www.helkela.fi

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:bd:cc:8c:0c:51:36:9e:1f:30:de:8b:6f:00:02:ed:38:01 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.helkela.fi

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:bd:cc:8c:0c:51:36:9e:1f:30:de:8b:6f:00:02:ed:38:01
Serial Number (int): 325922114825861727003970019116991359301633
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: df:0c:ec:e5:57:20:2e:1d:fe:96:f7:e7:75:ae:02:4e:d9:cc:27:a2
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): fa:e1:76:46:83:8b:4b:c7:dd:84:ca:9e:b3:3c:49:ba:b1:b3:e7:93
Fingerprint (sha256): 06:42:32:2c:14:16:07:34:b8:d5:57:92:58:0c:58:f1:08:51:0e:7e:36:da:0d:26:2f:3e:43:69:79:49:50:9e

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.helkela.fi

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.helkela.fi

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.helkela.fi

Other certificates including the domain name helkela.fi

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.helkela.fi in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 325922114825861727003970019116991359301633
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-17 22:09:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-16 22:09:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.helkela.fi'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 783007725503731333743089913567070152921784057077680424127713821806844747984429535046804452390927535714199726152991575900204614722205441186435480727069251868250027328889985583243506780456825126708949535454087590334352216509128332047237402661117925751313771988085511636478582926183427460221325680446295954801892755961143522759154692796291167021383963615231922332202412096605908732333161111944346084658787413499476352054803243260199232875435676087725589685796855889379345776122924223231103256068882072003946733812268786332670035014925873781579690492043473034853289676759764372200633847184464080270749920158095645839899258417156991784983720006984844967945792335982134766371928265036454073328778715157758936219651030539650857171499427629436072571435479549680478440128229341413056719447758203329652433789544602368076160244707042009010163889071832964721233925297476168133959189783907292620916127344093025467341539934379313397139413160028666701913024439685491740754650852572410237882751087658041716350834244541775269925139667003124301216589493228192573538456853969570198601353859250780816573189671514343544237673031632142268099099871020628550771254834210079079862722191665119183997707814173754251254973768581459170355885068152495181883770869
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							df0cece557202e1dfe96f7e775ae024ed9cc27a2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.helkela.fi'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016fb5c4da59000004030047304502205a9cb3f48814f23c315afae06f7de5a0a4ffc4000420c2e32b6bf592e83e8059022100ca26c579e61c3a9fe909869e0a141501a9dd780bd34522466f753c8ba7b1f7ca007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016fb5c4dbfb0000040300473045022100b298bcd618f8e012cc35fe2ffd1d29f578b3715f9ddce0f7674e13932ff550b30220398b4ea779ade803f4ded701925de010dddeeb2614d5d4ce1a42f110d5135c6f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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