*.tieturi.fi

Issued by Sectigo RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number d4:86:ee:c4:79:6f:5a:c7:0b:6e:cc:e8:d2:c1:cd:f3 was issued on by Sectigo Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.tieturi.fi

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): d4:86:ee:c4:79:6f:5a:c7:0b:6e:cc:e8:d2:c1:cd:f3
Serial Number (int): 282496945665233659490270578240525553139
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 15:2b:2b:28:7f:5c:49:f6:ce:15:19:49:bb:2c:a5:6e:df:69:05:25
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1

Fingerprint (sha1): 45:94:08:0f:e0:bb:87:54:1d:de:67:f2:7f:9f:44:4a:7b:e6:2b:1f
Fingerprint (sha256): 9d:a2:75:34:a6:0f:4f:3c:ab:03:3a:5a:be:32:d6:1f:1c:59:48:30:e6:5b:7f:6f:e2:01:6b:85:70:3f:97:e3

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate *.tieturi.fi

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.tieturi.fi

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.tieturi.fi
tieturi.fi

Other certificates including the domain name tieturi.fi

(limited to 100 certificates)
www.tieturi.fi
tieturi.fi
www.tieturi.fi
www.tieturi.fi
tieturi.fi
www.tieturi.fi
uutiskirje.tieturi.fi
services.tieturi.fi
ocs.tieturi.fi
tieturi.fi
mail.tieturi.fi
uutiskirje.tieturi.fi
tieturi.fi
services.tieturi.fi
portal.tieturi.fi
uutiskirje.tieturi.fi
*.tieturi.fi
vpn.tieturi.fi
mail.tieturi.fi
tieturi.fi
tieturi.fi
services.tieturi.fi
services.tieturi.fi
sip.tieturi.fi
tieturi.fi
come.tieturi.fi
uutiskirje.tieturi.fi
services.tieturi.fi
services.tieturi.fi
tieturi.fi
tieturi.fi
services.tieturi.fi
uutiskirje.tieturi.fi
tieturi.fi
tieturi.fi
www.tieturi.fi

Certificate

The complete raw certificate details for *.tieturi.fi in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucdN7KLFET329InGb+nJ
TlIVAUpGUHxyTmnWOlHCVpzCrHDIFAKbLCIL+VcY4eiO45h7lOBpcLlSezemx04O
oFH681YuZ9LZqtFnMfURqI5IXBSEVBUU4M9svsbkFWg3ha+ug0Xdq1ZajIDS2art
xK9CU6p1Huzw3xZt/BYbgUPIZheNa2KZJGJbE+MdSrdgfV7wVMGzeOlwAndp1BNQ
0ZYbRhDdsUXKhS8x1Mkea5FOOGGrBw1LXEQZSVnNcTw203iVBZ6a2UJS2NXNfhY5
lVozb0LYZCab+Kko+L58Grtam0n+61ykYQcfvcPZlklYoDdyk0d6YCPt8sonMkoz
8QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 282496945665233659490270578240525553139
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-27 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.tieturi.fi'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23452367077399204389333883054911920929139870058510031681197183012924617174899541103497882805675988793446915419383945774944471506236557082118358841716509107659413572612535005597625099703136295022801309176320223270381642397040755097480069303993152587920555458350466520387045609654709103968148627855891080545895140196721146801152082265688302250196180957197595900763881303933355911279258943323885874163135237246922059933979064708480059659293547878295148228356683285242643155193652260642961584408337397387081065401532561572235710480723211109207761170888944780332091919607588945774908306107886466009247352469193457738068977
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							152b2b287f5c49f6ce151949bb2ca56edf690525
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tieturi.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tieturi.fi'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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