www.co2-raportti.fi

Issued by Telia Domain Validation CA v2

About this certificate

This digital certificate with serial number 01:66:08:c8:5a:cc:02:e4:d7:2d:df:34:ff:b6:2c was issued on by Telia Finland Oyj.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.co2-raportti.fi

Telia Finland Oyj

Organization: Telia Finland Oyj
Country: FI

This certificate has expire since

Certificate Details

Serial Number (hex): 01:66:08:c8:5a:cc:02:e4:d7:2d:df:34:ff:b6:2c
Serial Number (int): 7261798470176116306496787364951596
Serial Number lenght: 113 bits, 15 octets

SubjectKeyId: 02:a2:b9:3c:73:47:ca:5c:e0:d4:0c:ac:3d:2c:f0:fb:8b:da:92:a5
AuthorityKeyId: ed:3d:74:9c:2c:53:bb:71:93:7b:4b:11:f6:b8:91:e2:82:f9:92:db

Fingerprint (sha1): e4:21:8a:41:99:d4:39:01:ad:70:2e:e0:5b:51:ae:93:aa:d8:ee:dd
Fingerprint (sha256): b5:0b:5b:0b:15:cb:bb:d0:8f:46:23:ee:b9:76:c5:d3:1e:7e:70:ae:29:9b:b7:f3:ff:77:14:ed:24:df:7c:b0

Issuing Certificate URL: http://repository.trust.teliasonera.com/teliadomainvalidationcav2.cer

Revocation information

OCSP Server: http://ocsp.trust.telia.com
CRL Distribution Point: http://crl-3.trust.teliasonera.com/teliadomainvalidationcav2.crl

Check the revocation status for certificate www.co2-raportti.fi

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.co2-raportti.fi

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

co2-raportti.fi
www.co2-raportti.fi

Other certificates including the domain name co2-raportti.fi

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.co2-raportti.fi in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUDME0umK6vs0NPp289N
E7Ves6iZlsFLpEdczO4GWoy7KJMLn5LNn5n3/5660WF6VbLaQtWnin59Z27XBRXj
uUGl+7nqzNi6nDgU5s6uG93kaB442tue8I9GDrKtmOsWQqeazU4AGmsTg6VY7rc7
7n16EQ4XgC2hdYtUVO/Wm5IuBGZjxMDwmuEnSSup/ewZ7rXWj++0FKCaShE/dlRn
4Zd+n0jpjn6LxzEr4lJq21rcwEsCxBxiPyPqXwbg5nuyYPp3dODuWKH07flnZskh
dn+C3maNe3k7WyLkAexQynj3S+cF01eld66sAeIcSXKJCy9c1NDvaSylRBWvtwD1
EwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7261798470176116306496787364951596
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Telia Finland Oyj'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Telia Domain Validation CA v2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-23 23:34:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-23 23:34:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.co2-raportti.fi'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22881085873993097208748055999769223325263491848591287642239465574634879294333029808976026378889898250991828532577875355712144061548979956681657944158248389568135905774509733459752546290459041507665673349476657799314607921508243023421658609782976863760139716672169575590560424541001590656796981467738198683608773000088607255030854923730381628703546042742034020976695991892825611234568569021589047359142572901622760648913913177484384346443791689435196141334587699515467680614259376201084233233193965737514024602228144956762143918462830366814760992787998672834167847049044941694268041062848296356024349843320365486503187
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ed3d749c2c53bb71937b4b11f6b891e282f992db
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							02a2b93c7347ca5ce0d40cac3d2cf0fb8bda92a5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (71 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://repository.trust.teliasonera.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'co2-raportti.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.co2-raportti.fi'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl-3.trust.teliasonera.com/teliadomainvalidationcav2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.trust.telia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repository.trust.teliasonera.com/teliadomainvalidationcav2.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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