi
www.kasarmitorinkesa.hel.fi
*.edu.hel.fi
koulurekisteri.hel.fi
*.movendosplatform.com
numerot.hel.fi
dev.hel.fi
misi.hel.fi
kehmet.hel.fi
tilanvaraus.edu.hel.fi
muistopaikat1918.hel.fi
linkedevents.hel.fi
ohjaamo.hel.fi
varaamo.hel.fi
digineuvonta.hel.fi
palvelukeskus.crm.hel.fi
kerrokantasi.hel.fi
securemail2.hel.fi
tyoterveys.ajanvaraus.hel.fi
toimintaymparisto.hel.fi
api.hel.fi
kerrokantasi.hel.fi
beeblebrox.edu.hel.fi
shared2.anders.fi
keskustelu.hel.fi
omastadi.hel.fi
huonevaraus.hel.ninja
linkedevents.hel.fi
pohjavesi.hel.fi
opehuone.edu.hel.fi
opehuone.fi
uutiskirjeet.hel.fi
varaamo.hel.fi
webmail.ish.edu.hel.fi
digi.hel.fi
helluntaiseurakunta.fi
osallistu.hel.fi
ideapaahtimo.osallistu.hel.fi
*.movendosplatform.com
kruunusillat.hel.fi
helvi.hel.fi
shared2.anders.fi
huonevaraus.hel.ninja
omastadi.hel.fi
finalsite.net
numerot.helmi.hel.fi
kaupunkitilaohje.hel.fi
koulurekisteri.hel.fi
linkedevents.hel.fi
*.lib.hel.fi
*.movendosplatform.com
kerrokantasi.hel.fi
koulurekisteri.hel.fi
shared2.anders.fi
uutiskirjeet.hel.fi
www.att.hel.fi
nextlevel.hel.fi
nextlevel.hel.fi
numerot.helmi.hel.fi
geoserver.hel.fi
linkedevents.hel.fi
www.hel.fi
eterveys.hel.fi
ohjaamo.hel.fi
palvelukartta.hel.fi
linkedevents.hel.fi
webcal.edu.hel.fi
api.hel.fi
www.influenssarokotus.hel.fi
geoserver.hel.fi
palvelukeskustest.crm.hel.fi
sts.hel.fi
servicekarta.hel.fi
turvalomake.hel.fi
sip.hel.fi
palvelukartta.hel.fi
winhawiivi.edu.hel.fi
digi.hel.fi
helluntaiseurakunta.fi
brand.hel.fi
numerot.hel.fi
uutiskirjeet.hel.fi
misi.hel.fi
palvelukartta.hel.fi
numerot.helmi.hel.fi
www.kruunusillat.fi
dev.hel.fi
beeblebrox.edu.hel.fi
nextlevel.hel.fi
tilajakehitys.hel.fi
*.movendosplatform.com
dev.hel.fi
tiedonohjaus.hel.fi
tiedonohjaus.hel.fi
api.hel.fi
securemail.hel.fi
aromi.hel.fi
numerot.helmi.hel.fi

Certificate

The complete raw certificate details for *.edu.hel.fi in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3QYpdTrM8DJzuIa0Z08f
DEEllMSQbYjg0SXwH9K2jLetbb1l2elyyFSJa3s1pppcyxsXCzq5cCbI8xK5n6YP
v9sHI2e1RoeaklR4RwY/FOwBuASlCxSwOC21zOtLSHln+X6MkbKDzR8EcX2IBGbR
w+LCfNptzkQ/zqB178FdIJU4JZXqcTt7/7qk7OnzalFZjlPPtSz7yF/7NWIw/Yrm
x0HehkqtcwG/f3O5WGgZ/wfyhrlKETlIw8PsQ01bZJh5spn8du6ksiN8F0E7WxTt
EoyF0CcEyfBNHcaM2fThN38rZbEvlKtltQK9WzdZ3YbdZHWmWTTI6M3WBWd+3hcw
NQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7220789820924736920414724461314375
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'TeliaSonera'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'TeliaSonera Server CA v2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-15 11:21:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-14 11:21:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Helsinki'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Helsingin kaupunki'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Kasvatus ja koulutus'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.edu.hel.fi'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27901703965843773010745291864957597283867297415780403874682815395605720946874496261035312718708316708174375849342482371839488840475716489768560788042543948149863859655918095533158659418196894595646961305046683571912269835752162737626467314467793886324540063942656110686767596793306549894652378406769513345273622999695524470260198378202569113173880568258207354540933058213446202866386121928596794377254668060665652896310265667228235718903814666578906451019943722712176372368762942744417606977995322881897178433769681484654486746867842743818280462276265958289103233402762530006233443818166853603065037354133545708630069
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 2f493c294fd70725f9c68cd564f5663d12832295
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							439808bcc2afdab34c92d831732cc639914dc77d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (71 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://repository.trust.teliasonera.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.edu.hel.fi'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (70 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl-3.trust.teliasonera.com/teliasoneraservercav2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (122 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.trust.telia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repository.trust.teliasonera.com/teliasoneraservercav2.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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