ilona.rista.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:b8:2d:b1:b0:83:f8:87:34:1c:6b:31:84:74:bc:9d:be:bf was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ilona.rista.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b8:2d:b1:b0:83:f8:87:34:1c:6b:31:84:74:bc:9d:be:bf
Serial Number (int): 324009551185247594361474801925817290833599
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f7:2d:6a:8f:8d:67:70:e2:92:dc:b1:29:ad:f9:9e:9f:71:76:9e:2a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ac:b0:40:ce:63:fe:0c:a8:9a:b6:9a:6c:9b:94:10:19:2a:c2:28:34
Fingerprint (sha256): 14:7d:ff:77:23:81:70:a3:e9:96:0d:3f:6a:a5:aa:9f:36:80:6e:d4:91:e5:36:57:f6:b3:8e:6e:dd:04:b0:81

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate ilona.rista.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ilona.rista.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ilona.rista.net

Other certificates including the domain name rista.net

(limited to 100 certificates)
voikko.rista.net
git.rista.net
git.rista.net
rista.net
voikko.rista.net
git.rista.net
voikko.rista.net
ilona.rista.net
rista.net
www.rista.net
voikko.rista.net
wagtail.rista.net
ilona.rista.net
sentry.rista.net
sentry.rista.net
rista.net
tilajakamo.rista.net
voikko.rista.net
git.rista.net
hima.rista.net
git.rista.net
voikko.rista.net
ilona.rista.net
voikko.rista.net
www.rista.net
tilajakamo.rista.net
tilajakamo.rista.net
voikko.rista.net
rista.net
sentry.rista.net
hima.rista.net
tilajakamo.rista.net
hima.rista.net
hima.rista.net
tilajakamo.rista.net
voikko.rista.net
tilajakamo.rista.net
git.rista.net
sentry.rista.net
voikko.rista.net
hima.rista.net
ilona.rista.net
git.rista.net
rista.net
git.rista.net
voikko.rista.net
rista.net
hima.rista.net
sentry.rista.net
hima.rista.net
voikko.rista.net
rista.net
sentry.rista.net
rista.net
rista.net
hima.rista.net
git.rista.net

Certificate

The complete raw certificate details for ilona.rista.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVGMPSuauvCdbay52MDP
/aRGRAaDi7JgSPVVRnk6kC2NZKeeq5Mb90MxE1E6LIAo1JN35dDivFwfTiGi6jOX
PbqT0ASQ/RW261MuxwRZGqhBmpSGqtZJGAglN4dphxQe3e/cSjPSpK8q96rv8X0y
0v6fItvGhjbqYtok1eFc81J/xjRksklRZeI7rn5aEBzptkTtPuWVDMeURLD/9TPi
foAi097HCDoPr3P/5VdbpB+/+sQI113yIOyAggTuL5DheY3gxSjX5EHcPaLAJfAW
3mA+2sZvyYwDyBVc6nactwyZNdMtlfRA80a2l5enAsL4U4GBwTZvcHG8TF+EsUQW
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 324009551185247594361474801925817290833599
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-12 10:57:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-10 10:57:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ilona.rista.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21879439482191576607233765736875938405549311228936767950197817579064543047144387232688785644321144078354071944848010148411086351788271808581854380828952754742880450441428278577421855967689569946558524519057651336265648427867414591686764963465422436915032266840943201904683362765776637015999315581871553994374758284219977379060154210764276485215220602456725782483821223340630577684947485206951256597262521407813133219196749794555124653909744249080189321582140047426203057192508078214165669516849269991772334487822634742712846432815877716273665763013193297513549382480698409379756754924179058410648277283869583701448321
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f72d6a8f8d6770e292dcb129adf99e9f71769e2a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ilona.rista.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016c85b0712c0000040300473045022100e5734be95fb9b3900ae01fcb6e330d1679cca205eccbf5e624b9d1cad6b6dd58022032b8f7800a17d940bdf163bcde54167ece4b1750172bebc2756df60ccf8a9729007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c85b0711f0000040300473045022100953067a1480b7e7e55caf75bd03d62b002647499acf96c236580529750efa58502205c6784006bec9d1a1e869c985834e3d629fe9031b5a163b204d408f438e5f707
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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