karhu2.nsense.net

- F-Secure Corporation -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 03:7a:0f:19:42:82:88:9e:a0:6e:7b:18:3b:f1:cf:fe was issued on by DigiCert Inc.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

F-Secure Corporation

Organization: F-Secure Corporation
Organization unit: F-Secure Corporation
State / Province: Uusimaa
Locality: Helsinki
Country: FI

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:7a:0f:19:42:82:88:9e:a0:6e:7b:18:3b:f1:cf:fe
Serial Number (int): 4621450441527930393803163664301281278
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 70:8d:1e:a2:d9:49:b6:b6:b7:85:8e:5a:23:06:73:91:f2:5c:40:9f
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 42:1b:a7:54:74:a0:47:9e:cb:51:6d:4d:8e:1f:2c:7f:a1:f1:1f:8d
Fingerprint (sha256): 06:2f:ff:19:10:72:de:cc:ae:dd:b6:8e:f9:c8:0c:d6:5c:28:f3:b3:65:26:81:d6:1d:db:b1:9f:6f:e2:fc:a4

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g5.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g5.crl

Check the revocation status for certificate karhu2.nsense.net

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for karhu2.nsense.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

karhu2.nsense.net
karhu2-api.nsense.net
portal.karhu.f-secure.com
api.karhu.f-secure.com
karhu.nsense.net

Other certificates including the domain name nsense.net

(limited to 100 certificates)
*.nsense.net
karhu2.nsense.net
ir.f-secure.com
remote2.nsense.net
css.nsense.net
ir.f-secure.com
nsense.net
gotham.nsense.net
css.nsense.net
www.nsense.net
karhu.nsense.net
gotham.nsense.net
updates.karhu2.nsense.net
css.f-secure.com
karhu2.nsense.net
updates.radar.f-secure.com
gotham.nsense.net
karhu.nsense.net
updates.radar.f-secure.com
www.css.f-secure.com
css.nsense.net
gotham.nsense.net
updates.karhu2.nsense.net
gotham.nsense.net
*.nsense.net
portal.radar.f-secure.com
gotham.nsense.net
nsense.net
gotham.nsense.net
updates.radar.f-secure.com
gotham.nsense.net
ir.f-secure.com
css.nsense.net
gotham.nsense.net
www.nsense.net
gotham.nsense.net
*.nsense.net
updates.radar.f-secure.com
gotham.nsense.net
gotham.nsense.net
nsense.net
updates.radar.f-secure.com
www.nsense.net
*.nsense.net
css.f-secure.com
www.nsense.net
updates.radar.f-secure.com
gotham.nsense.net
remote.nsense.net
www.nsense.net
portal.radar.f-secure.com
gotham.nsense.net
gotham.nsense.net

Certificate

The complete raw certificate details for karhu2.nsense.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4621450441527930393803163664301281278
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-10-29 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-11-02 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Uusimaa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Helsinki'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'F-Secure Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'F-Secure Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'karhu2.nsense.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 690387261798675880826702209005260761623067518436885650224136004632018034134952052455801022694238100164141831451492806861583932172810942295436908622992470286524436448793716547496786167151137224429667690471954453241142502816526173257755036814977405500293940753843974155244723641065799673378295609640234386823755801756702725635529950193772650913131144853833746269318296266629728364717618778237697707818873268494761108168089101004173654387385300861298862391805231217454212653772890465124485244716048442266996550373529942529932290922190173724473399464504153480843141391939678352492415134053729311706438967620751619189414258328186663932208254403608596150762929738203202245326010735229923319210329649957710389397890008075440708973157092026224052554002313194742659054595078146214544069633722933058299163894304422003626165817789423847423900248474501312137381364065397403518363611187806329337720327554013390790581048042812236193765506859821686226234163208389313584941256458246334152504387299077308198196129390620976757175290769346424290990319400242594181485356024899130450655600186087533618433626118267466228076315332044696633780017190306281653640046213441168665761687436188558742603736526854549139631967466535748263978289978613682582332169313
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							708d1ea2d949b6b6b7858e5a23067391f25c409f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (113 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karhu2.nsense.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karhu2-api.nsense.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.karhu.f-secure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.karhu.f-secure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karhu.nsense.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g5.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g5.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00a31ddd1bc47ecbc8fbf250d3467b2da1f360f1b52179a96063306e8ab2707a071b1ebfad50a40507da80617c9556a20dcf4056602acddc64cf42167a4313d10bde92f75736a48134daeb88b6297b69be5fa587d9fbe6be787f443410f5ac32140e7566ca6ce7c4717c737122ba1e3114a2112e40ab3db6ccce3ce63a94e40a585cbf6287c497e83e69e1421200e1a228d387b283986f34035d5d62036ba38d9be90fdd6ddc2b1c3696345fcc6d4d62b21ad9eef5dc503f8be77fd49d12664afc375077bcd9dbcfba46b3badb40ca0be14e53b63b8c049de22a81afa4d67bb2019b49cdb9d8fd7540d0e2bce83c33344462ffc7a1d09a4d1ac05be21ad43e52ac