auth.epv.fi

Issued by Thawte RSA CA 2018

About this certificate

This digital certificate with serial number 06:c3:dd:27:a7:aa:13:95:f6:1c:9a:9f:7b:41:e6:06 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=auth.epv.fi

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:c3:dd:27:a7:aa:13:95:f6:1c:9a:9f:7b:41:e6:06
Serial Number (int): 8992351416434138221220522021785560582
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: a9:38:1f:cd:c4:c7:97:9e:8f:55:2d:1f:80:2b:d2:e4:2f:3c:f7:17
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a

Fingerprint (sha1): 92:ff:38:5c:e9:89:f1:dc:a7:40:09:6c:9b:db:9b:5b:fb:64:27:d9
Fingerprint (sha256): 0c:7e:03:50:e5:e7:36:1a:7d:0e:55:c2:42:53:58:f3:0b:47:34:03:05:34:c0:d3:53:a2:cd:72:bc:6a:f0:28

Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl

Check the revocation status for certificate auth.epv.fi

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for auth.epv.fi

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

auth.epv.fi

Other certificates including the domain name epv.fi

(limited to 100 certificates)
www.epv.fi
portal.epv.fi
ar.epv.fi
webmail.epv.fi
www.epv.fi
auth.epv.fi
auth.epv.fi
extra.epv.fi
www.epv.fi
www.epv.fi
tornionvoima.fi
generis1.epv.fi
webmail.epv.fi
www.epv.fi
ar.epv.fi
secure.epv.fi
www.epv.fi
webmail.epv.fi
sts.epv.fi
sts.epv.fi
webmail.epv.fi
auth.epv.fi
www.epv.fi
secure.epv.fi
award-life-power.epv04.wphost.fi
visitor.epv.fi
auth.epv.fi
ar.epv.fi
auth.epv.fi
portal.epv.fi
coresight.epv.fi
coresight.epv.fi
generis1.epv.fi
www.epv.fi
webmail.epv.fi
tovo.fi
ar.epv.fi
award-life-power.epv04.wphost.fi
portal.epv.fi
www.epv.fi
www.epv.fi
citrix.epv.fi
auth.epv.fi
portal.epv.fi
www.epv.fi
visitor.epv.fi
www.rajakiiri.fi
www.epv.fi
secure.epv.fi
verkkokoulutus.epv.fi
www.sevo.fi
award-life-power.epv04.wphost.fi
www.rajakiiri.fi
www.epv.fi
www.epv.fi
citrix.epv.fi
secure.epv.fi
citrix.epv.fi
visitor.epv.fi
webmail.epv.fi
auth.epv.fi
www.epv.fi
webmail.epv.fi
portal.epv.fi
www.epv.fi
ar.epv.fi
sts.epv.fi
www.epv.fi
www.epv.fi
www.xn--seinjoenvoima-efb.fi
ar.epv.fi
extranet.epv.fi
generis1.epv.fi
ar.epv.fi
coresight.epv.fi
webmail.epv.fi
www.epv.fi
ar.epv.fi
www.epv.fi

Certificate

The complete raw certificate details for auth.epv.fi in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8992351416434138221220522021785560582
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-11-25 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'auth.epv.fi'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 835599349359909183429306913954055650668171996539603618900813920736608725529387486876579426313178590816311811674947126153095496148070185821002701352728245073066739511349144989411464011900149474063127551501205683465364925841909108076753488450302320154620446382472137877562479008646959067485507616164353230877918287513186794427887687973697906573367725511170615283523680268365901712212597668986110689150282657265339765274917669881726999564019101676112966900039956141834823066194927701600996106564187116752172500561271213065694378499381356823162183187636475188951786165722291325440013257275259466331414594158064049530453897862579057913850371115424533465682904469814519814342356663898316262578907882840694243839479884089719052969146971418113098519974156177922014392320719956063375901013020261279921482440684954911579833781273255704042882113962114567617049568159176704310085354163205693317879660451397189879267820246126676954099948781989557616884775019174851431903834430762345429518774129214723215346514187450451790534290980565641329059191152617974791528273239785881966918455028074908872859156931431620659067423461441983401933849217083619899033872861413208711674356758580214617939080668267365209950816652599147038444706152915911547844446601
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a9381fcdc4c7979e8f552d1f802bd2e42f3cf717
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.epv.fi'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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