web.fortum.fi

- Fortum Oyj -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 42:9b:bb:b2:a9:3b:da:df:dc:f1:31:3a:cc:00:ce:e8 was issued on by Entrust, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Fortum Oyj

Organization: Fortum Oyj
Locality: Espoo
Country: FI

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 42:9b:bb:b2:a9:3b:da:df:dc:f1:31:3a:cc:00:ce:e8
Serial Number (int): 88537660700461483184097196738359643880
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: fc:4e:17:a5:0d:b5:01:87:25:ec:b8:54:12:1f:dd:d8:ae:1b:27:e2
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 0f:06:da:11:2b:a1:cd:3f:fa:6b:78:da:a1:72:95:49:d2:bb:ba:2a
Fingerprint (sha256): 24:d6:64:c7:7b:0e:f4:b1:6c:2d:34:2a:26:c3:c0:52:bf:67:f2:09:fe:12:bc:1a:e0:9a:93:84:bd:79:c4:18

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate web.fortum.fi

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for web.fortum.fi

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

web.fortum.fi

Other certificates including the domain name fortum.fi

(limited to 100 certificates)
testproplus.fortum.fi
kampanjat.fortum.fi
arkisto.fortum.fi
yhdessa.fortum.fi
aurinkotuotanto.fortum.fi
store.fortum.fi
www.fortum.fi
yhdessa.fortum.fi
functestproplus.fortum.fi
qavalpas.fortum.fi
kampanjat.fortum.fi
emp.fortum.fi
kotilataus.fortum.fi
www.fortum.com
yhdessa.fortum.fi
knowzero.org
www.fortum.com
kotilataus.fortum.fi
arkisto.fortum.fi
aurinkolaskuri.fortum.fi
asiakkaalle.fortum.fi
uutiskirje.fortum.fi
phillipscountyreview.enotice.io
web.fortum.fi
proplus.fortum.fi
aurinkotuotanto.fortum.fi
web.fortum.fi
qavalpas.fortum.fi
cloud.fortum.com
kauppa.fortum.fi
powerportal.fortum.com
kampanjat.fortum.fi
valpas.fortum.fi
uutiskirje.fortum.fi
omafiksu.fortum.fi
smartliving.fortum.fi
arkisto.fortum.fi
energianseuranta.fortum.fi
varaavafiksu.fortum.fi
uutiskirje.fortum.fi
www.fortum.fi
smart.fortum.fi
appsprod.fortum.fi
circoplastics.com
fiksuenergianseuranta.fortum.fi
smartliving.fortum.fi
web.fortum.fi
online.fortum.fi
aurinkotuotanto.fortum.fi
asiakkaalle.fortum.fi
arkisto.fortum.fi
jeremysresu.me
uutiskirje.fortum.fi
qaemp.fortum.fi
appsprod.fortum.fi
kampanjat.fortum.fi
energianseuranta.fortum.fi
appsprod.fortum.fi
proplus.fortum.fi
kauppa.fortum.fi
arkisto.fortum.fi
www.fortum.com
circoplastics.com
arkisto.fortum.fi
proplus.fortum.fi
cloud.fortum.com
smart.fortum.fi
aurinkolaskuri.fortum.fi
arkisto.fortum.fi
kampanjat.fortum.fi
helppo.fortum.fi
smart.fortum.fi
arkisto.fortum.fi
appsprod.fortum.fi
aurinkolaskuri.fortum.fi
circoplastics.com
online.fortum.fi
web.fortum.fi
design.fortum.fi
appsprod.fortum.fi
smart.fortum.fi
mylostphone.com
www.fortum.com
www.fortum.com
aurinkolaskuri.fortum.fi
mint.dgkingdom.io
web.fortum.fi
web.fortum.fi
www.fortum.com
www.fortum.com
verkkopalvelut.fortum.fi
yhdessa.fortum.fi
www.fortum.com
www.fortum.com
omafiksu.fortum.fi
aurinkolaskuri.fortum.fi
store.fortum.fi
asiakkaalle.fortum.fi
omafiksu.fortum.fi
qaemp.fortum.fi

Certificate

The complete raw certificate details for web.fortum.fi in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi6ni49CWC0r68jhnoMfs
qhvMwTLo0FJvxhhEuHiLmi5zIsYD79FeLKkIWka2E0UM1l9d3Gx4y2w8/mKHX/0A
0/N3AH148yHh48OAoZ/zd0eWp5kOi1/VHhzeHTSCFby1lh9SGOSvmmXmwBAq8kBH
P4vOLgPhiZIqWSGIo9gubnoBZFZxS+cjiuuPh66edtc2SvYBAKrfFATsq8fJk3h4
WGCQtc+IrW6DpdeSxZoySg4AqfckQ9mG3SlNgDwA4d4YwntPHim3Zyaa/1Ubo4ar
LcTUFt7FLhB3ZbLGbNuRWgoP3e1RoJVeOeFnFP8N6O9RAaNsJHhvIhi3JQZua2bB
/wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 88537660700461483184097196738359643880
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-18 13:26:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-04-10 13:26:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Espoo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Fortum Oyj'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'web.fortum.fi'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17630898441530829284179526709020390548043258428266893482370608155673377609962574848779937909534749809734185400569874094142547770887097395592309806262797114621811916469550183499249136332764676191490244431419138481518749449673936569807631365144735512921840632838534883817849528236105268848202051352762587655564679592404416239408975199700484431001449786723165727511559371598505666042266400544409374241248263440414619257626048723613327528410546258045068184266961583687174569888405967946580160038776676511362434194036706083814032789471934358269017441421612946632943634917769665317103187499047014443899649723922734454850047
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fc4e17a50db5018725ecb854121fddd8ae1b27e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web.fortum.fi'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00c4dffa1b1bd6f0b8670106a4dad25a3e3695b0ded3bb6d3a6646b59a6363b1a02ac9ae9fff66255942d44fad47b1fdb9a3ed0ff62695f2be2ef5e4604179f2cbe3c07227f62d156a76131b3fa39f3a0ece856dc51143289b8393349fdd0d466d1ab0f1488153a0bfb6a950d4c2f2e93555fc306e9e127ab06d40890fe000516f5d296b47c942794999bd1a4d4ba10664ac6fc4db630b6d1a71faa7f6c98393fbe3688557ca53ee8d8780bdc9d1cdbfebe5098686493e43ecd9badb1c080b492d2508681954e4db1baadf6cf2062cc9a8d5e7d8b75ddb20313d30f7390812ec56cc13549d4804919adccc8ea51ebea5f98274870fec527115c1b68579fb02c33d