turvaviesti.kkv.fi

- Kilpailu- ja kuluttajavirasto -

Issued by TeliaSonera Server CA v2

About this certificate

This digital certificate with serial number 01:70:38:9e:17:63:67:e8:7c:ea:6a:c1:85:f4:ac was issued on by TeliaSonera.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Kilpailu- ja kuluttajavirasto

Organization: Kilpailu- ja kuluttajavirasto
Locality: Helsinki
Country: FI

TeliaSonera

Organization: TeliaSonera
Country: FI

This certificate has expire since

Certificate Details

Serial Number (hex): 01:70:38:9e:17:63:67:e8:7c:ea:6a:c1:85:f4:ac
Serial Number (int): 7468412438150890191541301573711020
Serial Number lenght: 113 bits, 15 octets

SubjectKeyId: 85:64:f7:48:c6:44:7e:b3:3b:79:36:fb:b5:00:f9:89:5a:54:62:2e
AuthorityKeyId: 2f:49:3c:29:4f:d7:07:25:f9:c6:8c:d5:64:f5:66:3d:12:83:22:95

Fingerprint (sha1): e9:0f:6f:c6:c3:7f:07:32:c2:2e:6b:6b:8f:04:dd:13:5d:a9:d1:0e
Fingerprint (sha256): 88:c8:0b:60:1b:ce:59:d1:b9:01:39:32:70:4b:47:7d:91:1e:e8:01:4c:91:16:a2:d1:e1:51:df:d0:f2:28:99

Issuing Certificate URL: http://repository.trust.teliasonera.com/teliasoneraservercav2.cer

Revocation information

OCSP Server: http://ocsp.trust.telia.com
CRL Distribution Point: http://crl-3.trust.teliasonera.com/teliasoneraservercav2.crl

Check the revocation status for certificate turvaviesti.kkv.fi

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for turvaviesti.kkv.fi

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

turvaviesti.kkv.fi

Other certificates including the domain name kkv.fi

(limited to 100 certificates)
lyae.vy-verkko.fi
sip.vy-verkko.fi
matkapakettiapuri.fi
lyae.vy-verkko.fi
kkv-vk2017.focusflow.net
lyae.vy-verkko.fi
kkv-vk2017.focusflow.net
lyae.vy-verkko.fi
lyae.vy-verkko.fi
sip.vy-verkko.fi
lyae.vy-verkko.fi
matkapakettiapuri.fi
matkapakettiapuri.fi
sip.vy-verkko.fi
lyae.vy-verkko.fi
tls.automattic.com
lyae.vy-verkko.fi
kkv-vk2017.focusflow.net
*.kkv.fi
www.kkv.fi
matkapakettiapuri.fi
ucc.vy-verkko.fi
lyae.vy-verkko.fi
sip.vy-verkko.fi
matkapakettiapuri.fi
lyae.vy-verkko.fi
kkv-vk2017.focusflow.net
kkv-vk2017.focusflow.net
lyae.vy-verkko.fi
kkv-vk2017.focusflow.net
securemail.kkv.fi
lyae.vy-verkko.fi
asiointi.kkv.fi
asiointi.kkv.fi
asiointi.kkv.fi
lyae.vy-verkko.fi
sip.vy-verkko.fi
lyae.vy-verkko.fi
lyae.vy-verkko.fi
*.kkv.fi
matkapakettiapuri.fi
asiointi.kkv.fi
www.kkv.fi
www.kkv.fi
tls.automattic.com
securemail.kkv.fi
lyae.vy-verkko.fi
tls.automattic.com
matkapakettiapuri.fi
lyae.vy-verkko.fi
kkv.fi
securemail.kkv.fi
lyae.vy-verkko.fi
*.kkv.fi
www.kkv.fi
matkapakettiapuri.fi
kkv.fi
matkapakettiapuri.fi
sip.vy-verkko.fi
sip.vy-verkko.fi
lyae.vy-verkko.fi
www.kkv.fi
kkv-vk2017.focusflow.net
asiointi.kkv.fi
kkv-vk2017.focusflow.net
asiointi.kkv.fi
turvaviesti.kkv.fi
securemail.kkv.fi
api.asiointi.kkv.fi
lyae.vy-verkko.fi
lyae.vy-verkko.fi
lyae.vy-verkko.fi
valma.kkv.fi
securemail.kkv.fi
arkisto.kkv.fi
lyae.vy-verkko.fi
asiointi.kkv.fi
kkv.fi
asiointi.kkv.fi
sip.vy-verkko.fi
kkv-vk2017.focusflow.net
tls.automattic.com
lyae.vy-verkko.fi
matkapakettiapuri.fi
matkapakettiapuri.fi
kkv-vk2017.focusflow.net
ucc.vy-verkko.fi
ucc.vy-verkko.fi
sip.vy-verkko.fi
kkv-vk2017.focusflow.net
lyae.vy-verkko.fi
kkv.fi
lyae.vy-verkko.fi
asiointi.kkv.fi
kkv-vk2017.focusflow.net
sip.vy-verkko.fi
ucc.vy-verkko.fi
kkv-vk2017.focusflow.net
turvaviesti.kkv.fi
matkapakettiapuri.fi

Certificate

The complete raw certificate details for turvaviesti.kkv.fi in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7468412438150890191541301573711020
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'TeliaSonera'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'TeliaSonera Server CA v2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-12 08:57:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-11 08:57:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Helsinki'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Kilpailu- ja kuluttajavirasto'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'turvaviesti.kkv.fi'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 637106885026348936880596529466598842398518199658327936227282267015159433049744524810488902256923888654807666014358237457097156027304724533061291685227046711273222755182619727531283212097279854473151570642727868555016726082934708605387975392447051555350376944835300121966724712184480517188969682298711851075136511202698576440790354611413081535418652725107990000241155107929734598967030801168086476727332634879578366370962007445110827464000258120076002871771785207214543002760282525188974089147634544235134489965382079120322596763672504624383129882993372672864941515773511535026862680432398336708658611699209124400675614556818186720147122220333848003194017839017475469179679797855048646602410223769773844392690275559881391628473631055273697191452136265310054738001723677514724153997993220130374316675468261090537909933050702624835030720212437718506206985429878937945748579226366528662338666781872800294450765639925571865580664819847693981986287828068615890528978695844135866225880617112387315572127497479036775871405797409304121726059842176801954430952830669012459105579744251717467189362539482279185997061613592662753300649878319733378412345291732821889718354061016698061981502792522873049211259567844203351051748335256833224469144599
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 2f493c294fd70725f9c68cd564f5663d12832295
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8564f748c6447eb33b7936fbb500f9895a54622e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (71 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://repository.trust.teliasonera.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'turvaviesti.kkv.fi'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (70 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl-3.trust.teliasonera.com/teliasoneraservercav2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (122 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.trust.telia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repository.trust.teliasonera.com/teliasoneraservercav2.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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