*.vvp.suomi.vyv.fi

- Valtion Tieto- ja Viestintatekniikkakeskus Valtori -

Issued by TeliaSonera Server CA v2

About this certificate

This digital certificate with serial number 01:70:c4:94:2a:b1:f1:6a:8b:69:88:b1:71:db:8a was issued on by TeliaSonera.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Valtion Tieto- ja Viestintatekniikkakeskus Valtori

Organization: Valtion Tieto- ja Viestintatekniikkakeskus Valtori
Organization unit: Kapasiteettipalvelut - Kumppanin Tuottama
Locality: Jyvaskyla
Country: FI

TeliaSonera

Organization: TeliaSonera
Country: FI

This certificate has expire since

Certificate Details

Serial Number (hex): 01:70:c4:94:2a:b1:f1:6a:8b:69:88:b1:71:db:8a
Serial Number (int): 7479501309393260719201236494179210
Serial Number lenght: 113 bits, 15 octets

SubjectKeyId: ea:eb:3f:3e:7a:52:bd:f7:25:27:d7:96:c4:9a:05:a8:e2:89:c6:ce
AuthorityKeyId: 2f:49:3c:29:4f:d7:07:25:f9:c6:8c:d5:64:f5:66:3d:12:83:22:95

Fingerprint (sha1): 73:5e:a5:b6:ae:21:65:7b:61:79:21:ee:b5:1b:30:40:23:e7:f0:ec
Fingerprint (sha256): 59:1d:e6:64:9d:96:f4:31:35:6d:a7:88:d7:0e:89:dd:2e:ee:46:0b:77:10:d1:f7:42:82:e5:35:8e:f8:21:7c

Issuing Certificate URL: http://repository.trust.teliasonera.com/teliasoneraservercav2.cer

Revocation information

OCSP Server: http://ocsp.trust.telia.com
CRL Distribution Point: http://crl-3.trust.teliasonera.com/teliasoneraservercav2.crl

Check the revocation status for certificate *.vvp.suomi.vyv.fi

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.vvp.suomi.vyv.fi

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.vvp.suomi.vyv.fi
vvp.suomi.vyv.fi

Other certificates including the domain name vyv.fi

(limited to 100 certificates)
mail.vyv.fi
vyvi-posti.vyv.fi
vmcreset.vyv.fi
valveri-out.valvira.vyv.fi
vahva-pub.vnk.vyv.fi
vaalijira.om.vyv.fi
pointti-virtu.palkeet.vyv.fi
*.tas.vyv.fi
vattidp.vyv.fi
osb-client.dev.via.valtori.vyv.fi
herkka-prod.palkeet.vyv.fi
louhi.valvira.vyv.fi
pr0.integraatiopalvelu.fi
pkah.palkeet.vyv.fi
avainqa.valtori.vyv.fi
test1-client.dev.via.valtori.vyv.fi
mail.vyv.fi
qa.sendi.vk.vyv.fi
lifecare.vth.vyv.fi
dev.coco.vk.vyv.fi
ipam-testi.vyv.fi
vahva-pub-test2.vnk.vyv.fi
qa.valvira.vyv.fi
test01.yjasp.vyv.fi
*.stuk.vyv.fi
ims.valtori.vyv.fi
prod.valvira.vyv.fi
vyvi-posti.vyv.fi
rondo.vyv.fi
*.valvira.vyv.fi
draw-export.valtori.vyv.fi
qat.integraatiopalvelu.fi
*.vyv.fi
tira.vrk.vyv.fi
itte.senaatti.vyv.fi
RMX4.vyv.fi
rmx7.vyv.fi
vyvi-turva.vyv.fi
pr0.integraatiopalvelu.fi
vyvi-posti.vyv.fi
qa.fimea.vyv.fi
api.hankeikkuna-test.vnk.vyv.fi
vkh.2016.vrk.vyv.fi
vkaztestressuschedulerapiapp.vk.vyv.fi
dma.vyv.fi
eucaris.vyv.fi
talsu.rvv.vyv.fi
qat.integraatiopalvelu.fi
plmreset.vyv.fi
sarkadoc.cgi.vyv.fi
snow.ork.vyv.fi
dokumenttienhallinta.vrk.vyv.fi
omcreset.vyv.fi
api.hankeikkuna.vyv.fi
draw.valtori.vyv.fi
top.valtori.vyv.fi
vyvi-posti.vyv.fi
*.test.rpa.palkeet.vyv.fi
ry01.om.vyv.fi
soar.vyv.fi
rmx1.vyv.fi
mediapankki.stuk.vyv.fi
soartest.vyv.fi
*.dev.via.valtori.vyv.fi
RPCC04.vyv.fi
snow.ork.vyv.fi
kvh.qa.suomi.vyv.fi
temcreset.vyv.fi
qa.yjasp.vyv.fi
postikaranteeni.vyv.fi
test2-client.dev.via.valtori.vyv.fi
eucaris.vyv.fi
tikku.vyv.fi
mediapankki.stuk.vyv.fi
stmreset.vyv.fi
asianhallinta.dev.vrk.vyv.fi
vyvi-spikaviesti.vyv.fi
vkh.2016.vrk.vyv.fi
temtilasto.vyv.fi
asianhallinta.test.vrk.vyv.fi
*.vyv.fi
vmbukettipub2.vyv.fi
mediapankki.stuk.vyv.fi
dynasty.tukija.vyv.fi
asianhallinta.vrk.vyv.fi
dev.cloud.valvira.vyv.fi
ims.testi.valtori.vyv.fi
rmx2.vyv.fi
talsu.qa.rvv.vyv.fi
jotate.lvm.vyv.fi
palvelut.om.vyv.fi
kvh.suomi.vyv.fi
*.vvp.suomi.vyv.fi
qat.integraatiopalvelu.fi
temreset.vyv.fi
rmx5.vyv.fi
*.core.vktds.vyv.fi
testeucaris.vyv.fi
pr0.integraatiopalvelu.fi
testeucaris.vyv.fi

Certificate

The complete raw certificate details for *.vvp.suomi.vyv.fi in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7479501309393260719201236494179210
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'TeliaSonera'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'TeliaSonera Server CA v2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-10 13:13:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-10 13:13:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Jyvaskyla'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Valtion Tieto- ja Viestintatekniikkakeskus Valtori'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Kapasiteettipalvelut - Kumppanin Tuottama'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.vvp.suomi.vyv.fi'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 754239716034827614472482226733965321644528917683999505118005167695441319736295180463561289281117403530400783754871793067684100713663129578699682899636951159465083818049377724453439923040246976532689045433931125934804437713666010077242907218663977978855040624248703337123649212376104948810188490511224660394812087692994443366949305046234892735599783252609629975187299792915650990887823757951565075598366994038595302073751803630730809870533104947152956020741084291044777357222555677517304902557026774816203385420636010831843974648975929421664557475253206741363816924426637232285664427240466901893190079142410701523483655535018970370567743837429718911047636969295598731463080671512386837196453038495943604995713962210850235893256113944299937981397001617657731171586449530842426165907892735367808476068337420157653436029993723563932124645879697199332916955939296585339492413510441153870664130504130103535986423840113080813664354326288390072351460412421437529270050174692548373247067173930186375060656622920035618171341545061569753807437334523922650315611532788497550779709730344811927770340709194345485561578471161366593025994418504263021522564497855724109357863826425430892992469571417257864462025781957286209572158076095760572880350097
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 2f493c294fd70725f9c68cd564f5663d12832295
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							eaeb3f3e7a52bdf72527d796c49a05a8e289c6ce
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (71 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://repository.trust.teliasonera.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vvp.suomi.vyv.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vvp.suomi.vyv.fi'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (70 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl-3.trust.teliasonera.com/teliasoneraservercav2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (122 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.trust.telia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repository.trust.teliasonera.com/teliasoneraservercav2.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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