blogi.keuda.fi

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:68:4c:12:bd:de:a1:ff:cb:b2:f4:04:58:6b:ef:f7:6f:9b was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=blogi.keuda.fi

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:68:4c:12:bd:de:a1:ff:cb:b2:f4:04:58:6b:ef:f7:6f:9b
Serial Number (int): 296827342595095650866239791668042652938139
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 0c:9e:d7:54:9a:f0:49:61:7e:40:6d:ff:a2:ad:ee:47:45:5f:68:cc
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 11:29:e3:f2:ab:49:bc:75:8b:7c:07:35:ea:8f:06:f2:9e:c1:a9:fd
Fingerprint (sha256): 02:ad:24:a6:bf:f3:9a:fd:7d:19:88:44:03:84:09:9e:41:b8:1b:f9:b0:ea:1c:79:2b:7f:59:3b:8d:a6:87:8c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate blogi.keuda.fi

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for blogi.keuda.fi

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

blogi.keuda.fi

Other certificates including the domain name keuda.fi

(limited to 100 certificates)
blogi.keuda.fi
opiskelija.keuda.fi
yrityksille.keuda.fi
blogi.keuda.fi
ky-fed.keuda.fi
opiskelija.keuda.fi
webmail.keuda.fi
keuda-sr.keuda.fi
keuda.fi
pinja.keuda.fi
winha.keuda.fi
dynasty.keuda.fi
ky-fed.keuda.fi
opiskelija.keuda.fi
opiskelija.keuda.fi
webmail.keuda.fi
yrityksille.keuda.fi
yrityksille.keuda.fi
keuda.fi
dynasty.keuda.fi
opiskelija.keuda.fi
oppisopimus.keuda.fi
opiskelijaintra.keuda.fi
opiskelijaintra.keuda.fi
wiki.keuda.fi
keuda-adhk.keuda.fi
keuda.fi
opiskelija.keuda.fi
ims.keuda.fi
opiskelijakeuda.focusflow.net
wiki.keuda.fi
yrityksillekeuda.focusflow.net
blogi.keuda.fi
opiskelijaintra.keuda.fi
yrityksille.keuda.fi
yrityksille.keuda.fi
keuda.fi
web.keuda.fi
opiskelija.keuda.fi
yrityksillekeuda.focusflow.net
yrityksille.keuda.fi
winha.keuda.fi
ims.keuda.fi
oppisopimus.keuda.fi
ims.keuda.fi
mfiles.keuda.fi
ky-fed.keuda.fi
www.keuda.fi
opiskelija.keuda.fi
ky-fed.keuda.fi
dynastyweb.keuda.fi
winha.keuda.fi
keuda.fi
yrityksille.keuda.fi
keuda.fi
opiskelija.keuda.fi
opiskelija.keuda.fi
blogi.keuda.fi
blogi.keuda.fi
keuda-dw.keuda.fi
verkkokauppa.keuda.fi
oppisopimus.keuda.fi
verkkokauppa.keuda.fi
wiki.keuda.fi
blogi.keuda.fi
web.keuda.fi
blogi.keuda.fi
dynasty.keuda.fi
yrityksille.keuda.fi
yrityksille.keuda.fi
blogi.keuda.fi
sts.keuda.fi
oppisopimus.keuda.fi
oppisopimus.keuda.fi
yrityksille.keuda.fi
opiskelija.keuda.fi
opiskelijaintra.keuda.fi
yrityksille.keuda.fi
dynastyweb.keuda.fi
keuda.fi
yrityksille.keuda.fi
mfiles.keuda.fi
www.keuda.fi
opiskelija.keuda.fi
opiskelija.keuda.fi
opiskelijakeuda.focusflow.net
winha.keuda.fi
ky-fed.keuda.fi
ims.keuda.fi
ky-fed.keuda.fi
mfiles.keuda.fi
ky-fed.keuda.fi
web.keuda.fi
oppisopimus.keuda.fi
web.keuda.fi
web.keuda.fi
verkkokauppa.keuda.fi
intra.keuda.fi
yrityksille.keuda.fi

Certificate

The complete raw certificate details for blogi.keuda.fi in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 296827342595095650866239791668042652938139
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-26 05:57:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-25 05:57:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'blogi.keuda.fi'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 788095121693828113830779412578097680937793099905075446124277026018798885083857093113863015724663165830506365977237183174392351560324902465996370356537083622405419021218714553652488827805213704063230952682107159605860208186454939936718781513667107302299459994769416630181730263869196694633495986928889833171409741749287355114761589252447000592533107917893085216384056115046213879490637665659554405601157605556047633224123111813631804236825482669790554056204713124819615122568153449950766144746873601498648658634390511029235979961045012042702430348319071918336735375913601014942896988162320452603456221484311111300780399954785904460936212925543741862135849113383326309944699506029634258017270032885336037862980700107298195497645337956657107727093294443193878183461920525637065924216096956092031871059106909775759555139186424670623093973257903170431904441872733922320686225541997118866888338641086306472146480381347183813058189404271623198217870449421829286442703554919941818191722723238981774631768335540652958598261723209943535155578972198388363924468785458231304496428154081574143343233031120798095441076164648846158361980501061083506431137442603756769205291505707407488750348579488502952651785392522203257173998020253135149158996949
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0c9ed7549af049617e406dffa2adee47455f68cc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blogi.keuda.fi'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016f40ff3b840000040300483046022100eff98822b845c83c6027a9704795c7fa12f0e36f3512f7155e91b3aa43520f610221009a5773a54318089236bb979ce019d870b0e8a00de56521250eb7622b4514e521007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f40ff3b7300000403004730450220537f1830a58f32c88ba33abf427c12d46a973af3112fe03fe4d63b224240c740022100bc22af06e0297f45d36e30c3a5c9831467eb1a7b78f8d3c71747c068d779cae7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		006b40e1bc798400b691763cca26fb10c5288c0c1afe40468153d6063468f30383009bfb8c941a6bfb6265105fe5c245e422cbce71323d7ed3110d18233f2838f9ec84ada4e9db1834968493b17fc2f68dcf6c41044965b24b2d4d90303c1eda6a5a706b4501fa2bbb71f23792b2047595b4d9f7ad81f1a6b031d971b73a5e11e31ec7645f02d6b0ad5e1dd88da04513abec64f92c4398cadc235b12280186dd8b571fe4e573cc45df87618482e4296dfa8df7eab1af501e9fadce70e239b70a063d62969937d5340cf2b3f17047beb68430664f23676733e4afc97cbdbee86b9545fd1fd1f92e9611bb80ca8183fbf6588bb794a441838c3389c39fbb9c71b049