vmbukettipub2.vyv.fi

- Valtion tieto- ja viestintatekniikkakeskus Valtori -

Issued by TeliaSonera Server CA v2

About this certificate

This digital certificate with serial number 01:69:09:70:9e:65:1c:e8:33:5f:50:80:26:75:8c was issued on by TeliaSonera.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Valtion tieto- ja viestintatekniikkakeskus Valtori

Organization: Valtion tieto- ja viestintatekniikkakeskus Valtori
Locality: Helsinki
Country: FI

TeliaSonera

Organization: TeliaSonera
Country: FI

This certificate has expire since

Certificate Details

Serial Number (hex): 01:69:09:70:9e:65:1c:e8:33:5f:50:80:26:75:8c
Serial Number (int): 7322697774189753147268144386438540
Serial Number lenght: 113 bits, 15 octets

SubjectKeyId: 0f:53:50:35:70:67:8c:d9:8b:28:f5:ea:42:c2:a0:bf:27:8a:72:f8
AuthorityKeyId: 2f:49:3c:29:4f:d7:07:25:f9:c6:8c:d5:64:f5:66:3d:12:83:22:95

Fingerprint (sha1): 9c:1e:45:fc:e0:2a:7c:b0:4d:db:c5:b1:8e:3d:b9:00:26:56:2c:7a
Fingerprint (sha256): 4e:ca:e2:28:e3:fe:54:3a:fa:e8:9c:86:77:02:97:6a:02:7c:01:0f:34:95:58:dc:49:5c:c8:df:bf:89:23:27

Issuing Certificate URL: http://repository.trust.teliasonera.com/teliasoneraservercav2.cer

Revocation information

OCSP Server: http://ocsp.trust.telia.com
CRL Distribution Point: http://crl-3.trust.teliasonera.com/teliasoneraservercav2.crl

Check the revocation status for certificate vmbukettipub2.vyv.fi

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for vmbukettipub2.vyv.fi

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

vmbukettipub2.vyv.fi

Other certificates including the domain name vyv.fi

(limited to 100 certificates)
mail.vyv.fi
vyvi-posti.vyv.fi
vmcreset.vyv.fi
valveri-out.valvira.vyv.fi
vahva-pub.vnk.vyv.fi
vaalijira.om.vyv.fi
pointti-virtu.palkeet.vyv.fi
*.tas.vyv.fi
vattidp.vyv.fi
osb-client.dev.via.valtori.vyv.fi
herkka-prod.palkeet.vyv.fi
louhi.valvira.vyv.fi
pr0.integraatiopalvelu.fi
pkah.palkeet.vyv.fi
avainqa.valtori.vyv.fi
test1-client.dev.via.valtori.vyv.fi
mail.vyv.fi
qa.sendi.vk.vyv.fi
lifecare.vth.vyv.fi
dev.coco.vk.vyv.fi
ipam-testi.vyv.fi
vahva-pub-test2.vnk.vyv.fi
qa.valvira.vyv.fi
test01.yjasp.vyv.fi
*.stuk.vyv.fi
ims.valtori.vyv.fi
prod.valvira.vyv.fi
vyvi-posti.vyv.fi
rondo.vyv.fi
*.valvira.vyv.fi
draw-export.valtori.vyv.fi
qat.integraatiopalvelu.fi
*.vyv.fi
tira.vrk.vyv.fi
itte.senaatti.vyv.fi
RMX4.vyv.fi
rmx7.vyv.fi
vyvi-turva.vyv.fi
pr0.integraatiopalvelu.fi
vyvi-posti.vyv.fi
qa.fimea.vyv.fi
api.hankeikkuna-test.vnk.vyv.fi
vkh.2016.vrk.vyv.fi
vkaztestressuschedulerapiapp.vk.vyv.fi
dma.vyv.fi
eucaris.vyv.fi
talsu.rvv.vyv.fi
qat.integraatiopalvelu.fi
plmreset.vyv.fi
sarkadoc.cgi.vyv.fi
snow.ork.vyv.fi
dokumenttienhallinta.vrk.vyv.fi
omcreset.vyv.fi
api.hankeikkuna.vyv.fi
draw.valtori.vyv.fi
top.valtori.vyv.fi
vyvi-posti.vyv.fi
*.test.rpa.palkeet.vyv.fi
ry01.om.vyv.fi
soar.vyv.fi
rmx1.vyv.fi
mediapankki.stuk.vyv.fi
soartest.vyv.fi
*.dev.via.valtori.vyv.fi
RPCC04.vyv.fi
snow.ork.vyv.fi
kvh.qa.suomi.vyv.fi
temcreset.vyv.fi
qa.yjasp.vyv.fi
postikaranteeni.vyv.fi
test2-client.dev.via.valtori.vyv.fi
eucaris.vyv.fi
tikku.vyv.fi
mediapankki.stuk.vyv.fi
stmreset.vyv.fi
asianhallinta.dev.vrk.vyv.fi
vyvi-spikaviesti.vyv.fi
vkh.2016.vrk.vyv.fi
temtilasto.vyv.fi
asianhallinta.test.vrk.vyv.fi
*.vyv.fi
vmbukettipub2.vyv.fi
mediapankki.stuk.vyv.fi
dynasty.tukija.vyv.fi
asianhallinta.vrk.vyv.fi
dev.cloud.valvira.vyv.fi
ims.testi.valtori.vyv.fi
rmx2.vyv.fi
talsu.qa.rvv.vyv.fi
jotate.lvm.vyv.fi
palvelut.om.vyv.fi
kvh.suomi.vyv.fi
*.vvp.suomi.vyv.fi
qat.integraatiopalvelu.fi
temreset.vyv.fi
rmx5.vyv.fi
*.core.vktds.vyv.fi
testeucaris.vyv.fi
pr0.integraatiopalvelu.fi
testeucaris.vyv.fi

Certificate

The complete raw certificate details for vmbukettipub2.vyv.fi in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2dj26ClJX+J4IaW5tLvK
bwtXpEmbyGQFWEa+nO3jjtd8EAsFge4YmgpEaeaEv6BX1LwwCIn/Lez9O+86u+mp
1Luj4o/CEOrEwrzCXV01KmB9elttYdgxlX0vtXAKE8rsSCxd8+Avxx/B8MhNETSC
IXunQ1+2IXPHYvwHM7MkH9rhKIROuOJudSFJzlKUwP4NGjFivrhgIp2gA6aaBVDG
Y3sQoCA1DU3teHIzikw72npTLwKiHufHOZTT8pOtyipC4olMYMdeA2xMG8lfdlMj
tePGrgiOHLzdqwJVzZT2claLtMSlSkmkq9RLIn0+zJ+ryd1EfKM4wbrwinr2+Cfs
2wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7322697774189753147268144386438540
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'TeliaSonera'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'TeliaSonera Server CA v2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-20 05:46:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-19 05:46:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Helsinki'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Valtion tieto- ja viestintatekniikkakeskus Valtori'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'vmbukettipub2.vyv.fi'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27500701350263761445382934958477048918789502675941329347496521745799439308227886749231549841824181858655423618007076490190002485781741284400805470442032900656414770842491925160585853957260244272436062428919255156207719190773520501728726135841246535069654690303636877973495187571546533995848872168347275711688784716977834846933722602290988393517458746932668197899900034631467723605901091266244442019175049296680624064762450863162279941867698425089380110167106128348269917206542637926158257526876755069745588919819446120530206227303696565903576902796907527308261385848206733748032024852827217060834235228645186318363867
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 2f493c294fd70725f9c68cd564f5663d12832295
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0f53503570678cd98b28f5ea42c2a0bf278a72f8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (71 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://repository.trust.teliasonera.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vmbukettipub2.vyv.fi'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (70 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl-3.trust.teliasonera.com/teliasoneraservercav2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (122 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.trust.telia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repository.trust.teliasonera.com/teliasoneraservercav2.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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