tehtava.api-test.yle.fi

Issued by Amazon

About this certificate

This digital certificate with serial number 0c:39:bc:1b:c1:1e:99:7c:c2:ff:dd:88:7f:ad:b0:d3 was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tehtava.api-test.yle.fi

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:39:bc:1b:c1:1e:99:7c:c2:ff:dd:88:7f:ad:b0:d3
Serial Number (int): 16250512162288949542476114398630752467
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 85:db:b4:c5:6a:3b:96:7e:66:47:25:27:14:0a:ff:f7:73:a9:49:84
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): e2:e8:5d:9e:64:36:fc:fb:99:66:37:ee:85:84:d3:d5:9b:19:75:34
Fingerprint (sha256): 07:0c:ff:cb:71:60:a7:fd:a1:1c:88:fe:50:0e:52:61:b0:ed:d9:bf:34:87:c4:10:3a:f1:2b:6d:e0:77:8d:16

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate tehtava.api-test.yle.fi

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tehtava.api-test.yle.fi

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

tehtava.api-test.yle.fi

Other certificates including the domain name yle.fi

(limited to 100 certificates)
*.c6t.yle.fi
ovp-search.api-test.yle.fi
*.yle.fi
yleplus.yle.fi
areena-webviews.apps-test.yle.fi
areena.yle.fi
ad-recommender.api.yle.fi
vaalibotti.yle.fi
datacloud.api-test.yle.fi
playlist-aws.api-test.yle.fi
lusi-dataviz.ylestatic.fi
parliament-api-membercard.test.ylestatic.fi
radiator.aws.yle.fi
external.api-test.yle.fi
san.cloudinary.com
ma-proxy.api-test.yle.fi
san.cloudinary.com
postituslista-ylex.yle.fi
www.3scale.net
site-survey.yle.fi
*.apps-test.yle.fi
survey.yle.fi
svenska-dataviz.test.ylestatic.fi
programs-cdn.api.yle.fi
design-system.yle.fi
kioski-vaalibotti-epv2019.test.yle.fi
packages.api.yle.fi
datacloud.api.yle.fi
areena-webviews.apps.yle.fi
comments-websocket.api.yle.fi
reference-data.api.yle.fi
bamboo.test.yle.fi
programs-v2.api-test.yle.fi
aihe.test.yle.fi
packages.api-test.yle.fi
elavaarkisto-test.c2t.yle.fi
www.3scale.net
www.3scale.net
tehtava.api-test.yle.fi
areena.api.yle.fi
tunnus-v4.apps.yle.fi
aihe.yle.fi
tableau.api-test.yle.fi
pumpumhiihto.apps-test.yle.fi
da.yle.fi
san.cloudinary.com
media-manifest.api-test.yle.fi
san.cloudinary.com
val.yle.fi
link.yle.fi
da.yle.fi
svo.yle.fi
player.api.yle.fi
grafana-test.aws.yle.fi
vaalit.yle.fi
*.c2t.yle.fi
areena-program-info-widget.yle.fi
metrics.api-test.yle.fi
beaver.api-test.yle.fi
broadcast-recommendations.api.yle.fi
*.api-test.yle.fi
trollitehdas.test.yle.fi
yle-comments-livefeed-widget.apps-test.yle.fi
beaver.api-test.yle.fi
tehtava.api.yle.fi
analytics-sdk.yle.fi
areena-webviews.apps.yle.fi
datacloud.api-test.yle.fi
beta.yle.fi
*.yle.fi
yle.fi
media-manifest.api.yle.fi
ohjeet.areena.yle.fi
futistietaja.api-test.yle.fi
contact-center.apps.yle.fi
hattara.yle.fi
areena-taittelija.yle.fi
*.c3.yle.fi
*.c4.yle.fi
postituslista-radio-suomi.yle.fi
analytics-sdk-test.yle.fi
parliament-api-admin.apps.yle.fi
urheilu-taittelija.yle.fi
parliament.api.yle.fi
asiakaspalvelu.yle.fi
scores.api-test.yle.fi
identification.api-test.yle.fi
s1-sni.cloudinary.com
tehtava.api-test.yle.fi
tunnus-token-login.apps.yle.fi
ohjeet.areena.yle.fi
s1-cloudinary-pin-sni.map.fastly.net
areena-preview.api.yle.fi
areena.test.ylestatic.fi
kioski-vaalibotti-epv2019.test.yle.fi
headline-recommender.api-test.yle.fi
s4-san.cloudinary.com
vaalikone.yle.fi
vaalit.test.yle.fi
hulahulasuomi.yle.fi

Certificate

The complete raw certificate details for tehtava.api-test.yle.fi in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHDsHPTZV6JBeVkCTpdn
fK16cZjw9WgVvifaaQnXxetY1T+8Zf1NL5RDZYa2YbiCpYAERDW9oc1m59wx2rCo
pY1wlKkOts8WqC+7exkq+lFQGtXYSAWTWR+dMp7c+lR8ljTklDKXBnt3yVsVAWTG
WKJXmlGxmvtHBD72lWUrg6G6Yz0T97yfJ8DoC4gDZsbcAkcqIqA8w5gewoXxmchG
9SVbKQXiPIA6VT5iEY14xh4j74FrLCwC2f0Eb7XkJVDCKlLZdEX0pMx+qBe8q0S+
Q8ZyziprWJLVDsA18FrKjkqAvOcvMw1k8pFGEJ8wmS1mOxEGNA4Bpj/sPSr1cYsC
1wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16250512162288949542476114398630752467
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-20 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tehtava.api-test.yle.fi'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20253812864377000585179485824765215782628297945458102310960449025434936156895712589882336114308208360392322803552846108796423143948333876010370347871917632830638046276336928735355858296674874521417600383765129169179280543491986507599376534708219239145902154484200231232844911383932618183470812533354359321655906877559202814369559408337089069620236710538052547123274352018915707801082194390326308280895415831140140042893107931047926405367580983051199327716653657219326228652420914114389136435542326579794805010593835201592125365413194449937134205781966416750356125818916031827835266529971314561212207735295203911336663
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							85dbb4c56a3b967e66472527140afff773a94984
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tehtava.api-test.yle.fi'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed18500000164b51d6f2c0000040300483046022100c38d1f0cacda5663da00d8adda488497ad1589ea74418af98766fef5dda03fdb022100c3f420505d0864ebbc43d9abcfb403ddfb1eb09da5e2fd3428d170bddbd73e970075008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f00000164b51d6fb80000040300463044022010c88460038ee547644cf50a87e7b2b388f23ede3c81611a20cb6a8e0adbb05d022033b1df6ccebb2b692cfbfd364f699fb334ab5d2f758811b1ff07a02d07cfc440
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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