turvaviesti.valtionkoulukodit.fi

- Valtion koulukodit -

Issued by TeliaSonera Server CA v2

About this certificate

This digital certificate with serial number 01:70:38:9a:eb:e6:46:e4:2e:0d:ee:92:fd:2d:70 was issued on by TeliaSonera.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Valtion koulukodit

Organization: Valtion koulukodit
Locality: Helsinki
Country: FI

TeliaSonera

Organization: TeliaSonera
Country: FI

This certificate has expire since

Certificate Details

Serial Number (hex): 01:70:38:9a:eb:e6:46:e4:2e:0d:ee:92:fd:2d:70
Serial Number (int): 7468411457121145620736052570172784
Serial Number lenght: 113 bits, 15 octets

SubjectKeyId: 27:e6:2d:ef:b6:dd:1f:a2:b4:3a:8f:e7:d4:3c:dd:62:31:98:59:78
AuthorityKeyId: 2f:49:3c:29:4f:d7:07:25:f9:c6:8c:d5:64:f5:66:3d:12:83:22:95

Fingerprint (sha1): 6a:9e:93:c2:ba:6b:18:8c:c3:72:cb:57:8a:d2:16:70:95:54:a9:6b
Fingerprint (sha256): 11:e8:ca:29:35:29:73:5d:1a:6f:fa:f3:e7:53:86:43:37:c3:ab:ae:6e:ac:c9:6b:dd:92:61:c5:dd:cd:64:5e

Issuing Certificate URL: http://repository.trust.teliasonera.com/teliasoneraservercav2.cer

Revocation information

OCSP Server: http://ocsp.trust.telia.com
CRL Distribution Point: http://crl-3.trust.teliasonera.com/teliasoneraservercav2.crl

Check the revocation status for certificate turvaviesti.valtionkoulukodit.fi

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for turvaviesti.valtionkoulukodit.fi

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

turvaviesti.valtionkoulukodit.fi

Other certificates including the domain name valtionkoulukodit.fi

(limited to 100 certificates)

Certificate

The complete raw certificate details for turvaviesti.valtionkoulukodit.fi in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7468411457121145620736052570172784
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'TeliaSonera'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'TeliaSonera Server CA v2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-12 08:54:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-11 08:54:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Helsinki'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Valtion koulukodit'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'turvaviesti.valtionkoulukodit.fi'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 808940961269577365737919876072879478363012601114339987046367464375097029401935545151329774465917019029281127967252751783131355858281254195900405656805357446288453561753872102861868401997229258125423305128960534275970202312934544551153915548794712627250549337227323438368913490875540490727531880026765878060619069084412819296432045345520834014944217891101930579208285766588255736468061169920553122160132002071147650420871469965685471709366066008980474695714247391823755771914567780507061526367361725266210816846918682054451485197825109184910514786992009106091130281634071225126900634129925479530346738760721038489773967554323523772421787748901369832726138924767343718586000200755169584115462310453498929996514766655911015027311344730599937679742106352730468286662636158932652158504342836527977765762499128376821206860556196939209304137614098811650450423682535848979218377629930851156824524643545105399926060550932540039758893793420772921629283203568647595620467686314553825456568339704798261790170752628516618024327168300082321444015191868630861042400774737229051579452336002068537668622277124923020258816598847691492370578780947608409567148342443908819558506010364549401296682221339525233727973114083417292213019830709522929475602017
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 2f493c294fd70725f9c68cd564f5663d12832295
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							27e62defb6dd1fa2b43a8fe7d43cdd6231985978
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (71 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://repository.trust.teliasonera.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'turvaviesti.valtionkoulukodit.fi'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (70 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl-3.trust.teliasonera.com/teliasoneraservercav2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (122 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.trust.telia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repository.trust.teliasonera.com/teliasoneraservercav2.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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