api.asiointi.kkv.fi

- Kilpailu- ja kuluttajavirasto -

Issued by TeliaSonera Server CA v2

About this certificate

This digital certificate with serial number 01:63:91:87:3c:0d:47:b0:6a:c5:4a:83:8c:73:14 was issued on by TeliaSonera.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Kilpailu- ja kuluttajavirasto

Organization: Kilpailu- ja kuluttajavirasto
Locality: Helsinki
Country: FI

TeliaSonera

Organization: TeliaSonera
Country: FI

This certificate has expire since

Certificate Details

Serial Number (hex): 01:63:91:87:3c:0d:47:b0:6a:c5:4a:83:8c:73:14
Serial Number (int): 7211785345935499583210727205008148
Serial Number lenght: 113 bits, 15 octets

SubjectKeyId: f0:11:ac:e0:49:c1:a4:79:73:64:db:e0:1e:c3:31:f1:ce:74:8b:e0
AuthorityKeyId: 2f:49:3c:29:4f:d7:07:25:f9:c6:8c:d5:64:f5:66:3d:12:83:22:95

Fingerprint (sha1): 28:4d:07:74:dc:28:89:5a:7d:c1:db:3d:9e:bf:34:38:67:04:75:08
Fingerprint (sha256): 8c:bb:f2:0d:51:e3:a2:c0:bb:b7:2e:0e:93:37:54:b2:7a:f6:bc:c7:49:da:22:23:be:30:f7:37:7b:a5:1c:79

Issuing Certificate URL: http://repository.trust.teliasonera.com/teliasoneraservercav2.cer

Revocation information

OCSP Server: http://ocsp.trust.telia.com
CRL Distribution Point: http://crl-3.trust.teliasonera.com/teliasoneraservercav2.crl

Check the revocation status for certificate api.asiointi.kkv.fi

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for api.asiointi.kkv.fi

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api.asiointi.kkv.fi

Other certificates including the domain name kkv.fi

(limited to 100 certificates)
lyae.vy-verkko.fi
sip.vy-verkko.fi
matkapakettiapuri.fi
lyae.vy-verkko.fi
kkv-vk2017.focusflow.net
lyae.vy-verkko.fi
kkv-vk2017.focusflow.net
lyae.vy-verkko.fi
lyae.vy-verkko.fi
sip.vy-verkko.fi
lyae.vy-verkko.fi
matkapakettiapuri.fi
matkapakettiapuri.fi
sip.vy-verkko.fi
lyae.vy-verkko.fi
tls.automattic.com
lyae.vy-verkko.fi
kkv-vk2017.focusflow.net
*.kkv.fi
www.kkv.fi
matkapakettiapuri.fi
ucc.vy-verkko.fi
lyae.vy-verkko.fi
sip.vy-verkko.fi
matkapakettiapuri.fi
lyae.vy-verkko.fi
kkv-vk2017.focusflow.net
kkv-vk2017.focusflow.net
lyae.vy-verkko.fi
kkv-vk2017.focusflow.net
securemail.kkv.fi
lyae.vy-verkko.fi
asiointi.kkv.fi
asiointi.kkv.fi
asiointi.kkv.fi
lyae.vy-verkko.fi
sip.vy-verkko.fi
lyae.vy-verkko.fi
lyae.vy-verkko.fi
*.kkv.fi
matkapakettiapuri.fi
asiointi.kkv.fi
www.kkv.fi
www.kkv.fi
tls.automattic.com
securemail.kkv.fi
lyae.vy-verkko.fi
tls.automattic.com
matkapakettiapuri.fi
lyae.vy-verkko.fi
kkv.fi
securemail.kkv.fi
lyae.vy-verkko.fi
*.kkv.fi
www.kkv.fi
matkapakettiapuri.fi
kkv.fi
matkapakettiapuri.fi
sip.vy-verkko.fi
sip.vy-verkko.fi
lyae.vy-verkko.fi
www.kkv.fi
kkv-vk2017.focusflow.net
asiointi.kkv.fi
kkv-vk2017.focusflow.net
asiointi.kkv.fi
turvaviesti.kkv.fi
securemail.kkv.fi
api.asiointi.kkv.fi
lyae.vy-verkko.fi
lyae.vy-verkko.fi
lyae.vy-verkko.fi
valma.kkv.fi
securemail.kkv.fi
arkisto.kkv.fi
lyae.vy-verkko.fi
asiointi.kkv.fi
kkv.fi
asiointi.kkv.fi
sip.vy-verkko.fi
kkv-vk2017.focusflow.net
tls.automattic.com
lyae.vy-verkko.fi
matkapakettiapuri.fi
matkapakettiapuri.fi
kkv-vk2017.focusflow.net
ucc.vy-verkko.fi
ucc.vy-verkko.fi
sip.vy-verkko.fi
kkv-vk2017.focusflow.net
lyae.vy-verkko.fi
kkv.fi
lyae.vy-verkko.fi
asiointi.kkv.fi
kkv-vk2017.focusflow.net
sip.vy-verkko.fi
ucc.vy-verkko.fi
kkv-vk2017.focusflow.net
turvaviesti.kkv.fi
matkapakettiapuri.fi

Certificate

The complete raw certificate details for api.asiointi.kkv.fi in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7211785345935499583210727205008148
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'TeliaSonera'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'TeliaSonera Server CA v2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-24 09:42:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-23 09:42:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Helsinki'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Kilpailu- ja kuluttajavirasto'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'api.asiointi.kkv.fi'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.9.1 (emailAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String '[email protected]'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 761378710646314334137232468035119211321757978588488342588187956663750099291652942050726782887854215173844736102014192718326203460124359551146876733464773604838890149505068188941223807244469858890299921188958679272894044187319378853916023564551712486542007536743168047843952396778995543115310600275225250793108620168016786461852781704682359309013450521724306364816964634176301540991802667918322488559215240235117409958193733984290002031626395652028755766845235986902870636550147786372415793506552786911293695869704106532667914790343769073367801234832572545783071463795039936447552686488185831955463559671416256078666722854255680460688231837439116333557095962869482800200116417134103877928080121776980466871407563674122892393146042305962748232881762112005295617138817627428519772245274181629438809648272683284572276550109596133298495463172878969797752280764093805003702287040529083690570848198791026073611650020122398035119479849181504419823036214664549800554590927678964579605831772041573729699814272175579646246204971391136281564072079178867314450559449992292705297274754127400126760623308370351256330252233290905304837215487693949910830783068055475558617593464036037332749825167208165483106320100099875269059470347939784690993126671
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 2f493c294fd70725f9c68cd564f5663d12832295
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f011ace049c1a4797364dbe01ec331f1ce748be0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (71 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://repository.trust.teliasonera.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.asiointi.kkv.fi'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (70 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl-3.trust.teliasonera.com/teliasoneraservercav2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (122 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.trust.telia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repository.trust.teliasonera.com/teliasoneraservercav2.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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