*.richie.fi

Issued by AlphaSSL CA - G2

About this certificate

This digital certificate with serial number 11:21:92:90:a9:50:af:b2:d8:81:cb:56:bb:17:66:da:47:54 was issued on by AlphaSSL.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.richie.fi,OU=Domain Control Validated

AlphaSSL

Organization: AlphaSSL

This certificate has expire since

Certificate Details

Serial Number (hex): 11:21:92:90:a9:50:af:b2:d8:81:cb:56:bb:17:66:da:47:54
Serial Number (int): 1492332997360567241125733635645663642011476
Serial Number lenght: 141 bits, 18 octets

SubjectKeyId: bb:21:4f:f9:1f:cc:45:31:c8:32:7a:76:d2:24:5b:79:4a:1e:35:02
AuthorityKeyId: 14:ea:19:55:f0:0e:0d:32:c6:1f:74:33:b7:8e:66:1a:4c:12:31:1e

Fingerprint (sha1): c4:32:c9:ea:97:78:d6:16:db:6e:d9:d7:44:28:a1:5b:59:78:ed:72
Fingerprint (sha256): 00:c5:78:25:f6:b1:a1:c7:e1:33:b0:09:98:01:c3:af:ce:82:d1:b4:68:96:7b:f2:9e:e6:d3:45:de:35:b7:54

Issuing Certificate URL: http://secure2.alphassl.com/cacert/gsalphag2.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsalphag2
CRL Distribution Point: http://crl2.alphassl.com/gs/gsalphag2.crl

Check the revocation status for certificate *.richie.fi

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.richie.fi

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.richie.fi
richie.fi

Other certificates including the domain name richie.fi

(limited to 100 certificates)
*.richie.fi
auth.richie.fi
digi.paivamies.fi
digilehdet-preview.richie.fi
richie.fi
ssl256340.cloudflaressl.com
digilehdet.ap.richiefi.net
digilehdet.ap.richiefi.net
aamulehti.ap.richiefi.net
ssl256340.cloudflaressl.com
richie.fi
digilehdet.ap.richiefi.net
s.richie.fi
ssl714316.cloudflaressl.com
richie.fi
digi.paivamies.fi
digilehdet.ap.richiefi.net
richie.fi
ssl256338.cloudflaressl.com
digilehdet.sanomapaino.fi
*.richie.fi
digi.paivamies.fi
ssl2123.cloudflare.com
auth.richie.fi
digilehdet.ap.richiefi.net
auth.richie.fi
digi.paivamies.fi
aamulehti.ap.richiefi.net
ssl2123.cloudflare.com
richie.fi
*.richie.fi
digilehdet-preview.richie.fi
auth.richie.fi
ssl714316.cloudflaressl.com
richie.fi
richie.fi
digilehdet-tutkimus.ap.richiefi.net
*.rad.richiefi.net
digilehdet-preview.richie.fi
digi.paivamies.fi
digilehdet-tutkimus.ap.richiefi.net
richie.fi
ssl256340.cloudflaressl.com
aller.ap.richiefi.net
digilehdet.ap.richiefi.net
auth.richie.fi
richie.fi
digilehdet.ap.richiefi.net
richie.fi
ssl714316.cloudflaressl.com
ssl325617.cloudflaressl.com
richie.fi
appdata.richie.fi
aller.ap.richiefi.net
aller.ap.richiefi.net
aamulehti.ap.richiefi.net
ssl714315.cloudflaressl.com
almatalent.ap.richiefi.net
*.richie.fi
richie.fi
ssl2123.cloudflare.com
digilehdet.sanomapaino.fi
ssl714314.cloudflaressl.com
alasatakunta.ap.richiefi.net
ssl256338.cloudflaressl.com
auth.richie.fi
auth.richie.fi
digilehdet.sanomapaino.fi
digilehdet-preview.richie.fi
*.rad.richiefi.net
digilehdet-preview.richie.fi
digilehdet.ap.richiefi.net
richie.fi
richie.fi
richie.fi
ssl256338.cloudflaressl.com
*.richie.fi
richie.fi
digi.paivamies.fi
appdata.richie.fi
alasatakunta.ap.richiefi.net
*.rad.richiefi.net
richie.fi
digilehdet.ap.richiefi.net
digilehdet.ap.richiefi.net
aller.ap.richiefi.net
auth.richie.fi
ssl2123.cloudflare.com
richie.fi
ssl306676.cloudflaressl.com
richie.fi
alasatakunta.ap.richiefi.net
ssl714314.cloudflaressl.com
ssl256338.cloudflaressl.com
digilehdet-preview.richie.fi
almatalent.ap.richiefi.net
*.rad.richiefi.net
digi.paivamies.fi
aamulehti.ap.richiefi.net
ssl714314.cloudflaressl.com

Certificate

The complete raw certificate details for *.richie.fi in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYxjxbqTTzZs84Yfq4Hg
HGCJbXW/dNovplS1iM/4xBibKmlI1BWjGDzG86HTWjHz6///BFHImjlbkX7RA9M0
r55ySCuTtMz7GU4Q1Q56MqpO9iprekgEwlA1uBCB1VLZ6idKUNb89Isj2lK5z/m4
+UeMYwgTyKRVy5prDNXQmct1k/qrvb2TOhQy+JjXj3Mtnj67BIrgmXJcw/3pw6Uv
7TY8jiNaQd0vjMsC+Ki1DqWKGWSOMORuqt8I8FTriPH/qWnBtH1BfA3ukC7XCiBg
a6+S1UhqD1GI6mJg3yltD8TfJu9cIxwYBYQL64shrEFkwMP9UgO2L6kJY/hllJi4
WwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1492332997360567241125733635645663642011476
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AlphaSSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AlphaSSL CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-05-03 10:06:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-12-12 20:20:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String '*.richie.fi'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21908455518068045442334020559530843045083399678461421271292794701975570511675993958179177571740936931426477231809485501614293319899280407404446124200107277134146949488800646750647421766325425203472362536156919849866562798736983759273795455678871525338175353033428096073290063679336027321338861589171900628086591570208555820410497673760072998563892127483665912959968079570635040542028723572070695697719033787613761579788006903942188655845523941759187153403179691369356700072399618189017204497284741464663315973808858082874003074719533411644021467755084710423203093149872643209723733123623811290516518624633350505674843
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.richie.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'richie.fi'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl2.alphassl.com/gs/gsalphag2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure2.alphassl.com/cacert/gsalphag2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsalphag2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bb214ff91fcc4531c8327a76d2245b794a1e3502
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 14ea1955f00e0d32c61f7433b78e661a4c12311e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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