mail-137.vy-verkko.fi

- Valtion tieto- ja viestintatekniikkakeskus Valtori -

Issued by TeliaSonera Server CA v2

About this certificate

This digital certificate with serial number 01:6a:d4:c1:04:9f:6c:38:a6:b9:48:63:1a:39:0e was issued on by TeliaSonera.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Valtion tieto- ja viestintatekniikkakeskus Valtori

Organization: Valtion tieto- ja viestintatekniikkakeskus Valtori
Locality: Jyvaskyla
Country: FI

TeliaSonera

Organization: TeliaSonera
Country: FI

This certificate has expire since

Certificate Details

Serial Number (hex): 01:6a:d4:c1:04:9f:6c:38:a6:b9:48:63:1a:39:0e
Serial Number (int): 7359088383170380132385583894509838
Serial Number lenght: 113 bits, 15 octets

SubjectKeyId: 3b:81:2c:5b:c7:23:93:fc:95:10:0a:a7:02:d9:c1:6c:f0:f8:30:95
AuthorityKeyId: 2f:49:3c:29:4f:d7:07:25:f9:c6:8c:d5:64:f5:66:3d:12:83:22:95

Fingerprint (sha1): ea:96:4d:9e:f2:c2:ed:e9:0c:b0:4e:b9:a8:9e:8b:fc:42:7f:17:05
Fingerprint (sha256): 18:0b:ec:bb:06:2c:96:bf:69:ef:cf:70:51:ad:f1:1c:48:0f:d8:45:55:27:85:27:f2:06:8f:aa:df:31:ac:75

Issuing Certificate URL: http://repository.trust.teliasonera.com/teliasoneraservercav2.cer

Revocation information

OCSP Server: http://ocsp.trust.telia.com
CRL Distribution Point: http://crl-3.trust.teliasonera.com/teliasoneraservercav2.crl

Check the revocation status for certificate mail-137.vy-verkko.fi

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mail-137.vy-verkko.fi

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mail-137.vy-verkko.fi

Other certificates including the domain name vy-verkko.fi

(limited to 100 certificates)
mail-136.vy-verkko.fi
mail.vyv.fi
lyae.vy-verkko.fi
VALTTMLCS01.vy-verkko.fi
sip.vy-verkko.fi
lyae.vy-verkko.fi
vyvi-turva.vy-verkko.fi
lyae.vy-verkko.fi
vyvi-turva.vy-verkko.fi
vyvi-posti.vy-verkko.fi
vyvi-turva.vy-verkko.fi
lyae.vy-verkko.fi
lyae.vy-verkko.fi
mail.vyv.fi
webfarm.vy-verkko.fi
sip.vy-verkko.fi
lyae.vy-verkko.fi
sip.vy-verkko.fi
mail-137.vy-verkko.fi
lyae.vy-verkko.fi
lyae.vy-verkko.fi
*.vy-verkko.fi
ucc.vy-verkko.fi
vyvi-posti.vy-verkko.fi
lyae.vy-verkko.fi
sip.vy-verkko.fi
lyae.vy-verkko.fi
sip.vy-verkko.fi
lyae.vy-verkko.fi
vyvi-turva.vy-verkko.fi
lyae.vy-verkko.fi
vyvi-vkokous.vy-verkko.fi
lyae.vy-verkko.fi
extlyncfarm01.vy-verkko.fi
sip.vy-verkko.fi
VYVI-POSTI.VY-VERKKO.FI
lyae.vy-verkko.fi
lyae.vy-verkko.fi
lyae.vy-verkko.fi
lyae.vy-verkko.fi
lyae.vy-verkko.fi
turvaviesti.vy-verkko.fi
sip.vy-verkko.fi
perusviesti-posti.vyv.fi
turvaviesti.vy-verkko.fi
vyvi-posti.vy-verkko.fi
vyvi-turva.vy-verkko.fi
sip.vy-verkko.fi
mail-out.vy-verkko.fi
vyvi-turva.vy-verkko.fi
vyvi-turva.vy-verkko.fi
sip.vy-verkko.fi
lyae.vy-verkko.fi
vyvi-some.vy-verkko.fi
vahva-pub.vnk.vy-verkko.fi
lyae.vy-verkko.fi
vyvi-posti.vy-verkko.fi
lyae.vy-verkko.fi
vyvi-turva.vy-verkko.fi
smtp-in.vy-verkko.fi
vahva-pub-qa.vnk.vy-verkko.fi
vyvi-turva.vy-verkko.fi
lyae.vy-verkko.fi
vyvi-posti.vy-verkko.fi
lyae.vy-verkko.fi
mail-in.vy-verkko.fi
sip.vy-verkko.fi
vyvi-turva.vy-verkko.fi
lyae.vy-verkko.fi
mail.vyv.fi
*.vy-verkko.fi
vyvi-kokous.vy-verkko.fi
ucc.vy-verkko.fi
vyvi-turva.vy-verkko.fi
ucc.vy-verkko.fi
sip.vy-verkko.fi
lyae.vy-verkko.fi
vyvi-posti.vy-verkko.fi
lyae.vy-verkko.fi
lyae.vy-verkko.fi
lyae.vy-verkko.fi
extlyncfarm01.vy-verkko.fi
sip.vy-verkko.fi
vyvi-posti.vy-verkko.fi
sip.vy-verkko.fi
ucc.vy-verkko.fi
lyae.vy-verkko.fi
extlyncfarm01.vy-verkko.fi
*.vy-verkko.fi
extlyncfarm01.vy-verkko.fi
sip.vy-verkko.fi
lyae.vy-verkko.fi
lyae.vy-verkko.fi
ucc.vy-verkko.fi
mail-in.vy-verkko.fi
sip.vy-verkko.fi
sip.vy-verkko.fi
sip.vy-verkko.fi
ucc.vy-verkko.fi
sip.vy-verkko.fi

Certificate

The complete raw certificate details for mail-137.vy-verkko.fi in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZmDlDbmk6dB1BXh8hMa
bB4UJB2bfNYqWQf9QvKcK5EoJg2T4jo5qQohcdqqPHPwiaxrKKnqJ3Ib9LLbCFLT
DU0aWkkHTm/imsaAchkxO8P1JThzsMV50lfVv89Cr3acHveG8IvAnNVhHI/uFJjH
CZImVAqOn4Ux4AsxiLYa8tcfAXaFZMlfH78o1T1rO0CG5vHQhI8ij9Hg+9KCHGix
nIYc0QRjKtQQqpGXYQlEclONUWmzvBnljDhr3P/w+1F90d6ZGVIQLUpU8Z15ejti
WPj56CwZiitvMWJcFlhO8vHbzF0+w0Yccp23r1vuS3nNIkqu7Hwx0JWhSxZov0Nc
ywIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7359088383170380132385583894509838
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'TeliaSonera'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'TeliaSonera Server CA v2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-20 10:19:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-19 10:19:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Jyvaskyla'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Valtion tieto- ja viestintatekniikkakeskus Valtori'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'mail-137.vy-verkko.fi'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23934740203681107802626207524437289336133035340221445384836035820235258951756985279988420452404512415802785514003316326853323070036928273003255128999288259965518215180325745805457846253584799458457514164886997530324638114571705940245464664177335321431095460390921821094613655926172790605723601411395349465879956091968198224212647270578704283576854214814961794283649881653322379309981261121413179179185176072359692956090959419427029747821146340401102930085355699960432654336166053572609941781625492682148665666870284903466740049021244538677249474174747597028855578025971254039099579336510935585410453026647382599883979
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 2f493c294fd70725f9c68cd564f5663d12832295
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3b812c5bc72393fc95100aa702d9c16cf0f83095
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (71 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://repository.trust.teliasonera.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail-137.vy-verkko.fi'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (70 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl-3.trust.teliasonera.com/teliasoneraservercav2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (122 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.trust.telia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repository.trust.teliasonera.com/teliasoneraservercav2.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		0046926a01241819ae598dafd524341d5d4db1f768191323117e81265798df100de38ab7ee7befa761bc69b9ace1c9d4a301fe60118c99f519a0103101a0ca41b0e3e229af4940577771f4a0ad9a0dbf2485ceed68ef352fa07041ba7c47c639c716b1671ad72175c5807708770c173daf75abc296062430f2d69816dff8e6427bdcfd585e18be74e0408bd11d4625b9d1392897aece29ca3adece29dae1c06b6894622f601d847867b2f0342b86ee02c803f550ebe266a2323be05c2d2480338ec3c40713a196e6c3561c8efb4cc6467caddcedb6c9dddfc46fee6c328750a7ae15eb9a1ec3a4bf247917fa29f3fa42c240b610422aeaefedda72d95f67c59c46b33dd1b1b66e5c37edd0771690167af4df9bc7ee6033f42b1bac4f09f191fa0a04e1731d2d3f5048aff842f6e4dcff2f31a91b7a2cf4ca716487cad340674c247bed0c7f40fdde841e909ca8cd33cd6f6c19bad4d3a7882556a234e0e024e7430ed289723c63aa146981bf862ab8f55873d65e5e73e1399903b5603411438d4289597f3c630ec895403329615e1b7aa25d368ff33da485b253bea98ae8b4e66f54e7e4bf628441ae8ded0b2811f335e1a9436b4ca7e9bb447eb893108b719f81673e9e6521fac86eafb104b32e13ea30f9d665953fdcbc0ccd78cb92c2369755097f53d6870ba362991bbe5eacf06ffffcbd6196a388ba67ed7c980ffe812e2a