*.pvp.fi

- Joki ICT Oy -

Issued by TeliaSonera Server CA v2

About this certificate

This digital certificate with serial number 01:6f:f0:22:97:8d:d4:91:0d:ea:1e:e7:80:d8:66 was issued on by TeliaSonera.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Joki ICT Oy

Organization: Joki ICT Oy
Locality: Ylivieska
Country: FI

TeliaSonera

Organization: TeliaSonera
Country: FI

This certificate has expire since

Certificate Details

Serial Number (hex): 01:6f:f0:22:97:8d:d4:91:0d:ea:1e:e7:80:d8:66
Serial Number (int): 7462669789251494010248408843999334
Serial Number lenght: 113 bits, 15 octets

SubjectKeyId: 58:fc:e8:c7:99:1f:01:28:ef:84:27:73:14:fc:71:2e:88:05:f8:7e
AuthorityKeyId: 2f:49:3c:29:4f:d7:07:25:f9:c6:8c:d5:64:f5:66:3d:12:83:22:95

Fingerprint (sha1): fe:fe:88:2a:9b:d2:33:f3:22:17:b5:ea:b7:0b:84:49:59:31:bf:1e
Fingerprint (sha256): 8b:16:ba:15:49:35:4e:d9:cb:f9:95:0f:57:bf:b6:4f:ad:9a:1a:1b:49:17:72:bf:1c:1e:f0:81:ac:f3:5c:00

Issuing Certificate URL: http://repository.trust.teliasonera.com/teliasoneraservercav2.cer

Revocation information

OCSP Server: http://ocsp.trust.telia.com
CRL Distribution Point: http://crl-3.trust.teliasonera.com/teliasoneraservercav2.crl

Check the revocation status for certificate *.pvp.fi

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.pvp.fi

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.pvp.fi

Other certificates including the domain name pvp.fi

(limited to 100 certificates)

Certificate

The complete raw certificate details for *.pvp.fi in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA18jyG5dtDTYMClRC9Hb2
PjwA3nhUAaxMG97yd4Pdjom8uhHWG1FiSeGpNT3wIGOWqG6ZKJhxrzain4l2fVtp
r437bkYuLTu9zoLaFYP2BndFGaWhzTxUorLUFrToBuRSj/8suxwhJOHp7WipigUw
zkFy7ETl4XEhHL0UrgquABlu5F7xpe63NwezFrbhatbgTznT2Vh8ESqr4sUzNrxV
gZJBODYf5OZENoPZhclVw3BH88cCLF1XRIZxfWHXB5sFAFotrTm02OaLeFlv0oXf
xa6hg8/MC+kbizU4P5W8vaccbvMcL8z+QeKg2JjB+aa2MHKqkFX83rVjPD/CPq63
pQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7462669789251494010248408843999334
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'TeliaSonera'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'TeliaSonera Server CA v2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-29 07:09:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-28 07:09:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Ylivieska'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Joki ICT Oy'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.pvp.fi'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27240325602034017896063703736064778441685522001788899835022012275395023476498010426185758001664296006805804939892627701950075152626218676914905153004658372073744619870088532230508297036296762458989476160668595458208087810844493912790903005651151357225348728399443817386743934633870446994387644599294469652541336445450149301952826663402887429755791745393433878847281778473011205684378056042880361311016298065229320008146997072975791102942190237176008871868251763046025585263664541625144845728998503208724757691095164628764755414812451988090764253044225824799443861874507159749450472232941498503543924130126784357119909
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 2f493c294fd70725f9c68cd564f5663d12832295
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							58fce8c7991f0128ef84277314fc712e8805f87e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (71 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://repository.trust.teliasonera.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pvp.fi'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (70 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl-3.trust.teliasonera.com/teliasoneraservercav2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (122 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.trust.telia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repository.trust.teliasonera.com/teliasoneraservercav2.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		0035b485281bba286da5b2772d4008d4c10e2a401fd7049afd1ff699f303b0f6f48629e5a5b9cbd4fff52c4c5ea5b345b18c63bd46a9a8407421f3cd67583b6fe9ca6eb52c1c30effb0e0b34e91d35a05897c6be8725935721ef39fb02e06a63cf9379474c63038856542e8851a596e3dad913b82ff16c28d1c8f59d5672151080e41aa3e499b1830bf05de9dbcef114ecded2f88bc57f675f1ee43c06bd949e410f6f2ed33ecb3f1860143e3535195579ab0a3dfc29ec251430bb026d8591c2406366c45d53c5c0042d6ea711b4aba74c77b549fd595d390c425b824a8f7fe7203d67b41493ca5b460c563bee58b4201ae37d8b08d7db5da36dc2defa794689f3067006ab6e9ea4b80f1a1065f6353a0176ac467e4fdb23d5da6a065cade10decf128c8befca2fa4b037415a6803bbffcfd4d981971a78d324e20c55fb1fdfb6fd0b30519e1c1ce4b353fd85a264645c92ede2752579b20de8d1ffdb13b1e3b9e1c69e2d3435d9f17d60a32303b69a3550fc52144a343ec41558c871295263581d6c05c63f0897f70b4249f617501fef4c68e2cc0758df2deb0103423f9fd4c4fabb63ab2fae48fad04f4a6964ed6165243f4add133500f2edae6057e0647a91ea8611f7ef8460b94864b4b4277abc247b90b2f4123ba96c88fadc49b9db82203a5c4fc5607f744ce62990a6472a883ff018c4f5c042dd49e46e57526944e90e8