op-kassa.fi

Issued by Amazon

About this certificate

This digital certificate with serial number 05:08:af:5d:3b:05:d0:47:1d:43:dc:bb:76:b7:1e:eb was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=op-kassa.fi

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:08:af:5d:3b:05:d0:47:1d:43:dc:bb:76:b7:1e:eb
Serial Number (int): 6691235161959254627068336309064376043
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 23:7d:89:f9:94:9a:71:9c:96:df:88:aa:da:55:1e:aa:67:5f:da:77
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): be:21:0c:f1:1e:c3:0d:6e:fe:07:be:50:50:48:29:aa:ce:0d:b4:1f
Fingerprint (sha256): 2c:e4:88:ed:3c:78:24:cc:87:e9:19:b6:0b:5a:6b:44:e9:53:e7:8d:cc:ce:33:19:d4:d3:d7:50:62:c8:ed:3c

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate op-kassa.fi

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for op-kassa.fi

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

op-kassa.fi

Other certificates including the domain name op-kassa.fi

(limited to 100 certificates)
prod.op-kassa.fi
tuki.op-kassa.fi
tuki.op-kassa.fi
api-nc.op-kassa.fi
www.op-kassa.fi
qa-shopify.op-kassa.fi
mp.op-kassa.fi
rd.op-kassa.fi
op-kassa.fi
tuki.op-kassa.fi
op-kassa.fi
www.op-kassa.fi
qa.op-kassa.fi
rd.op-kassa.fi
www.op-kassa.fi
qa.op-kassa.fi
*.opkassa.aws.kehi.op-palvelut.net
op-kassa.fi
op-kassa.fi
hallinta.op-kassa.fi
op-kassa.fi
qa.op-kassa.fi
tuki.op-kassa.fi
qa-qrpay.op-kassa.fi
qa.op-kassa.fi
prod.op-kassa.fi
qa.op-kassa.fi
*.qav2.op-kassa.fi
status.op-kassa.fi
op-kassa.fi
www.op-kassa.fi
shopify.op-kassa.fi
rd.op-kassa.fi
op-kassa.fi
qa.op-kassa.fi
api.op-kassa.fi
shopify.op-kassa.fi
*.op-kassa.fi
hallinta.op-kassa.fi
www.op-kassa.fi
rd.op-kassa.fi
mpos-qa.op-kassa.fi
rd.op-kassa.fi
qa.op-kassa.fi
opkassa.aws.tuot.op-palvelut.fi
opkassa.aws.tuot.op-palvelut.fi
api.op-kassa.fi
hallinta.op-kassa.fi
qa.op-kassa.fi
op-kassa.fi
shopify.op-kassa.fi
www.op-kassa.fi
qa-qrpay.op-kassa.fi
pivokassa.fi
hallinta.op-kassa.fi
qrpay.op-kassa.fi
www.op-kassa.fi
www.op-kassa.fi
mp.op-kassa.fi
rd.op-kassa.fi
api-nc-hallinta.op-kassa.fi
mpos-qa.op-kassa.fi
www.op-kassa.fi
*.opkassa.aws.kehi.op-palvelut.net
rd.op-kassa.fi
mp.op-kassa.fi
opkassa.aws.tuot.op-palvelut.fi
api-nc-shopify.op-kassa.fi
mp.op-kassa.fi
qa.op-kassa.fi
qa.op-kassa.fi
rd.op-kassa.fi
qa-shopify.op-kassa.fi
mpos-qa.op-kassa.fi
qrpay.op-kassa.fi
qa.op-kassa.fi
api.op-kassa.fi
tuki.op-kassa.fi
www.op-kassa.fi
api.op-kassa.fi
opkassa.aws.tuot.op-palvelut.fi
dev.op-kassa.fi
*.opkassa.aws.kehi.op-palvelut.net
mp.op-kassa.fi
www.op-kassa.fi

Certificate

The complete raw certificate details for op-kassa.fi in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzb5p4bqBmJsvYZBGzbAc
0e5+al91j3AYM8cmHAF4ggtEqEGsiqWDST9v/acKOGmS5+ecw8wpUb4/1d24hbCq
vbO7WGUxn9Wpw6W/6RLoWYfDdUn/EiGOWlbgxcWaXfu+DDDnoiyRgIBHdBp/H3l4
9hEqAXGIMHawAieirouR4AyabM/wrXrzJPy98oByK2EbeiFqjG9OR2cCIaM9N7aZ
JkHfBFu6TpC258Q8dtIuQo8P9UEakQ6mv+8bOPvkdZ+XDT8vGIOqRvt9gxLJCrFd
Unqhkv1wWLQJvHbuAdDONjJcBhbWKrIkuknBDoHynigGqjP0hC/bixbCLmDIIjou
sQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6691235161959254627068336309064376043
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-09 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'op-kassa.fi'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25972748964063474555709804652651316687873210141965351640848577581894139985835107195889398014016885396582916578947477008487585061175139048504697820806450254355245384010466025042379631758698836968153046958307131040884764240169529080366570799161557960013676887081591958384521717613261992260195482293838019607744059697847714685838881658161278756986604974734535576811519093847878905680734392764081560384240765984600661039810121992470047929794946188631292602882333188638559844071133997442937564808705441328777196255819204929937526550754442626675667722294278427508779491453339178217703617249278777468078291842332375002001073
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							237d89f9949a719c96df88aada551eaa675fda77
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'op-kassa.fi'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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