svo.yle.fi

- Yleisradio Oy -

Issued by TeliaSonera Server CA v2

About this certificate

This digital certificate with serial number 01:7d:d7:e7:ad:09:6a:6e:2b:e2:9e:ef:c8:c0:53 was issued on by TeliaSonera.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Yleisradio Oy

Organization: Yleisradio Oy
Locality: HELSINKI
Country: FI

TeliaSonera

Organization: TeliaSonera
Country: FI

This certificate has expire since

Certificate Details

Serial Number (hex): 01:7d:d7:e7:ad:09:6a:6e:2b:e2:9e:ef:c8:c0:53
Serial Number (int): 7744703814157753380053817783533651
Serial Number lenght: 113 bits, 15 octets

SubjectKeyId: 81:d2:21:1b:e5:59:ec:cf:2e:80:49:e5:a0:c0:91:79:e5:98:50:b8
AuthorityKeyId: 2f:49:3c:29:4f:d7:07:25:f9:c6:8c:d5:64:f5:66:3d:12:83:22:95

Fingerprint (sha1): 7e:af:88:52:a1:10:b0:79:8b:c0:3c:0b:39:65:5a:fb:7d:13:cd:2a
Fingerprint (sha256): 04:46:46:e0:d9:b2:4b:ff:da:c6:19:d9:1d:c6:c1:08:39:64:09:8e:c4:09:ca:e7:b3:1f:03:92:55:bb:5e:ed

Issuing Certificate URL: http://repository.trust.teliasonera.com/teliasoneraservercav2.cer

Revocation information

OCSP Server: http://ocsp.trust.telia.com
CRL Distribution Point: http://crl-3.trust.teliasonera.com/teliasoneraservercav2.crl

Check the revocation status for certificate svo.yle.fi

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for svo.yle.fi

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

svo.yle.fi

Other certificates including the domain name yle.fi

(limited to 100 certificates)
*.c6t.yle.fi
ovp-search.api-test.yle.fi
*.yle.fi
yleplus.yle.fi
areena-webviews.apps-test.yle.fi
areena.yle.fi
ad-recommender.api.yle.fi
vaalibotti.yle.fi
datacloud.api-test.yle.fi
playlist-aws.api-test.yle.fi
lusi-dataviz.ylestatic.fi
parliament-api-membercard.test.ylestatic.fi
radiator.aws.yle.fi
external.api-test.yle.fi
san.cloudinary.com
ma-proxy.api-test.yle.fi
san.cloudinary.com
postituslista-ylex.yle.fi
www.3scale.net
site-survey.yle.fi
*.apps-test.yle.fi
survey.yle.fi
svenska-dataviz.test.ylestatic.fi
programs-cdn.api.yle.fi
design-system.yle.fi
kioski-vaalibotti-epv2019.test.yle.fi
packages.api.yle.fi
datacloud.api.yle.fi
areena-webviews.apps.yle.fi
comments-websocket.api.yle.fi
reference-data.api.yle.fi
bamboo.test.yle.fi
programs-v2.api-test.yle.fi
aihe.test.yle.fi
packages.api-test.yle.fi
elavaarkisto-test.c2t.yle.fi
www.3scale.net
www.3scale.net
tehtava.api-test.yle.fi
areena.api.yle.fi
tunnus-v4.apps.yle.fi
aihe.yle.fi
tableau.api-test.yle.fi
pumpumhiihto.apps-test.yle.fi
da.yle.fi
san.cloudinary.com
media-manifest.api-test.yle.fi
san.cloudinary.com
val.yle.fi
link.yle.fi
da.yle.fi
svo.yle.fi
player.api.yle.fi
grafana-test.aws.yle.fi
vaalit.yle.fi
*.c2t.yle.fi
areena-program-info-widget.yle.fi
metrics.api-test.yle.fi
beaver.api-test.yle.fi
broadcast-recommendations.api.yle.fi
*.api-test.yle.fi
trollitehdas.test.yle.fi
yle-comments-livefeed-widget.apps-test.yle.fi
beaver.api-test.yle.fi
tehtava.api.yle.fi
analytics-sdk.yle.fi
areena-webviews.apps.yle.fi
datacloud.api-test.yle.fi
beta.yle.fi
*.yle.fi
yle.fi
media-manifest.api.yle.fi
ohjeet.areena.yle.fi
futistietaja.api-test.yle.fi
contact-center.apps.yle.fi
hattara.yle.fi
areena-taittelija.yle.fi
*.c3.yle.fi
*.c4.yle.fi
postituslista-radio-suomi.yle.fi
analytics-sdk-test.yle.fi
parliament-api-admin.apps.yle.fi
urheilu-taittelija.yle.fi
parliament.api.yle.fi
asiakaspalvelu.yle.fi
scores.api-test.yle.fi
identification.api-test.yle.fi
s1-sni.cloudinary.com
tehtava.api-test.yle.fi
tunnus-token-login.apps.yle.fi
ohjeet.areena.yle.fi
s1-cloudinary-pin-sni.map.fastly.net
areena-preview.api.yle.fi
areena.test.ylestatic.fi
kioski-vaalibotti-epv2019.test.yle.fi
headline-recommender.api-test.yle.fi
s4-san.cloudinary.com
vaalikone.yle.fi
vaalit.test.yle.fi
hulahulasuomi.yle.fi

Certificate

The complete raw certificate details for svo.yle.fi in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1w3fXbuM8Eyu6MwQGFX/
eeyMyPtWIksBDQLhgBBUUxIOH+37ZiFZ42vKeNRfXhYirK86tohgUHimE1FDECi6
nosL8xWAZegSLVT0naqPXtyrORqdAIlM0AciVWy2ur9DtigLlEU65ifneE8lvBSy
wkTI2xMu2NL9ggI/hmCi6GNdfuH9ts3EbPdz5sLf0sjYcI0YtKGaMsmsgnuf4Zzx
xVxoQXCLc76X1z6ld+RkbwRcuBKAf/EYNPXIQdaji6HBvMKHNIepGYopTMgQBLgK
u088lBRR8s9kQ11BU5eh1c5AN2/oeqbb7MWBTUxmjQ+qEicRjrJed8fGTJvyP1Ru
jQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7744703814157753380053817783533651
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'TeliaSonera'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'TeliaSonera Server CA v2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-20 12:53:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-20 12:53:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'HELSINKI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Yleisradio Oy'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'svo.yle.fi'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27148076364245141374504079235463346689575408192802304443315215642304106970962319259136152071754959368904937588692357383354597366873988272450765710972997806640257562058173786366843675506796266083663092952964690029784231679041180504539447589887091560519917093805858850640375162021216368721955169632241230130500832232970390816804763862167141713033139005931320796439306927872627577424935095362025609351245527823072710861392430324532092124905423815780248008350119437449241925116592157513056656502786884733104204715026825446647031202998763749413807390244332775263178085730731745580026448797541148158123625580938212211453581
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 2f493c294fd70725f9c68cd564f5663d12832295
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							81d2211be559eccf2e8049e5a0c09179e59850b8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (71 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://repository.trust.teliasonera.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'svo.yle.fi'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (70 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl-3.trust.teliasonera.com/teliasoneraservercav2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (122 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.trust.telia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repository.trust.teliasonera.com/teliasoneraservercav2.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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