VALTTMLCS01.vy-verkko.fi

- Valtion tieto- ja viestintatekniikkakeskus Valtori -

Issued by TeliaSonera Server CA v2

About this certificate

This digital certificate with serial number 01:68:27:5b:8b:ce:53:e4:b1:d1:b8:c5:08:64:df was issued on by TeliaSonera.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Valtion tieto- ja viestintatekniikkakeskus Valtori

Organization: Valtion tieto- ja viestintatekniikkakeskus Valtori
Organization unit: NA
Locality: Jyvaskyla
Country: FI

TeliaSonera

Organization: TeliaSonera
Country: FI

This certificate has expire since

Certificate Details

Serial Number (hex): 01:68:27:5b:8b:ce:53:e4:b1:d1:b8:c5:08:64:df
Serial Number (int): 7304785687803595385034235758273759
Serial Number lenght: 113 bits, 15 octets

SubjectKeyId: 6b:d7:95:a3:89:f0:ce:08:ba:f6:53:d0:fe:02:70:9e:ab:ed:00:d1
AuthorityKeyId: 2f:49:3c:29:4f:d7:07:25:f9:c6:8c:d5:64:f5:66:3d:12:83:22:95

Fingerprint (sha1): a8:9e:b1:10:4a:28:61:e0:17:e6:de:d2:dd:c5:84:2d:59:d4:5a:b8
Fingerprint (sha256): 03:72:bd:15:25:ed:82:66:7d:44:47:59:15:0e:cd:e9:eb:60:00:76:83:2a:b0:71:46:ce:0f:8a:9b:5a:cd:2f

Issuing Certificate URL: http://repository.trust.teliasonera.com/teliasoneraservercav2.cer

Revocation information

OCSP Server: http://ocsp.trust.telia.com
CRL Distribution Point: http://crl-3.trust.teliasonera.com/teliasoneraservercav2.crl

Check the revocation status for certificate VALTTMLCS01.vy-verkko.fi

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for VALTTMLCS01.vy-verkko.fi

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

VALTTMLCS01.vy-verkko.fi

Other certificates including the domain name vy-verkko.fi

(limited to 100 certificates)
mail-136.vy-verkko.fi
mail.vyv.fi
lyae.vy-verkko.fi
VALTTMLCS01.vy-verkko.fi
sip.vy-verkko.fi
lyae.vy-verkko.fi
vyvi-turva.vy-verkko.fi
lyae.vy-verkko.fi
vyvi-turva.vy-verkko.fi
vyvi-posti.vy-verkko.fi
vyvi-turva.vy-verkko.fi
lyae.vy-verkko.fi
lyae.vy-verkko.fi
mail.vyv.fi
webfarm.vy-verkko.fi
sip.vy-verkko.fi
lyae.vy-verkko.fi
sip.vy-verkko.fi
mail-137.vy-verkko.fi
lyae.vy-verkko.fi
lyae.vy-verkko.fi
*.vy-verkko.fi
ucc.vy-verkko.fi
vyvi-posti.vy-verkko.fi
lyae.vy-verkko.fi
sip.vy-verkko.fi
lyae.vy-verkko.fi
sip.vy-verkko.fi
lyae.vy-verkko.fi
vyvi-turva.vy-verkko.fi
lyae.vy-verkko.fi
vyvi-vkokous.vy-verkko.fi
lyae.vy-verkko.fi
extlyncfarm01.vy-verkko.fi
sip.vy-verkko.fi
VYVI-POSTI.VY-VERKKO.FI
lyae.vy-verkko.fi
lyae.vy-verkko.fi
lyae.vy-verkko.fi
lyae.vy-verkko.fi
lyae.vy-verkko.fi
turvaviesti.vy-verkko.fi
sip.vy-verkko.fi
perusviesti-posti.vyv.fi
turvaviesti.vy-verkko.fi
vyvi-posti.vy-verkko.fi
vyvi-turva.vy-verkko.fi
sip.vy-verkko.fi
mail-out.vy-verkko.fi
vyvi-turva.vy-verkko.fi
vyvi-turva.vy-verkko.fi
sip.vy-verkko.fi
lyae.vy-verkko.fi
vyvi-some.vy-verkko.fi
vahva-pub.vnk.vy-verkko.fi
lyae.vy-verkko.fi
vyvi-posti.vy-verkko.fi
lyae.vy-verkko.fi
vyvi-turva.vy-verkko.fi
smtp-in.vy-verkko.fi
vahva-pub-qa.vnk.vy-verkko.fi
vyvi-turva.vy-verkko.fi
lyae.vy-verkko.fi
vyvi-posti.vy-verkko.fi
lyae.vy-verkko.fi
mail-in.vy-verkko.fi
sip.vy-verkko.fi
vyvi-turva.vy-verkko.fi
lyae.vy-verkko.fi
mail.vyv.fi
*.vy-verkko.fi
vyvi-kokous.vy-verkko.fi
ucc.vy-verkko.fi
vyvi-turva.vy-verkko.fi
ucc.vy-verkko.fi
sip.vy-verkko.fi
lyae.vy-verkko.fi
vyvi-posti.vy-verkko.fi
lyae.vy-verkko.fi
lyae.vy-verkko.fi
lyae.vy-verkko.fi
extlyncfarm01.vy-verkko.fi
sip.vy-verkko.fi
vyvi-posti.vy-verkko.fi
sip.vy-verkko.fi
ucc.vy-verkko.fi
lyae.vy-verkko.fi
extlyncfarm01.vy-verkko.fi
*.vy-verkko.fi
extlyncfarm01.vy-verkko.fi
sip.vy-verkko.fi
lyae.vy-verkko.fi
lyae.vy-verkko.fi
ucc.vy-verkko.fi
mail-in.vy-verkko.fi
sip.vy-verkko.fi
sip.vy-verkko.fi
sip.vy-verkko.fi
ucc.vy-verkko.fi
sip.vy-verkko.fi

Certificate

The complete raw certificate details for VALTTMLCS01.vy-verkko.fi in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7304785687803595385034235758273759
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'TeliaSonera'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'TeliaSonera Server CA v2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-07 08:08:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-06 08:08:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Jyvaskyla'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Valtion tieto- ja viestintatekniikkakeskus Valtori'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'NA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'VALTTMLCS01.vy-verkko.fi'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 735821144566951747031996353421697687004251966159678395468689882733044773109641654175992574206552417510057416967754133965262055204913112692015535359312891497068955118496184491317770051089077796607380462267324422897757783781328722555867568734778200770085605453042094215667974666788389379600362682752278344087506498538370566152855488864001735736256101495413792188899119962128852298941347147864202870830777233380634098639479603286234903929198352063418788943969693790367694404415228095706754635368806616159485012174215503156397092464978858428237654767089013125618757368699007661259980141578334906902478423332702034914410785848049086029422909869113579361020654803941546343808834623072391229207407571424044100588778190172871325383763836753021008719049172394693345915609069356763002985242714379068698681418613575073816670545228454827117769814290196852284082553660759355628607193088971818794923091030254633202818667536555976649402016890724067002323805215419255512015277456176295872577633098295562921108802382268285547687655937470711089650236098767596527544116161038582878537311246035231680445138350032105121425997168190067826812982042571685650282826495888160337957584138438217750697406269784804693769726693171652845384551330458227014553259861
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 2f493c294fd70725f9c68cd564f5663d12832295
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6bd795a389f0ce08baf653d0fe02709eabed00d1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (71 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://repository.trust.teliasonera.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'VALTTMLCS01.vy-verkko.fi'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (70 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl-3.trust.teliasonera.com/teliasoneraservercav2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (122 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.trust.telia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repository.trust.teliasonera.com/teliasoneraservercav2.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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