koulia.fi
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:39:9a:f5:4c:9c:84:89:ab:f3:f9:10:7c:73:79:05:74:6f was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=koulia.fi
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:39:9a:f5:4c:9c:84:89:ab:f3:f9:10:7c:73:79:05:74:6fSerial Number (int): 280938927487719192120391295389916383769711
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 9d:b8:31:3d:04:90:8a:0d:ef:75:24:76:56:07:2e:5f:14:34:aa:d9
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 66:2a:8f:d7:1a:5f:63:b1:31:e7:b5:7d:fb:f5:b7:52:2f:99:88:7b
Fingerprint (sha256): 01:df:82:c2:66:0c:58:c4:d2:38:18:db:7a:c7:76:5d:8f:ea:75:3c:47:f2:51:de:90:78:09:8b:9e:70:d9:d4
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate koulia.fi
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for koulia.fi
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
koulia.fi
www.koulia.fi
www.koulia.fi
Other certificates including the domain name koulia.fi
(limited to 100 certificates)
www.koulia.fi
koulia.fi
mail.koulia.fi
gtrainerdemo.koulia.fi
www.koulia.fi
gtrainerdemo.koulia.fi
www.koulia.fi
gtrainerdemo.koulia.fi
koulia.fi
www.koulia.fi
mail.koulia.fi
www.koulia.fi
gtrainerdemo.koulia.fi
www.koulia.fi
koulia.fi
www.koulia.fi
www.koulia.fi
koulia.fi
www.koulia.fi
mail.koulia.fi
koulia.fi
koulia.fi
mail.koulia.fi
www.koulia.fi
koulia.fi
gtrainerdemo.koulia.fi
koulia.fi
mail.koulia.fi
koulia.fi
mail.koulia.fi
gtrainerdemo.koulia.fi
koulia.fi
gtrainerdemo.koulia.fi
koulia.fi
koulia.fi
mail.koulia.fi
gtrainerdemo.koulia.fi
www.koulia.fi
gtrainerdemo.koulia.fi
www.koulia.fi
gtrainerdemo.koulia.fi
koulia.fi
www.koulia.fi
mail.koulia.fi
www.koulia.fi
gtrainerdemo.koulia.fi
www.koulia.fi
koulia.fi
www.koulia.fi
www.koulia.fi
koulia.fi
www.koulia.fi
mail.koulia.fi
koulia.fi
koulia.fi
mail.koulia.fi
www.koulia.fi
koulia.fi
gtrainerdemo.koulia.fi
koulia.fi
mail.koulia.fi
koulia.fi
mail.koulia.fi
gtrainerdemo.koulia.fi
koulia.fi
gtrainerdemo.koulia.fi
koulia.fi
Certificate
The complete raw certificate details for koulia.fi in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgISAzma9UychImr8/kQfHN5BXRvMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEyMzEwNTAyMzFaFw0y MDAzMzAwNTAyMzFaMBQxEjAQBgNVBAMTCWtvdWxpYS5maTCCASIwDQYJKoZIhvcN AQEBBQADggEPADCCAQoCggEBAKWb+exAO++84LghpnmEL5SGx2K3VwpRnhWmlubT 9xAuz9w0Qxl3tcJH+8uXimpBsr+6ofS6eVxRahOGEKlpN8eZj7ScUBGl1DtD5425 3ej7aWVy+3/uhbds5NqnUE5bweJYN3LoE2hGwtwWo+d3gzNYQKT3aoCK2nXRvLx7 qPj2LNLQJ0gXIHzPeJtW+KlXjGtwqdtmD6lQQVO11CjWQ1Cdmk3Azzb02k8GOMpA Ulnmoc82hfvBOxneX+l7TG9nHUeEkTcWM++tb4B6XSuxmQkXOQehi5rMeuMGOP/m 4whNc6osXwypjmXJV0pWVUKsXgVFWs0L7xN/14nnwvJerPkCAwEAAaOCAm0wggJp MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIw DAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUnbgxPQSQig3vdSR2VgcuXxQ0qtkwHwYD VR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUHAQEEYzBhMC4G CCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5cHQub3JnMC8G CCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5cHQub3JnLzAj BgNVHREEHDAagglrb3VsaWEuZmmCDXd3dy5rb3VsaWEuZmkwTAYDVR0gBEUwQzAI BgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nw cy5sZXRzZW5jcnlwdC5vcmcwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdgBep3P5 31bA57U2SH3QSeAyepGaDIShEhKEGHWWgXFFWAAAAW9ajHUhAAAEAwBHMEUCIBOq 9fmIPIY0BZFj2kWwdN+NHO19FnDr48K2QcG7Qf2dAiEAxLN5aMmBd2Ko+J71ioPh X+ehe8wb6PDHYQxE4+l59/EAdgAHt1wb5X1o//Gwxh0jFce65ld8V5S3au68YToa adOiHAAAAW9ajHV5AAAEAwBHMEUCIQCPENGEBS99jV3mDpFcLV93+FA8caDZosVG ypMx5avEKQIgOPkex2yYFNl0m+2S5odgsQS5U4R+gzToziXouxUDaXswDQYJKoZI hvcNAQELBQADggEBAJu962aj9tUjSPo1tiwArbHaGD2lqoMAr3eMcaeRlcHwnSWc JN0U4BVT5FxLRMlg1Iz2aKHwFUJsuhk2rv6ZAwDilYhRtQwsbqraOixAAE7NAmtC IkfE1nxXBSI6rtPgMlLRCVz37sUC8q/TqiVtKny/4FmqUSTzkX2fvtxVw/JFRlxN FF3fCFSbXAjpNm0veBHk/feIEv0kj6cGT62k9YH4mvRxrET7vonjZgcgtiNRcA89 4F6fgqIeIU1lQ8BSt7ThQVkhUazPBOriC3ikAOkL5vnGQxAmvC1oJMInabAjYBhR UlX4thEQfP8O/Jh4gMMKUv0XWHTGGxJnpT0Izgs= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZv57EA777zguCGmeYQv lIbHYrdXClGeFaaW5tP3EC7P3DRDGXe1wkf7y5eKakGyv7qh9Lp5XFFqE4YQqWk3 x5mPtJxQEaXUO0Pnjbnd6PtpZXL7f+6Ft2zk2qdQTlvB4lg3cugTaEbC3Baj53eD M1hApPdqgIraddG8vHuo+PYs0tAnSBcgfM94m1b4qVeMa3Cp22YPqVBBU7XUKNZD UJ2aTcDPNvTaTwY4ykBSWeahzzaF+8E7Gd5f6XtMb2cdR4SRNxYz761vgHpdK7GZ CRc5B6GLmsx64wY4/+bjCE1zqixfDKmOZclXSlZVQqxeBUVazQvvE3/XiefC8l6s +QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 280938927487719192120391295389916383769711 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-31 05:02:31 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-30 05:02:31 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'koulia.fi' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20906235080426554470338386940158502905155961429207774302245566714046639513102252440770191225636020842393792595489404155077121731191931631582644237795538997047542764401138481511067603984054600979053355216950553146548875332824759563155168078680746512498133740093694435280019728970096381025068624586267159950726104677079342947324391116279679155801488983239159948516709157129066026524384290410960302941160227440172115051785968217049336601538057861858394349234259499074317532563741563935776055026887756420651946020566500604955880599644286645303603980413078055394692557162936736446697711889280123221537929732113635813010681 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 9db8313d04908a0def75247656072e5f1434aad9 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'koulia.fi' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.koulia.fi' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016f5a8c75210000040300473045022013aaf5f9883c8634059163da45b074df8d1ced7d1670ebe3c2b641c1bb41fd9d022100c4b37968c9817762a8f89ef58a83e15fe7a17bcc1be8f0c7610c44e3e979f7f100760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016f5a8c757900000403004730450221008f10d184052f7d8d5de60e915c2d5f77f8503c71a0d9a2c546ca9331e5abc429022038f91ec76c9814d9749bed92e68760b104b953847e8334e8ce25e8bb1503697b . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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