aromi.hel.fi

- Helsingin kaupunki -

Issued by Telia Server CA v3

About this certificate

This digital certificate with serial number 01:88:51:8f:46:d7:91:ec:30:c1:67:c4:d1:0c:d7 was issued on by Telia Finland Oyj.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Helsingin kaupunki

Organization: Helsingin kaupunki
Locality: HELSINKI
Country: FI

Telia Finland Oyj

Organization: Telia Finland Oyj
Country: FI

This certificate will expire on

Certificate Details

Serial Number (hex): 01:88:51:8f:46:d7:91:ec:30:c1:67:c4:d1:0c:d7
Serial Number (int): 7957166387794322633924574304079063
Serial Number lenght: 113 bits, 15 octets

SubjectKeyId: 3a:6e:36:27:a9:f9:06:d4:4b:55:c6:ed:a7:0b:12:b5:5d:03:57:b9
AuthorityKeyId: 46:66:8d:0e:07:23:16:b0:ea:4f:05:eb:96:5a:de:a5:ee:c9:7e:a4

Fingerprint (sha1): 21:f6:39:fd:a3:b8:25:d1:47:e6:0b:f9:f9:58:ff:c3:d5:ba:6f:ff
Fingerprint (sha256): 1f:4e:21:c0:ba:6b:54:79:13:2e:20:10:88:41:59:9b:9b:75:bb:92:26:22:7b:34:cd:59:ab:15:41:ec:23:11

Issuing Certificate URL: http://cps.trust.telia.com/teliaservercav3.cer

Revocation information

OCSP Server: http://ocsp.trust.telia.com
CRL Distribution Point: http://httpcrl.trust.telia.com/teliaservercav3.crl

Check the revocation status for certificate aromi.hel.fi

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aromi.hel.fi

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aromi.hel.fi

Other certificates including the domain name hel.fi

(limited to 100 certificates)
liikuntakauppa.hel.fi
digi.hel.fi
shared2.anders.fi
aineistopankki.hel.fi
www.kasarmitorinkesa.hel.fi
*.edu.hel.fi
koulurekisteri.hel.fi
*.movendosplatform.com
numerot.hel.fi
dev.hel.fi
misi.hel.fi
kehmet.hel.fi
tilanvaraus.edu.hel.fi
muistopaikat1918.hel.fi
linkedevents.hel.fi
ohjaamo.hel.fi
varaamo.hel.fi
digineuvonta.hel.fi
palvelukeskus.crm.hel.fi
kerrokantasi.hel.fi
securemail2.hel.fi
tyoterveys.ajanvaraus.hel.fi
toimintaymparisto.hel.fi
api.hel.fi
kerrokantasi.hel.fi
beeblebrox.edu.hel.fi
shared2.anders.fi
keskustelu.hel.fi
omastadi.hel.fi
huonevaraus.hel.ninja
linkedevents.hel.fi
pohjavesi.hel.fi
opehuone.edu.hel.fi
opehuone.fi
uutiskirjeet.hel.fi
varaamo.hel.fi
webmail.ish.edu.hel.fi
digi.hel.fi
helluntaiseurakunta.fi
osallistu.hel.fi
ideapaahtimo.osallistu.hel.fi
*.movendosplatform.com
kruunusillat.hel.fi
helvi.hel.fi
shared2.anders.fi
tcm.hel.fi
huonevaraus.hel.ninja
omastadi.hel.fi
finalsite.net
numerot.helmi.hel.fi
kaupunkitilaohje.hel.fi
koulurekisteri.hel.fi
linkedevents.hel.fi
tunnistus.hel.fi
*.lib.hel.fi
*.movendosplatform.com
kerrokantasi.hel.fi
koulurekisteri.hel.fi
shared2.anders.fi
uutiskirjeet.hel.fi
www.att.hel.fi
nextlevel.hel.fi
nextlevel.hel.fi
numerot.helmi.hel.fi
geoserver.hel.fi
linkedevents.hel.fi
www.hel.fi
eterveys.hel.fi
ohjaamo.hel.fi
palvelukartta.hel.fi
linkedevents.hel.fi
webcal.edu.hel.fi
api.hel.fi
www.influenssarokotus.hel.fi
geoserver.hel.fi
palvelukeskustest.crm.hel.fi
sts.hel.fi
servicekarta.hel.fi
turvalomake.hel.fi
sip.hel.fi
palvelukartta.hel.fi
winhawiivi.edu.hel.fi
digi.hel.fi
helluntaiseurakunta.fi
brand.hel.fi
numerot.hel.fi
uutiskirjeet.hel.fi
misi.hel.fi
palvelukartta.hel.fi
numerot.helmi.hel.fi
www.kruunusillat.fi
dev.hel.fi
beeblebrox.edu.hel.fi
nextlevel.hel.fi
tilajakehitys.hel.fi
*.movendosplatform.com
dev.hel.fi
tiedonohjaus.hel.fi
tiedonohjaus.hel.fi
api.hel.fi

Certificate

The complete raw certificate details for aromi.hel.fi in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYLK+u9PXEd06yEKbp0N
di5XvQ9OVV2BO6KA3dW20b/uZivNlI/uxayGh3nBTNkFumTya7nfNVTOebs5ghe4
YdGFGkkUxDlN+CKIr6UeTBaN+WMwQUrCewfL8HMH0MsSA1f7NHfKm0PzKBwKadZa
fdY/eAuUEhLrDsNsbKMcfXtF8PsQVVY2UYWoyoUrcFKRsmUnADMEvWyQRd5lvQel
ZgGZ2bQPU8La1BnaZMzJ6FAYDMP1xGe+mJNPkN9Jj7BsQskb53RRxbmtTfbEY70D
chplHrRdBrgWvgoERFVcyqUxYUVZUxiOEGHb06AfvcYb7Y1+ITwTsOAO2XFLOl58
fQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7957166387794322633924574304079063
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Telia Finland Oyj'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Telia Server CA v3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-25 06:18:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-24 06:18:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'HELSINKI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Helsingin kaupunki'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'aromi.hel.fi'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22408676357584869483777650460504378740006238620315103047948704052078607422900536227871293547201617177867460063857877178818090019381795655657468569873583251507639633598143776638995415249763672216445725849539783774746341388315257557623644862679643471513188826867628393480371321228995912445759090076147363224909166567774509710906906618113839610963736480246474427995480496591556055960775193605082991680434700752326140961708022805806295286032653354702638588601893458470425988135793911472571227661635832134825179485484664650494458495909584220098894367750220948970585940912812150775736134495877958943493365078117708464028797
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 46668d0e072316b0ea4f05eb965adea5eec97ea4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3a6e3627a9f906d44b55c6eda70b12b55d0357b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.trust.telia.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aromi.hel.fi'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://httpcrl.trust.telia.com/teliaservercav3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.trust.telia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cps.trust.telia.com/teliaservercav3.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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