webmail.epv.fi

- EPV Energia Oy -

Issued by Thawte RSA CA 2018

About this certificate

This digital certificate with serial number 02:23:f8:00:da:b6:c0:42:95:f4:dd:99:9d:f9:d7:fd was issued on by DigiCert Inc.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

EPV Energia Oy

Organization: EPV Energia Oy
Locality: Vaasa
Country: FI

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:23:f8:00:da:b6:c0:42:95:f4:dd:99:9d:f9:d7:fd
Serial Number (int): 2845216486888920889949732796731348989
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 41:3b:45:f7:58:73:48:0c:c5:93:e4:ea:a5:27:e9:b2:c5:7d:56:b0
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a

Fingerprint (sha1): c5:1a:e7:d3:c7:ad:a0:bb:7c:2f:eb:6c:4a:ad:55:ad:3b:ec:37:64
Fingerprint (sha256): 6c:db:76:59:13:8d:c8:fc:12:bd:ca:f2:ce:7f:84:26:d6:9a:dc:70:2a:30:6d:22:6b:be:f8:2a:9f:65:34:28

Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl

Check the revocation status for certificate webmail.epv.fi

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for webmail.epv.fi

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

webmail.epv.fi
autodiscover.epv.fi
epvexch01.int.epv.fi
email.epv.fi

Other certificates including the domain name epv.fi

(limited to 100 certificates)
www.epv.fi
portal.epv.fi
ar.epv.fi
webmail.epv.fi
www.epv.fi
auth.epv.fi
auth.epv.fi
extra.epv.fi
www.epv.fi
www.epv.fi
tornionvoima.fi
generis1.epv.fi
webmail.epv.fi
www.epv.fi
ar.epv.fi
secure.epv.fi
www.epv.fi
webmail.epv.fi
sts.epv.fi
sts.epv.fi
webmail.epv.fi
auth.epv.fi
www.epv.fi
secure.epv.fi
award-life-power.epv04.wphost.fi
visitor.epv.fi
auth.epv.fi
ar.epv.fi
auth.epv.fi
portal.epv.fi
coresight.epv.fi
coresight.epv.fi
generis1.epv.fi
www.epv.fi
webmail.epv.fi
tovo.fi
ar.epv.fi
award-life-power.epv04.wphost.fi
portal.epv.fi
www.epv.fi
www.epv.fi
citrix.epv.fi
auth.epv.fi
portal.epv.fi
www.epv.fi
visitor.epv.fi
www.rajakiiri.fi
www.epv.fi
secure.epv.fi
verkkokoulutus.epv.fi
www.sevo.fi
award-life-power.epv04.wphost.fi
www.rajakiiri.fi
www.epv.fi
www.epv.fi
citrix.epv.fi
secure.epv.fi
citrix.epv.fi
visitor.epv.fi
webmail.epv.fi
auth.epv.fi
www.epv.fi
webmail.epv.fi
portal.epv.fi
www.epv.fi
ar.epv.fi
sts.epv.fi
www.epv.fi
www.epv.fi
www.xn--seinjoenvoima-efb.fi
ar.epv.fi
extranet.epv.fi
generis1.epv.fi
ar.epv.fi
coresight.epv.fi
webmail.epv.fi
www.epv.fi
ar.epv.fi
www.epv.fi

Certificate

The complete raw certificate details for webmail.epv.fi in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwnJG6J0n4QTv4+0W9dt
3K/cFa2R5zeYFpFswDS87p1aJhywOXpBJCddUFpB0BYA4h2Cc2l0YeQZfpdgS6W3
siALkNuStY5U4XWtTyOj7i1zRtjrIMXv5v5QYdmRHZYybmKKg/2RnPfPcHYohp8+
8GrfRD74mRlCVBUN/xJ+FkAgLujxHYIbXSRBvs0TF0/81jbMAkgUfZKj65/JYYSB
QP7fDgs2JO2Ywn4iwnsDHsGcl6vNyb3IPkFPC75z/EcgVqsShn7wshzezRV+tG+V
wPvG2rZplWkLOUjJmuKpobFwKkTvPoa09EvTQRSKQwkKaCKqfjFyF5XvrE77nlNq
NQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2845216486888920889949732796731348989
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-20 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Vaasa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'EPV Energia Oy'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'webmail.epv.fi'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18056903058465859233811501529626767420035524048105926903865793560444069809284855469463825106109306361657490120903396572365406895339317323178944101852021042739038912025918452713642545306246528300050428284571290767046266742365207637609775897179419577845123810612313797773719037751156049508889156997376786799085453762232739705464828885041535128388816792677225752305932722194936066924934503830226349508369383436369530714264995291619050666606576576639298501455209099522875012887236474952042366353242899877654732709042579743128813422897744903433467272413589473263001510057330130359642105746813404672512928058025049303771701
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							413b45f75873480cc593e4eaa527e9b2c57d56b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.epv.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.epv.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epvexch01.int.epv.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.epv.fi'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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