citrix.epv.fi

Issued by Thawte RSA CA 2018

About this certificate

This digital certificate with serial number 03:4f:11:32:95:3d:3c:fb:54:b9:a1:fb:8a:c0:d3:8e was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=citrix.epv.fi

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:4f:11:32:95:3d:3c:fb:54:b9:a1:fb:8a:c0:d3:8e
Serial Number (int): 4398224247737685709583148342392705934
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 2f:db:5f:fc:73:71:c0:ef:a0:18:52:57:c9:a1:03:1b:8f:78:d8:0c
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a

Fingerprint (sha1): 6d:9c:83:a1:f3:db:63:f5:eb:b3:5f:08:aa:2f:6b:00:d2:8c:e3:0d
Fingerprint (sha256): a5:96:35:61:bf:05:f7:3f:c1:12:c1:eb:94:b4:f3:d4:1c:c0:2e:6e:09:c1:b1:ad:43:77:18:87:18:ba:37:cd

Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl

Check the revocation status for certificate citrix.epv.fi

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for citrix.epv.fi

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

citrix.epv.fi

Other certificates including the domain name epv.fi

(limited to 100 certificates)
www.epv.fi
portal.epv.fi
ar.epv.fi
webmail.epv.fi
www.epv.fi
auth.epv.fi
auth.epv.fi
extra.epv.fi
www.epv.fi
www.epv.fi
tornionvoima.fi
generis1.epv.fi
webmail.epv.fi
www.epv.fi
ar.epv.fi
secure.epv.fi
www.epv.fi
webmail.epv.fi
sts.epv.fi
sts.epv.fi
webmail.epv.fi
auth.epv.fi
www.epv.fi
secure.epv.fi
award-life-power.epv04.wphost.fi
visitor.epv.fi
auth.epv.fi
ar.epv.fi
auth.epv.fi
portal.epv.fi
coresight.epv.fi
coresight.epv.fi
generis1.epv.fi
www.epv.fi
webmail.epv.fi
tovo.fi
ar.epv.fi
award-life-power.epv04.wphost.fi
portal.epv.fi
www.epv.fi
www.epv.fi
citrix.epv.fi
auth.epv.fi
portal.epv.fi
www.epv.fi
visitor.epv.fi
www.rajakiiri.fi
www.epv.fi
secure.epv.fi
verkkokoulutus.epv.fi
www.sevo.fi
award-life-power.epv04.wphost.fi
www.rajakiiri.fi
www.epv.fi
www.epv.fi
citrix.epv.fi
secure.epv.fi
citrix.epv.fi
visitor.epv.fi
webmail.epv.fi
auth.epv.fi
www.epv.fi
webmail.epv.fi
portal.epv.fi
www.epv.fi
ar.epv.fi
sts.epv.fi
www.epv.fi
www.epv.fi
www.xn--seinjoenvoima-efb.fi
ar.epv.fi
extranet.epv.fi
generis1.epv.fi
ar.epv.fi
coresight.epv.fi
webmail.epv.fi
www.epv.fi
ar.epv.fi
www.epv.fi

Certificate

The complete raw certificate details for citrix.epv.fi in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4398224247737685709583148342392705934
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-12-06 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'citrix.epv.fi'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 728066692671610602334551706878158129747461476585169822588822295482783534275868518197953885636430521214871976707501330661256941555090796392027258302389343619161209118537451360858818523955246073784085010783576816756231937645909570834312867802924136225482879187571793340340733510582123271228964267188050232142710311588059075097396451737868142951986833736909592156140715367743153994250040254457847716094216391850432161872358778444210342620595531467897166629613167272180183747378371328157104947437191718270477995170481371872334277220490983894214037593066554854659016354818928549273491302716037816387228201603288280373684773815637486395360460625093901629905710643319476394635502186575142129466965895663994262264994608014971997127065467768100460315712376430890174585949285384556696649200376504709061760872756070131502352870675118743124461525739738540966876438494560689393120723916076006967545731337140479628771004752306054935884945986265322494902503811018535087476704580664538220277565620909310639457172110834054634386590815594107472698792738974290081073304890091029956236769777675118268366652352669140294890847594896008628580484061602504029882714741451830108733142501167929550653246382522810044706816150200385601836973569238731496016417047
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2fdb5ffc7371c0efa0185257c9a1031b8f78d80c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citrix.epv.fi'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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