*.test.sokos.fi

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 0f:ba:83:d2:b0:80:7a:70:ee:27:e5:c6:a4:02:12:d6 was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.test.sokos.fi

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:ba:83:d2:b0:80:7a:70:ee:27:e5:c6:a4:02:12:d6
Serial Number (int): 20906860840658104842174798484134302422
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: af:94:80:87:f9:e6:8e:9b:03:f7:49:d3:27:fe:ef:9a:03:09:57:dd
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 85:98:c5:54:bd:61:be:b8:6c:ed:dc:0a:a1:21:3e:77:04:92:b9:33
Fingerprint (sha256): 0c:c9:4c:03:8f:dc:91:a5:e9:bb:03:cb:a2:28:0e:6c:b9:e3:6c:78:8b:b0:e3:8a:76:91:fb:c7:13:ed:e2:e3

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate *.test.sokos.fi

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.test.sokos.fi

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.test.sokos.fi
test.sokos.fi

Other certificates including the domain name sokos.fi

(limited to 100 certificates)
varnish.test.sokos.fi
www.sokos.fi
backend.beta.sokos.fi
www.qa.sokos.fi
www.sokos.fi
varnish.test.sokos.fi
*.test.sokos.fi
*.test.sokos.fi
go.sokos.fi
varnish.qa.sokos.fi
test.sokos.fi
storefront-api.beta.sokos.fi
test.sokos.fi
api-storefront.beta.sokos.fi
backend.beta.sokos.fi
varnish.test.sokos.fi
varnish-perf.test.sokos.fi
www.sokos.fi
varnish-perf.test.sokos.fi
sokos.fi
*.test.sokos.fi
palautus.prisma.fi
*.sokos.fi
storefront-api.beta.sokos.fi
*.sokos.fi
www.sokos.fi
test.sokos.fi
test.sokos.fi
www.sokos.fi
api-reo.beta.sokos.fi
go.sokos.fi
sokos.fi
*.test.sokos.fi
inspiroidu.sokos.fi
www.sokos.fi
sokos.fi
palautus.prisma.fi
varnish.sokos.fi
varnish-perf.test.sokos.fi
test.sokos.fi
www.sokos.fi
*.qa.sokos.fi
www.test.sokos.fi
*.test.sokos.fi
*.test.sokos.fi
sokos.fi
beta.sokos.fi
beta.sokos.fi
www.sokos.fi
qa.sokos.fi
backend.beta.sokos.fi
varnish.test.sokos.fi
*.qa.sokos.fi
reo-api.beta.sokos.fi
varnish.sokos.fi
*.sokos.fi
go.sokos.fi
varnish.qa.sokos.fi
sokos.fi
go.sokos.fi
varnish.test.sokos.fi
www.sokos.fi
www.sokos.fi
varnish.qa.sokos.fi
palautus.prisma.fi
www.test.sokos.fi
test.sokos.fi
www.sokos.fi
varnish-perf.test.sokos.fi
varnish.test.sokos.fi
*.sokos.fi
www.sokos.fi
go.sokos.fi
varnish-perf.test.sokos.fi
palautus.prisma.fi
varnish.qa.sokos.fi
origin.backend.beta.sokos.fi
go.sokos.fi
www.sokos.fi
qa.sokos.fi
sokos.fi
open-lauri-alternate.test.sokos.fi
*.test.sokos.fi
qa.sokos.fi
*.test.sokos.fi
palautus.prisma.fi

Certificate

The complete raw certificate details for *.test.sokos.fi in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspHHEHgZCm0aoMmSQN02
EqrjIMswrYJROxbd9e8C06ysv5osl3Ijawmq3XxR7woEP/ZtP3bz4Y5a1w1JRhr4
w2gnIbb9rJqSdkViXQXvBq7mfjYnzKLkg/BZJuXisfCTlWlDn+PC+L9T4SeXOCbU
xTxecVtAOJ8QquL+cZmAHwpX4Zj9LTk5qyWhwnmQu043kD8/GIYiJoYl1mqjROj8
r5MTaA2nPj/usIcNJyMgvKLwD2bfhwC52RIW7QEXEmcx6j23fyP103IIdD/w37FB
BlxxO3Csht68r8cdGurg7+ExMVQVvSQer4zc0nPvCJpAwRMfxhQQpzotR67FprAV
0QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20906860840658104842174798484134302422
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-03 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.test.sokos.fi'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22542303895290527939046773122257027985469826903202987206294884251332762241006303507017912335016097696037511037175720346304936675611082647271551568998106128338367549682099397157879583344527711241195650166387960930826808302515794364210971337626461770687935948736821711344613769905930363292616498206618437155435814692354629581416414431813982112052630534868830279283635744591430619841942844388614784533449852163432129320163644979249797083393292426340115448194490723980013540968217889029476228187553549776752253802836322658251335479867582919281923158272416319441691537060804851374389886826114410093554921684236982778074577
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							af948087f9e68e9b03f749d327feef9a030957dd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.test.sokos.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sokos.fi'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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