www.kivisalo.fi

Issued by AlphaSSL CA - G2

About this certificate


This digital certificate with serial number 11:21:85:6b:98:0c:2e:bf:93:7d:13:c0:56:54:a9:19:71:81 was issued on by AlphaSSL .

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com.

www.kivisalo.fi

Organization unit: Domain Control Validated
Country: FI

AlphaSSL

Organization: AlphaSSL
Country: FI

Time untill certificate expires

This certificate will expire on

Certificate Details

Serial Number (hex): 11:21:85:6b:98:0c:2e:bf:93:7d:13:c0:56:54:a9:19:71:81
Serial Number (int): 1492315524931409884941553656672321955000705
Serial Number lenght: 141 bits, 18 octets

SubjectKeyId: 47:cd:84:e9:6b:81:b6:0c:d1:2c:f3:dd:c4:fb:57:bd:f5:32:e9:c8
AuthorityKeyId: 14:ea:19:55:f0:0e:0d:32:c6:1f:74:33:b7:8e:66:1a:4c:12:31:1e

Fingerprint (sha1): 7d:0b:98:6a:74:34:ea:30:ed:4b:64:6c:99:b1:66:a8:aa:be:3e:bc
Fingerprint (sha256): 41:86:e2:9d:fa:ec:d6:df:40:50:8f:4b:21:cf:8e:88:2e:cb:69:4e:d3:02:ac:6f:65:ca:16:a8:c9:ea:d0:74

Issuing Certificate URL: http://secure2.alphassl.com/cacert/gsalphag2.crt

Revocation information

CRL Distribution Point: http://crl2.alphassl.com/gs/gsalphag2.crl

Check the revocation status for the current certificate on www.kivisalo.fi
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA



Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

www.kivisalo.fi
kivisalo.fi

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIEhjCCA26gAwIBAgISESGFa5gMLr+TfRPAVlSpGXGBMA0GCSqGSIb3DQEBBQUA MC4xETAPBgNVBAoTCEFscGhhU1NMMRkwFwYDVQQDExBBbHBoYVNTTCBDQSAtIEcy MB4XDTEyMDQxMDE1MzIwMFoXDTE3MDQxMDE1MzIwMFowSjELMAkGA1UEBhMCRkkx ITAfBgNVBAsTGERvbWFpbiBDb250cm9sIFZhbGlkYXRlZDEYMBYGA1UEAwwPd3d3 LmtpdmlzYWxvLmZpMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/DbJ s7oaIgGNyVFo3i1+ood6fFRnkhpVE5ofbnlp0IY7+YRiP6YcS66f9lHvTvPKe/pH lWFBa1X8jEWEPAoJd7nWz5tACQsEFj7qaO3j+fI24NxbqvXPiUEP8VhOVgi0dNhR ou+RIW+eYvzpRdsWtsEMfpfXCzJVAfFgi5H7c/1WJ0SWLMp/XAMkwauCgQlr6UtJ TN2N/D2GqtKOVHU5jin3XsQX4z2WkZOfcu9nyvC2NCLlwzruqfBbwlHfIcZnWInu +JrJkCexkcUVaL8EfcRGv1wlhWjCd7IHqz3TwP34Wi9eh0R6vt+TIgjIBeGjp6jR Qqh6Cn75NnZEANcF4wIDAQABo4IBgDCCAXwwDgYDVR0PAQH/BAQDAgWgME0GA1Ud IARGMEQwQgYKKwYBBAGgMgEKCjA0MDIGCCsGAQUFBwIBFiZodHRwczovL3d3dy5n bG9iYWxzaWduLmNvbS9yZXBvc2l0b3J5LzAnBgNVHREEIDAegg93d3cua2l2aXNh bG8uZmmCC2tpdmlzYWxvLmZpMAkGA1UdEwQCMAAwHQYDVR0lBBYwFAYIKwYBBQUH AwEGCCsGAQUFBwMCMDoGA1UdHwQzMDEwL6AtoCuGKWh0dHA6Ly9jcmwyLmFscGhh c3NsLmNvbS9ncy9nc2FscGhhZzIuY3JsMEwGCCsGAQUFBwEBBEAwPjA8BggrBgEF BQcwAoYwaHR0cDovL3NlY3VyZTIuYWxwaGFzc2wuY29tL2NhY2VydC9nc2FscGhh ZzIuY3J0MB0GA1UdDgQWBBRHzYTpa4G2DNEs893E+1e99TLpyDAfBgNVHSMEGDAW gBQU6hlV8A4NMsYfdDO3jmYaTBIxHjANBgkqhkiG9w0BAQUFAAOCAQEAc401JokA JKGd2ByyygqD5zjdAs+5du28a63FmDoEtASJE98XqQi2utiJezeApEior8sBBxMN EMy7USks+xME7BH6LGdraLzunPWgmRPauiTF0kskiZ1KDnHMoeKwEqpHqO5IIeo+ TcF2rNQsOf4/z1Xf1Z2prVMEoe/B3QWBxiMOXldzqrgQi8C/FqjLMmWzZIkTsdmO LRCjZ2gKzTFYCF42VmKOg3uR0/IxugzJ8nAhya+iBgRJrTUsqc5Ho0CBajL2UNhr v1WRMyFFvcaZVOo5JRr6pLeyeV6IqqKURksV+6ajFrAwXVGZrsOtNansePpEgjwU ZWUjzh6MAu8TWQ== -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/DbJs7oaIgGNyVFo3i1+ ood6fFRnkhpVE5ofbnlp0IY7+YRiP6YcS66f9lHvTvPKe/pHlWFBa1X8jEWEPAoJ d7nWz5tACQsEFj7qaO3j+fI24NxbqvXPiUEP8VhOVgi0dNhRou+RIW+eYvzpRdsW tsEMfpfXCzJVAfFgi5H7c/1WJ0SWLMp/XAMkwauCgQlr6UtJTN2N/D2GqtKOVHU5 jin3XsQX4z2WkZOfcu9nyvC2NCLlwzruqfBbwlHfIcZnWInu+JrJkCexkcUVaL8E fcRGv1wlhWjCd7IHqz3TwP34Wi9eh0R6vt+TIgjIBeGjp6jRQqh6Cn75NnZEANcF 4wIDAQAB -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 1492315524931409884941553656672321955000705 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AlphaSSL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AlphaSSL CA - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-04-10 15:32:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-04-10 15:32:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FI' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.kivisalo.fi' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 31839069771213263417951585800868543998438506772199309483440129120419191312418124404340147347884750197446765448371435177373859527350893018237714594115799705649163220843112512211150343973246996175010451260142866819001876142119974047865070133667661328481736570331837780606993001312766734097360096416216447173320716085067885675922817063903460029170901288333781402293997403791712261936529042611621618691191995098164203225882773210219000116372921702091209064056479195449137447883027746071257267093800207853501128851571709749228273850642631262167257759922234628103804140404286969054103400960994481270638278786066629036279267 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (70 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10.10 (Domain Validation Certificates Policy - AlphaSSL) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kivisalo.fi' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kivisalo.fi' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl2.alphassl.com/gs/gsalphag2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (64 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure2.alphassl.com/cacert/gsalphag2.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 47cd84e96b81b60cd12cf3ddc4fb57bdf532e9c8 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 14ea1955f00e0d32c61f7433b78e661a4c12311e . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00738d3526890024a19dd81cb2ca0a83e738dd02cfb976edbc6badc5983a04b4048913df17a908b6bad8897b3780a448a8afcb0107130d10ccbb51292cfb1304ec11fa2c676b68bcee9cf5a09913daba24c5d24b24899d4a0e71cca1e2b012aa47a8ee4821ea3e4dc176acd42c39fe3fcf55dfd59da9ad5304a1efc1dd0581c6230e5e5773aab8108bc0bf16a8cb3265b3648913b1d98e2d10a367680acd3158085e3656628e837b91d3f231ba0cc9f27021c9afa2060449ad352ca9ce47a340816a32f650d86bbf5591332145bdc69954ea39251afaa4b7b2795e88aaa294464b15fba6a316b0305d5199aec3ad35a9ec78fa44823c14656523ce1e8c02ef1359