palvelukeskustest.hel.fi

- Helsingin kaupunki -

Issued by Telia Server CA v3

About this certificate

This digital certificate with serial number 01:8e:55:f3:42:99:58:99:6d:8d:c7:90:f7:13:5f was issued on by Telia Finland Oyj.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Helsingin kaupunki

Organization: Helsingin kaupunki
Locality: HELSINKI
Country: FI

Telia Finland Oyj

Organization: Telia Finland Oyj
Country: FI

This certificate will expire on

Certificate Details

Serial Number (hex): 01:8e:55:f3:42:99:58:99:6d:8d:c7:90:f7:13:5f
Serial Number (int): 8079208701437724419849773592810335
Serial Number lenght: 113 bits, 15 octets

SubjectKeyId: 15:9d:b1:68:17:33:1e:cc:b6:70:f9:f9:49:19:39:02:fa:a8:1e:d2
AuthorityKeyId: 46:66:8d:0e:07:23:16:b0:ea:4f:05:eb:96:5a:de:a5:ee:c9:7e:a4

Fingerprint (sha1): c1:9d:f7:83:ab:90:99:25:56:38:51:41:a2:91:8d:bb:27:a4:0d:94
Fingerprint (sha256): 1d:8f:f3:a2:e4:85:66:88:66:43:9d:92:ba:84:f3:f5:8b:f5:0b:38:49:9b:5f:d7:2c:d7:a6:e1:51:82:30:a3

Issuing Certificate URL: http://cps.trust.telia.com/teliaservercav3.cer

Revocation information

OCSP Server: http://ocsp.trust.telia.com
CRL Distribution Point: http://httpcrl.trust.telia.com/teliaservercav3.crl

Check the revocation status for certificate palvelukeskustest.hel.fi

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for palvelukeskustest.hel.fi

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

testi.crm.hel.fi
auth-palvelukeskustest.crm.hel.fi
palvelukeskustest.hel.fi
dev-testi.crm.hel.fi
dev-palvelukeskustest.crm.hel.fi
auth-testi.crm.hel.fi

Other certificates including the domain name hel.fi

(limited to 100 certificates)
liikuntakauppa.hel.fi
digi.hel.fi
shared2.anders.fi
aineistopankki.hel.fi
www.kasarmitorinkesa.hel.fi
*.edu.hel.fi
koulurekisteri.hel.fi
*.movendosplatform.com
numerot.hel.fi
dev.hel.fi
misi.hel.fi
kehmet.hel.fi
tilanvaraus.edu.hel.fi
muistopaikat1918.hel.fi
linkedevents.hel.fi
ohjaamo.hel.fi
varaamo.hel.fi
digineuvonta.hel.fi
palvelukeskus.crm.hel.fi
kerrokantasi.hel.fi
securemail2.hel.fi
tyoterveys.ajanvaraus.hel.fi
toimintaymparisto.hel.fi
api.hel.fi
kerrokantasi.hel.fi
beeblebrox.edu.hel.fi
shared2.anders.fi
keskustelu.hel.fi
omastadi.hel.fi
aromi.hel.fi
salasana.hel.fi
huonevaraus.hel.ninja
linkedevents.hel.fi
pohjavesi.hel.fi
opehuone.edu.hel.fi
opehuone.fi
uutiskirjeet.hel.fi
varaamo.hel.fi
webmail.ish.edu.hel.fi
digi.hel.fi
helluntaiseurakunta.fi
osallistu.hel.fi
ideapaahtimo.osallistu.hel.fi
*.movendosplatform.com
kruunusillat.hel.fi
helvi.hel.fi
shared2.anders.fi
tcm.hel.fi
huonevaraus.hel.ninja
omastadi.hel.fi
newsletter-newcohelsinki.hel.fi
finalsite.net
numerot.helmi.hel.fi
kaupunkitilaohje.hel.fi
koulurekisteri.hel.fi
linkedevents.hel.fi
tunnistus.hel.fi
*.lib.hel.fi
*.movendosplatform.com
kerrokantasi.hel.fi
koulurekisteri.hel.fi
shared2.anders.fi
uutiskirjeet.hel.fi
www.att.hel.fi
nextlevel.hel.fi
nextlevel.hel.fi
numerot.helmi.hel.fi
geoserver.hel.fi
linkedevents.hel.fi
www.hel.fi
eterveys.hel.fi
ohjaamo.hel.fi
palvelukartta.hel.fi
linkedevents.hel.fi
webcal.edu.hel.fi
api.hel.fi
www.influenssarokotus.hel.fi
geoserver.hel.fi
palvelukeskustest.crm.hel.fi
sts.hel.fi
servicekarta.hel.fi
turvalomake.hel.fi
sip.hel.fi
palvelukartta.hel.fi
winhawiivi.edu.hel.fi
digi.hel.fi
helluntaiseurakunta.fi
brand.hel.fi
numerot.hel.fi
uutiskirjeet.hel.fi
misi.hel.fi
palvelukartta.hel.fi
numerot.helmi.hel.fi
www.kruunusillat.fi
dev.hel.fi
beeblebrox.edu.hel.fi
nextlevel.hel.fi
palvelukeskustest.hel.fi
tilajakehitys.hel.fi
*.movendosplatform.com

Certificate

The complete raw certificate details for palvelukeskustest.hel.fi in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Hu5Yz2sRf5xePUnjDKI
eqXaC5IAIVbikE68HF1dbO29n6/c/ymr3talujcwDZ+jUIjAAs/R8nSjlmCW7RAV
WOemhza0o2Ur5QOWLgTpFFX5rw0nGR7jNDGzz/Zy8IcOwwXvxC0Z1eWxn7bNkOHR
KumPiTIIUS5rEqb0mTTCsxoq8HmEhCXJzGUp9a4kepGA/Yx6pPaYobxcDALDcPMk
ZWPWpTMv/6MUGqTDXZXLHRC/EIV6Zdjf5BOVpriv1uxRKxUllMInPKjVXv/1ZO6j
ePF+rczt+hIUc1VYMu5rv/6U9UYNMOtCaUVigsZTj4HE43rKIDfvxzXuaTDxNF/Y
JwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8079208701437724419849773592810335
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Telia Finland Oyj'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Telia Server CA v3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-19 09:03:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-19 09:03:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'HELSINKI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Helsingin kaupunki'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'palvelukeskustest.hel.fi'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26318578095335008331482121047748628912008303811476330412585898531823417875882891832530264148492690683938687849511906596775071208412416166922395690239750961249995203288091654772537269149798171152239860997796900706594769878395540389738475809290481592394965135926879132511241546139099694528958870926045291357065433037491028063744548947851778490609621911109153926939415075137645081894182360172910253702088735062734028183694686540118727569665248715313761025326808042343512684631801772637747564026185610417564318181597073719232291709604240609537085377804522068287757819307101027490826235266828118657235929083353646940280871
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 46668d0e072316b0ea4f05eb965adea5eec97ea4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							159db16817331eccb670f9f949193902faa81ed2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.trust.telia.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (161 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testi.crm.hel.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth-palvelukeskustest.crm.hel.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'palvelukeskustest.hel.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-testi.crm.hel.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-palvelukeskustest.crm.hel.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth-testi.crm.hel.fi'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://httpcrl.trust.telia.com/teliaservercav3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.trust.telia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cps.trust.telia.com/teliaservercav3.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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