rd.op-kassa.fi

Issued by Amazon

About this certificate

This digital certificate with serial number 0d:d0:2e:2f:12:14:0f:2a:0c:c0:81:49:76:55:d2:36 was issued on by Amazon.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=rd.op-kassa.fi

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:d0:2e:2f:12:14:0f:2a:0c:c0:81:49:76:55:d2:36
Serial Number (int): 18360898411939536946103077927768150582
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 0a:c9:25:e5:f7:f6:9b:d9:80:86:6c:d4:83:0f:ec:e8:74:ad:12:f5
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): c1:fa:f0:02:f2:e1:1e:e3:13:44:e7:ae:dd:d7:3e:0e:d8:01:37:7a
Fingerprint (sha256): 6b:ba:f3:86:d4:37:d6:e6:2b:d3:a2:ee:c4:62:83:a0:62:95:f5:fa:ed:ee:65:59:de:87:cc:c5:2a:f5:57:75

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate rd.op-kassa.fi

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for rd.op-kassa.fi

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

rd.op-kassa.fi
rd-hallinta.op-kassa.fi
rd-shopify.op-kassa.fi
*.opkassa.aws.kehi.op-palvelut.net

Other certificates including the domain name op-kassa.fi

(limited to 100 certificates)
prod.op-kassa.fi
tuki.op-kassa.fi
tuki.op-kassa.fi
api-nc.op-kassa.fi
www.op-kassa.fi
qa-shopify.op-kassa.fi
mp.op-kassa.fi
rd.op-kassa.fi
op-kassa.fi
tuki.op-kassa.fi
op-kassa.fi
www.op-kassa.fi
qa.op-kassa.fi
rd.op-kassa.fi
www.op-kassa.fi
qa.op-kassa.fi
*.opkassa.aws.kehi.op-palvelut.net
op-kassa.fi
op-kassa.fi
hallinta.op-kassa.fi
op-kassa.fi
qa.op-kassa.fi
tuki.op-kassa.fi
qa-qrpay.op-kassa.fi
qa.op-kassa.fi
prod.op-kassa.fi
qa.op-kassa.fi
*.qav2.op-kassa.fi
status.op-kassa.fi
op-kassa.fi
www.op-kassa.fi
shopify.op-kassa.fi
rd.op-kassa.fi
op-kassa.fi
qa.op-kassa.fi
api.op-kassa.fi
shopify.op-kassa.fi
*.op-kassa.fi
hallinta.op-kassa.fi
www.op-kassa.fi
rd.op-kassa.fi
mpos-qa.op-kassa.fi
rd.op-kassa.fi
qa.op-kassa.fi
opkassa.aws.tuot.op-palvelut.fi
opkassa.aws.tuot.op-palvelut.fi
api.op-kassa.fi
hallinta.op-kassa.fi
qa.op-kassa.fi
op-kassa.fi
shopify.op-kassa.fi
www.op-kassa.fi
qa-qrpay.op-kassa.fi
pivokassa.fi
hallinta.op-kassa.fi
qrpay.op-kassa.fi
www.op-kassa.fi
www.op-kassa.fi
mp.op-kassa.fi
rd.op-kassa.fi
api-nc-hallinta.op-kassa.fi
mpos-qa.op-kassa.fi
www.op-kassa.fi
*.opkassa.aws.kehi.op-palvelut.net
rd.op-kassa.fi
mp.op-kassa.fi
opkassa.aws.tuot.op-palvelut.fi
api-nc-shopify.op-kassa.fi
mp.op-kassa.fi
qa.op-kassa.fi
qa.op-kassa.fi
rd.op-kassa.fi
qa-shopify.op-kassa.fi
mpos-qa.op-kassa.fi
qrpay.op-kassa.fi
qa.op-kassa.fi
api.op-kassa.fi
tuki.op-kassa.fi
www.op-kassa.fi
api.op-kassa.fi
opkassa.aws.tuot.op-palvelut.fi
dev.op-kassa.fi
*.opkassa.aws.kehi.op-palvelut.net
mp.op-kassa.fi
www.op-kassa.fi

Certificate

The complete raw certificate details for rd.op-kassa.fi in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzsHOSqGJlMjWTkxTvSY5
lz9xVj+q/Tnm923FxES12Vphr02FoDsJggZxJYaJvo81Ag6ddLYJ3UWD64PK3aOV
nIw5hWdR57DvyqnUkXOTyAlFvfYi6tbCjZtgTwomPTkhdq++t9DzwfWw3sPCEL2b
brj6eky5gKHcBRV6QoTCG8GLvDWIZ8mWj7ddTqh0fbLL2DMjNC8LHdAkaSVrumd0
/j1t4NB9N+sSLYQeikWDTX4+DDHS5H2GJnAW+V21chCe9nmTuBnigj6ZN2GS/6SD
aVNj2j+XQL33er7daEMDGomQmoc9q/kb0juEW1pH3xUEYwY8C+bSqyUjVlkAL7FD
BQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18360898411939536946103077927768150582
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-04 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'rd.op-kassa.fi'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26100660037859554864218762792567598090023123404347153418685070376329005006729455282909575324074541263181404367465630125511513543933166661517962330338779577658619660491829220757680302471694755835227563523032142813971960338295951976620723835863764208527901230569210493958169374509617123404615948625008320369503964554300828174236914613261413480699400588616833756798871673399868894750986155247831486405277920181642013222809966480800688693928237834217210292393585051276267185304818133881688802339740307134876485729060626232943871119440628630101100677321761458094206409742063361455263446217727552232131303185857426484183813
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0ac925e5f7f69bd980866cd4830fece874ad12f5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rd.op-kassa.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rd-hallinta.op-kassa.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rd-shopify.op-kassa.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.opkassa.aws.kehi.op-palvelut.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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