tcm.hel.fi

- Helsingin kaupunki -

Issued by Telia Server CA v3

About this certificate

This digital certificate with serial number 01:8e:3c:b1:9f:41:5e:04:24:3e:4c:ae:ca:33:b4 was issued on by Telia Finland Oyj.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Helsingin kaupunki

Organization: Helsingin kaupunki
Locality: HELSINKI
Country: FI

Telia Finland Oyj

Organization: Telia Finland Oyj
Country: FI

This certificate will expire on

Certificate Details

Serial Number (hex): 01:8e:3c:b1:9f:41:5e:04:24:3e:4c:ae:ca:33:b4
Serial Number (int): 8077207683378852499551251734344628
Serial Number lenght: 113 bits, 15 octets

SubjectKeyId: e6:f9:71:89:bb:7b:fa:66:3c:22:91:a9:a1:b4:a9:87:98:39:26:e3
AuthorityKeyId: 46:66:8d:0e:07:23:16:b0:ea:4f:05:eb:96:5a:de:a5:ee:c9:7e:a4

Fingerprint (sha1): 3f:c0:38:8a:fc:c3:aa:54:89:78:05:35:b5:31:01:69:50:22:36:36
Fingerprint (sha256): 0c:dd:4c:3e:35:2a:0e:5f:5a:6a:f7:0f:65:d0:b3:b5:dc:13:c5:bc:35:cb:e0:5c:f8:b0:14:37:20:31:ed:e0

Issuing Certificate URL: http://cps.trust.telia.com/teliaservercav3.cer

Revocation information

OCSP Server: http://ocsp.trust.telia.com
CRL Distribution Point: http://httpcrl.trust.telia.com/teliaservercav3.crl

Check the revocation status for certificate tcm.hel.fi

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tcm.hel.fi

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

tcm.hel.fi

Other certificates including the domain name hel.fi

(limited to 100 certificates)
liikuntakauppa.hel.fi
digi.hel.fi
shared2.anders.fi
aineistopankki.hel.fi
www.kasarmitorinkesa.hel.fi
*.edu.hel.fi
koulurekisteri.hel.fi
*.movendosplatform.com
numerot.hel.fi
dev.hel.fi
misi.hel.fi
kehmet.hel.fi
tilanvaraus.edu.hel.fi
muistopaikat1918.hel.fi
linkedevents.hel.fi
ohjaamo.hel.fi
varaamo.hel.fi
digineuvonta.hel.fi
palvelukeskus.crm.hel.fi
kerrokantasi.hel.fi
securemail2.hel.fi
tyoterveys.ajanvaraus.hel.fi
toimintaymparisto.hel.fi
api.hel.fi
kerrokantasi.hel.fi
beeblebrox.edu.hel.fi
shared2.anders.fi
keskustelu.hel.fi
omastadi.hel.fi
aromi.hel.fi
salasana.hel.fi
huonevaraus.hel.ninja
linkedevents.hel.fi
pohjavesi.hel.fi
opehuone.edu.hel.fi
opehuone.fi
uutiskirjeet.hel.fi
varaamo.hel.fi
webmail.ish.edu.hel.fi
digi.hel.fi
helluntaiseurakunta.fi
osallistu.hel.fi
ideapaahtimo.osallistu.hel.fi
*.movendosplatform.com
kruunusillat.hel.fi
helvi.hel.fi
shared2.anders.fi
tcm.hel.fi
huonevaraus.hel.ninja
omastadi.hel.fi
newsletter-newcohelsinki.hel.fi
finalsite.net
numerot.helmi.hel.fi
kaupunkitilaohje.hel.fi
koulurekisteri.hel.fi
linkedevents.hel.fi
tunnistus.hel.fi
*.lib.hel.fi
*.movendosplatform.com
kerrokantasi.hel.fi
koulurekisteri.hel.fi
shared2.anders.fi
uutiskirjeet.hel.fi
www.att.hel.fi
nextlevel.hel.fi
nextlevel.hel.fi
numerot.helmi.hel.fi
geoserver.hel.fi
linkedevents.hel.fi
www.hel.fi
eterveys.hel.fi
ohjaamo.hel.fi
palvelukartta.hel.fi
linkedevents.hel.fi
webcal.edu.hel.fi
api.hel.fi
www.influenssarokotus.hel.fi
geoserver.hel.fi
palvelukeskustest.crm.hel.fi
sts.hel.fi
servicekarta.hel.fi
turvalomake.hel.fi
sip.hel.fi
palvelukartta.hel.fi
winhawiivi.edu.hel.fi
digi.hel.fi
helluntaiseurakunta.fi
brand.hel.fi
numerot.hel.fi
uutiskirjeet.hel.fi
misi.hel.fi
palvelukartta.hel.fi
numerot.helmi.hel.fi
www.kruunusillat.fi
dev.hel.fi
beeblebrox.edu.hel.fi
nextlevel.hel.fi
palvelukeskustest.hel.fi
tilajakehitys.hel.fi
*.movendosplatform.com

Certificate

The complete raw certificate details for tcm.hel.fi in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6kbW5JnJwmRjSvbWfRj
XN5r8cwz6v7vvoC7szlgOp9pqu2mmmPTH385mKfNBIYNyktMBsYCluqdERB6PAp4
y9V85NxcMCaIHDeUPMZYUl195r6+ljfMJuSWKiWa2dHVAya9PpLsms6P1MXtjylp
OAZ66R/H3a/DUik4az17Xad4Fpiexc5khe679yYC8ObXY9PXHWYFmEmOUuoRhzZm
tEyI07FInoJpJNZG2F6JefA30qBwEWzHowvnSfCTRoN1Fy4gbEX6c13qvrxthnzi
QYU64pox3IwcnJyT9fYnSHpBorS0VQ75IudT6mPtwmhhGwGSY/UBu0D9V78LB7Go
XQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8077207683378852499551251734344628
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Telia Finland Oyj'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Telia Server CA v3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-14 11:20:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-14 11:20:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'HELSINKI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Helsingin kaupunki'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'tcm.hel.fi'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23184999512403013872241679250972923848966480858498921482377991994419922895998934012764307443935796221747686980662940400578189966345161643938684339616205909972251802031980972473243060700016670350953686453332120274913334927867500688000922902096785939666110937305731867071801950684716249857296498996119559717418811250033267995138997462875589007033056270688801329822737785860900285442612773573441888286570896142624905827028169663203554687976087284754148306076359773059460767085892417333456794668001220794175211172485332476025320255491629117477232229371713330578323336274105534794583372651511478939717676611375031120930909
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 46668d0e072316b0ea4f05eb965adea5eec97ea4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e6f97189bb7bfa663c2291a9a1b4a987983926e3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.trust.telia.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tcm.hel.fi'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://httpcrl.trust.telia.com/teliaservercav3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.trust.telia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cps.trust.telia.com/teliaservercav3.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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