vyvi-turva.vyv.fi

- Valtion tieto- ja viestintatekniikkakeskus Valtori -

Issued by TeliaSonera Server CA v2

About this certificate

This digital certificate with serial number 01:6f:f0:69:1d:4c:6e:63:a1:35:59:d8:8c:75:4b was issued on by TeliaSonera.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Valtion tieto- ja viestintatekniikkakeskus Valtori

Organization: Valtion tieto- ja viestintatekniikkakeskus Valtori
Locality: Jyvaskyla
Country: FI

TeliaSonera

Organization: TeliaSonera
Country: FI

This certificate has expire since

Certificate Details

Serial Number (hex): 01:6f:f0:69:1d:4c:6e:63:a1:35:59:d8:8c:75:4b
Serial Number (int): 7462691614889402670291696032183627
Serial Number lenght: 113 bits, 15 octets

SubjectKeyId: cf:bb:c2:eb:65:b2:e2:85:ea:04:48:6a:b9:c3:08:05:59:d8:02:5c
AuthorityKeyId: 2f:49:3c:29:4f:d7:07:25:f9:c6:8c:d5:64:f5:66:3d:12:83:22:95

Fingerprint (sha1): 5c:fb:33:ed:63:0d:f7:48:25:72:4e:1b:8a:2d:e5:21:f1:3e:2b:9a
Fingerprint (sha256): 28:a5:f4:84:68:4b:64:26:1c:e4:b0:23:ed:fe:e7:58:f8:41:a1:fe:a6:db:0c:77:e3:aa:b3:1f:b9:f6:0b:82

Issuing Certificate URL: http://repository.trust.teliasonera.com/teliasoneraservercav2.cer

Revocation information

OCSP Server: http://ocsp.trust.telia.com
CRL Distribution Point: http://crl-3.trust.teliasonera.com/teliasoneraservercav2.crl

Check the revocation status for certificate vyvi-turva.vyv.fi

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for vyvi-turva.vyv.fi

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

vyvi-turva.vyv.fi

Other certificates including the domain name vyv.fi

(limited to 100 certificates)
mail.vyv.fi
vyvi-posti.vyv.fi
vmcreset.vyv.fi
valveri-out.valvira.vyv.fi
vahva-pub.vnk.vyv.fi
vaalijira.om.vyv.fi
pointti-virtu.palkeet.vyv.fi
*.tas.vyv.fi
vattidp.vyv.fi
osb-client.dev.via.valtori.vyv.fi
herkka-prod.palkeet.vyv.fi
louhi.valvira.vyv.fi
pr0.integraatiopalvelu.fi
pkah.palkeet.vyv.fi
avainqa.valtori.vyv.fi
test1-client.dev.via.valtori.vyv.fi
mail.vyv.fi
qa.sendi.vk.vyv.fi
lifecare.vth.vyv.fi
dev.coco.vk.vyv.fi
ipam-testi.vyv.fi
vahva-pub-test2.vnk.vyv.fi
qa.valvira.vyv.fi
test01.yjasp.vyv.fi
*.stuk.vyv.fi
ims.valtori.vyv.fi
prod.valvira.vyv.fi
vyvi-posti.vyv.fi
rondo.vyv.fi
*.valvira.vyv.fi
draw-export.valtori.vyv.fi
qat.integraatiopalvelu.fi
*.vyv.fi
tira.vrk.vyv.fi
itte.senaatti.vyv.fi
RMX4.vyv.fi
rmx7.vyv.fi
vyvi-turva.vyv.fi
pr0.integraatiopalvelu.fi
vyvi-posti.vyv.fi
qa.fimea.vyv.fi
api.hankeikkuna-test.vnk.vyv.fi
vkh.2016.vrk.vyv.fi
vkaztestressuschedulerapiapp.vk.vyv.fi
dma.vyv.fi
eucaris.vyv.fi
talsu.rvv.vyv.fi
qat.integraatiopalvelu.fi
plmreset.vyv.fi
sarkadoc.cgi.vyv.fi
snow.ork.vyv.fi
dokumenttienhallinta.vrk.vyv.fi
omcreset.vyv.fi
api.hankeikkuna.vyv.fi
draw.valtori.vyv.fi
top.valtori.vyv.fi
vyvi-posti.vyv.fi
*.test.rpa.palkeet.vyv.fi
ry01.om.vyv.fi
soar.vyv.fi
rmx1.vyv.fi
mediapankki.stuk.vyv.fi
soartest.vyv.fi
*.dev.via.valtori.vyv.fi
RPCC04.vyv.fi
snow.ork.vyv.fi
kvh.qa.suomi.vyv.fi
temcreset.vyv.fi
qa.yjasp.vyv.fi
postikaranteeni.vyv.fi
test2-client.dev.via.valtori.vyv.fi
eucaris.vyv.fi
tikku.vyv.fi
mediapankki.stuk.vyv.fi
stmreset.vyv.fi
asianhallinta.dev.vrk.vyv.fi
vyvi-spikaviesti.vyv.fi
vkh.2016.vrk.vyv.fi
temtilasto.vyv.fi
asianhallinta.test.vrk.vyv.fi
*.vyv.fi
vmbukettipub2.vyv.fi
mediapankki.stuk.vyv.fi
dynasty.tukija.vyv.fi
asianhallinta.vrk.vyv.fi
dev.cloud.valvira.vyv.fi
ims.testi.valtori.vyv.fi
rmx2.vyv.fi
talsu.qa.rvv.vyv.fi
jotate.lvm.vyv.fi
palvelut.om.vyv.fi
kvh.suomi.vyv.fi
*.vvp.suomi.vyv.fi
qat.integraatiopalvelu.fi
temreset.vyv.fi
rmx5.vyv.fi
*.core.vktds.vyv.fi
testeucaris.vyv.fi
pr0.integraatiopalvelu.fi
testeucaris.vyv.fi

Certificate

The complete raw certificate details for vyvi-turva.vyv.fi in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7462691614889402670291696032183627
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'TeliaSonera'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'TeliaSonera Server CA v2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-29 08:26:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-28 08:26:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Jyvaskyla'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Valtion tieto- ja viestintatekniikkakeskus Valtori'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'vyvi-turva.vyv.fi'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 710101131925416841550390866994395127895977310232765780314077462192999957955398963931907295451133393428066375569056096413101925763309518030584932178049337400970218299131956361988018079073104719059969122223142421289362237751692688945649645784882037241745138560623499373423512705192128217964626701973388030967983931930035501283199227554494359613732002446506568393338989727381241626594925828453170697219181575040654247802109627263182086046455816755290408250355278017781510129624264054895307477952697853556405866443234837353335052465571029923388552001606776816194638488121584817109167389301073605361505128357777389757638016125780351330827556156215391474281514250647477339730230088087631331943899260411951516640076325768313418884271547107957367544596542506350977550231126438219995312910181046123430479348443936069614727263939013341518165301262234448311899959450915372718941990019918066731113884318187783488161708450124529982207144661918045318196401920609188354311391223461172501153762643212938671232440774427614724165279005843722813632411054158400275322175563956024630000746152076945552004901530318142748618193669287137628021114600542558575192836403078099951327852858110960804394293918128094561806860831692895509780600821267256723029785701
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 2f493c294fd70725f9c68cd564f5663d12832295
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cfbbc2eb65b2e285ea04486ab9c3080559d8025c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (71 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://repository.trust.teliasonera.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vyvi-turva.vyv.fi'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (70 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl-3.trust.teliasonera.com/teliasoneraservercav2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (122 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.trust.telia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repository.trust.teliasonera.com/teliasoneraservercav2.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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