annit.osuuspankki.fi

- OP Osuuskunta -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number c4:bd:aa:26:41:a8:66:97:00:00:00:00:50:ff:31:36 was issued on by Entrust, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

OP Osuuskunta

Organization: OP Osuuskunta
Locality: Helsinki
Country: FI

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): c4:bd:aa:26:41:a8:66:97:00:00:00:00:50:ff:31:36
Serial Number (int): 261513482320729499479877642212333269302
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 76:64:86:d7:24:0b:cc:36:56:ce:3f:a6:0c:1b:bd:07:58:08:ef:5c
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): f3:cc:53:c9:d3:be:f1:63:51:0a:4d:28:b6:14:19:c7:a1:88:c6:5f
Fingerprint (sha256): 71:ca:8e:1b:9d:f8:22:a2:e7:cd:28:2f:9b:4c:7b:ab:9b:61:0a:8d:d9:ea:d7:7a:6d:50:fa:9a:38:70:36:7c

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate annit.osuuspankki.fi

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for annit.osuuspankki.fi

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

annit.osuuspankki.fi
www.annit.osuuspankki.fi

Other certificates including the domain name osuuspankki.fi

(limited to 100 certificates)
kultaraha.osuuspankki.fi
kultaraha.osuuspankki.fi
kultaraha.osuuspankki.fi
webmail.op-palvelut.net
kultaraha.osuuspankki.fi
www.osuuspankki.fi
kultaraha.osuuspankki.fi
www.op.fi
annit.osuuspankki.fi
op.fi
annit.osuuspankki.fi
kultaraha.osuuspankki.fi
kultaraha.osuuspankki.fi
annit.osuuspankki.fi
op.fi
kultaraha.osuuspankki.fi
kultaraha.osuuspankki.fi
annit.osuuspankki.fi
annit.osuuspankki.fi
www.osuuspankki.fi
op.fi
www.op.fi
annit.osuuspankki.fi
kultaraha.osuuspankki.fi
op.fi
webmail.op-palvelut.net
op.fi
annit.osuuspankki.fi
op.fi
webmail.op-palvelut.net
annit.osuuspankki.fi
op.fi
kultaraha.osuuspankki.fi
kultaraha.osuuspankki.fi
webmail.op-palvelut.net
op.fi
kultaraha.osuuspankki.fi
kultaraha.osuuspankki.fi
kultaraha.osuuspankki.fi
op.fi
kultaraha.osuuspankki.fi
annit.osuuspankki.fi
annit.osuuspankki.fi
www.osuuspankki.fi
kultaraha.osuuspankki.fi
annit.osuuspankki.fi
kultaraha.osuuspankki.fi
kultaraha.osuuspankki.fi
kultaraha.osuuspankki.fi
kultaraha.osuuspankki.fi
kultaraha.osuuspankki.fi
www.op.fi

Certificate

The complete raw certificate details for annit.osuuspankki.fi in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYzny7O3GRwmrAhN7GxT
jwCjXK9Mz9B9pKl/zmYqugRl8molXnjVpag8fzUg3pBhW+oXGAQGeSW2vJKeQPbG
4Sg0C1xp+H2afPVAWjBLKA/b/S226Tz+3s1WN1x0GP1SWqU3bQ5Ly2J/bVJBLtUk
W4E+21YIYKauRVy4HKw4szzZE/+iEmXaV01veJk0zLVdpTnAdXno3o4suMosxWHc
mDIntv8Vtw3cE3FlH4BljJ3YnGTptUsrzEOsxcBk5S7Q0AubIV1Hb1Jxh7+P0/Ay
RgMM1ls4xSETh/qBwLoeKnv5sS9IVWJa8Q+wxIvqBYVdIwnRpZeANd92mgCtOguv
+wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 261513482320729499479877642212333269302
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-20 09:05:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-23 09:35:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Helsinki'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'OP Osuuskunta'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'annit.osuuspankki.fi'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25443382366226441970428831963110918586061633180701695330063746684786353129536556370293488780873463163727156917869114159638945953615029368062803216444176082148827720685772367477222537256403213365400852008453240480471732964377045505934068537062672558394931062104862351198197079547479994462030846831828964224656587607784095159225535627625071408053970309579944625499154823376683353235725692498996197382510227089783980973108831474574427191518135300446041518368981039409059248298714581412191050583252398083838457885099351073466485868559533041924885720187124172862665184235003537709291322515859816283452328859867066091155451
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'annit.osuuspankki.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.annit.osuuspankki.fi'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (488 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (484 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							766486d7240bcc3656ce3fa60c1bbd075808ef5c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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