elavtal.fortum.se

- Fortum Oyj -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 55:af:58:ef:12:07:e1:48:85:5a:22:7a:5c:27:39:c1 was issued on by Entrust, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Fortum Oyj

Organization: Fortum Oyj
Locality: Espoo
Country: FI

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 55:af:58:ef:12:07:e1:48:85:5a:22:7a:5c:27:39:c1
Serial Number (int): 113894835385117662815745192478965709249
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 2b:d1:42:db:27:57:7c:91:15:b9:13:4c:c6:63:f3:5a:f5:e8:cd:22
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 7f:5c:e6:29:fa:a2:97:9b:76:e1:80:ea:70:a0:a7:18:11:25:d9:89
Fingerprint (sha256): 44:03:a0:78:20:dd:ec:bf:18:f7:93:10:39:4f:aa:fc:6e:ce:08:dd:95:6c:4b:e2:05:55:0d:b9:0a:22:ab:cc

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate elavtal.fortum.se

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for elavtal.fortum.se

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

elavtal.fortum.se

Other certificates including the domain name fortum.se

(limited to 100 certificates)
villaerbjudande.fortum.se
flytta.fortum.se
solkalkylator.fortum.se
flytta.fortum.se
solkalkylator.fortum.se
www.swingdata.app
lojal.fortum.se
elavtal.fortum.se
www.fortum.com
dc.3decorz.com
elavtal.fortum.se
www.fortum.com
fortum.se
refer.acaciamoney.com
barbaraantelo.com
flytta.fortum.se
devtools.minasidor.fortum.se
fortum.se
elavtal.fortum.se
flytta.fortum.se
flytta.fortum.se
trygg.fortum.se
*.fortum.se
cockpit.joinsherpa.io
cloud.fortum.com
powerportal.fortum.com
kampanj.fortum.se
maia.fortum.se
partners.fortum.se
villaerbjudande.fortum.se
api.fortum.se
media.fortum.se
solkalkylator.fortum.se
elavtal.fortum.se
circoplastics.com
solkalkylator.fortum.se
dc.3decorz.com
installator.fortum.se
elavtal.fortum.se
maia.fortum.se
hemmaladdning.fortum.se
www.fortum.com
circoplastics.com
cloud.fortum.com
hemmaladdning.fortum.se
kampanj.fortum.se
samtycke.fortum.se
kampanj.fortum.se
circoplastics.com
www.fortum.com
www.fortum.com
elavtal.fortum.se
www.fortum.com
www.fortum.com
www.fortum.com
www.fortum.com
testapi.fortum.se
www.fortum.com
circoplastics.com
design.fortum.se
circoplastics.com
sonnenkindprinzip.de
flytta.fortum.se
idskydd.fortum.se
www.fortum.com
flytta.fortum.se
www.fortum.com
edw.fortum.se
kampanj.fortum.se
refer.acaciamoney.com
www.fortum.com
www.fortum.com
www.fortum.com
api.fortum.se
oppenfjarrvarme.fortum.se
emp.fortum.fi
solkalkylator.fortum.se
foretag.fortum.se
circoplastics.com
villaerbjudande.fortum.se
www.fortum.com
testapi.fortum.se
fastighetsagare.fortum.se
elavtaldev.fortum.se
www.raugh.club
energy.fortum.se
elavtal.fortum.se
edw.fortum.se
fortexadmin.fortum.se
www.fortum.com
edw.fortum.se
elavtal.fortum.se
www.fortum.com
design.fortum.fi
varme.fortum.se
kampanj.fortum.se
flytta.fortum.se
www.fortum.com
installator.fortum.se
elavtal.fortum.se

Certificate

The complete raw certificate details for elavtal.fortum.se in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLkz1NX/2QnEkvwSAQvw
MWhUVfFiM6dOvh4GnpyL9O8TYdaqgh/2j2Xy4yboYjbO2fAccLjv1Z3yyEkRtWDW
L61w6N9kPrb27nK5FyApT6woC7VLp74aW1wSvSa49OPp51OVvY+BSOUbTpO0ebwe
naMTE9KiQD718HuaFKtphaqQv7fhFbTcETDUDEzmgUyIdDPLhbrObmZBe3d7fo+C
WdI5n0cPVtzTJTbQurL1fVr0Ua5mJYPANdgxXkCfpsBsIYvDpYlKogVhgI/Reey4
57Wu9pJOORJL6gkTkrCwdUgiiIfRwWZuK6dvUt9YFI+BRaFGGS217jU81DPmPd54
RQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 113894835385117662815745192478965709249
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-12 09:45:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-08 09:45:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Espoo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Fortum Oyj'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'elavtal.fortum.se'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21804315194122671179300636535483249279565441339442066130153366834352818695805134810516261625208049498731130449043597696114341695178922777507344360092347420690550099919776910045534579962762819553179889767060605351612263182769866240301589591600076134809988977501815968732123719908226134795760001400459676833767854684176689790936655007879170060651304019310075638028250407941488931522007699679374514951283579823999017207728726558350563142067500605075534681429005071451517480945630608884302287913790360030128729049369086244619161193568061412267062339941579198001470078396270618472760306738447417776602118319151159464327237
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2bd142db27577c9115b9134cc663f35af5e8cd22
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elavtal.fortum.se'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							0168007600e6d2316340778cc1104106d771b9cec1d240f6968486fbba87321dfd1e378e500000018ed1b2659e0000040300473045022031dbd52889a9289f002a04afc7a2f61fb5abb819a8f996865b197c6dcb16778c022100fcc9b406931707ddab09d541971e09ca58da3bbe725f2c326f26f0a05d70190d007600a2e30ae445efbdad9b7e38ed47677753d7825b8494d72b5e1b2cc4b950a447e70000018ed1b26596000004030047304502200f1fbdcc52266dc4ec09572c3bf7dc5fd81f6734d0213832697523c484541547022100999d577b63242ad5911b8527b333f66bb72dc714c690ceb442b13e425262dcf40076004e75a3275c9a10c3385b6cd4df3f52eb1df0e08e1b8d69c0b1fa64b1629a39df0000018ed1b265bf000004030047304502203571ec40ba079963f50d82f156527d326fb0997d9114c8cc2ce980b2c1e29c00022100d270c2b4b4ac256df5d4973ed841b53bb066b9e5c362500303eb395062dbb9ea
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		006c8e14392c4c32a8cc6a8624da17fe925d3ca3df338382948b54d735906e65bea473372fa0a28220e4796f1852832f5e502bdab81d3c3633f731dd02ba0cc13e4277c4d164dd8b35faaee66b1670b24af85c030e08165bb4af09981abd7bcfb790062cd172111f93cf170798090ac91681ab9c13bc6b2db5653ba9707d88e3fec5f572b1299000d0cc837dd393d67e05cab1c32a8ce457037af40b1c6632779b7e4642afadbb8c6b92b7398addee7701dcde245939425fddb47d487a452dc87e87b818c222b1354f73e719be61062316e0f2059953fe945474aa3624e4fc4697a3a0cc4ede4b71239cd1e0da2ecd04526c4370a998deb5c4e98319104e9b3988