apteekki.magentokehitys.fi

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:09:7b:d6:0d:f5:7a:9c:05:e5:b3:79:7f:47:1f:1b:a0:b5 was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=apteekki.magentokehitys.fi

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:09:7b:d6:0d:f5:7a:9c:05:e5:b3:79:7f:47:1f:1b:a0:b5
Serial Number (int): 351676291507458874318087254788889835708597
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: f1:56:9a:02:c1:5f:b2:66:fa:49:e4:39:65:27:02:24:ab:18:3c:3e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ca:53:77:69:a0:f5:57:5e:e8:2b:ed:3a:4f:fe:29:a4:49:ed:bf:37
Fingerprint (sha256): 15:62:23:d4:f6:8e:b8:39:a0:13:0c:0f:44:e4:5c:5d:9d:1c:e5:b5:4a:3d:27:b5:18:78:d0:13:dc:81:a5:f7

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate apteekki.magentokehitys.fi

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for apteekki.magentokehitys.fi

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

apteekki.magentokehitys.fi
tapiolanapteekki.fi
www.tapiolanapteekki.fi

Other certificates including the domain name magentokehitys.fi

(limited to 100 certificates)
lidl-prod.magentokehitys.fi
apteekki.magentokehitys.fi
minimani-test1.magentokehitys.fi
apteekki.magentokehitys.fi
poratuuli-prod.magentokehitys.fi
thebodyshop-test1.magentokehitys.fi
poratuuli-prod.magentokehitys.fi
audico-prod.magentokehitys.fi
apteekki.magentokehitys.fi
thebodyshop-test1.magentokehitys.fi
minimani-test2.magentokehitys.fi
apteekki.magentokehitys.fi
minimani-test1.magentokehitys.fi
thebodyshop-test1.magentokehitys.fi
apteekkariliitto-test1.magentokehitys.fi
heitools-test1.magentokehitys.fi
audico-prod.magentokehitys.fi
thebodyshop-test1.magentokehitys.fi
tokmanni-test1.magentokehitys.fi
thebodyshop-test1.magentokehitys.fi
apteekki.magentokehitys.fi
lidl-prod.magentokehitys.fi
apteekki.magentokehitys.fi
eapteekki-qa.magentokehitys.fi
thebodyshop-test1.magentokehitys.fi
apteekki.magentokehitys.fi
apteekki.magentokehitys.fi
audico-prod.magentokehitys.fi
apteekki.magentokehitys.fi
kulta-center-prod-20190506.magentokehitys.fi
apteekkariliitto-test1.magentokehitys.fi
audico-test1.magentokehitys.fi
apteekki.magentokehitys.fi
minimani-prod.magentokehitys.fi
heitools-test1.magentokehitys.fi
minimani-test1.magentokehitys.fi
minimani-test2.magentokehitys.fi
apteekkariliitto-test1.magentokehitys.fi
apteekki.magentokehitys.fi
poratuuli-prod.magentokehitys.fi
eapteekki-qa.magentokehitys.fi
apteekkariliitto-test1.magentokehitys.fi
heitools-test2.magentokehitys.fi
apteekki.magentokehitys.fi
apteekki.magentokehitys.fi
audico-prod.magentokehitys.fi
apteekki.magentokehitys.fi
minimani-test1.magentokehitys.fi
audico-test1.magentokehitys.fi
lidl-prod.magentokehitys.fi
minimani-test2.magentokehitys.fi
thebodyshop-test1.magentokehitys.fi
lidl-prod.magentokehitys.fi
apteekki.magentokehitys.fi
apteekki.magentokehitys.fi
eapteekki-qa.magentokehitys.fi
kultacenter-m2-test1.magentokehitys.fi
lidl-test1.magentokehitys.fi
lidl-test1.magentokehitys.fi
minimani-test2.magentokehitys.fi
apteekki.magentokehitys.fi
apteekkariliitto-test1.magentokehitys.fi
apteekki.magentokehitys.fi
apteekki.magentokehitys.fi
lidl-test1.magentokehitys.fi
kulta-center.fi
apteekki.magentokehitys.fi
apteekkariliitto-test1.magentokehitys.fi
minimani-test2.magentokehitys.fi
apteekki.magentokehitys.fi
mehilainen-test1.magentokehitys.fi
demo-m2-os.magentokehitys.fi
lidl-prod.magentokehitys.fi
tikkurila.magentokehitys.fi
apteekki.magentokehitys.fi
lidl-prod.magentokehitys.fi
audico-prod.magentokehitys.fi
minimani-test2.magentokehitys.fi
apteekki.magentokehitys.fi
minimani-test1.magentokehitys.fi
apteekkariliitto-test1.magentokehitys.fi
apteekki.magentokehitys.fi
heitools-test1.magentokehitys.fi
apteekki.magentokehitys.fi
mehilainen-test1.magentokehitys.fi
minimani-test2.magentokehitys.fi
opensource.magentokehitys.fi
apteekki.magentokehitys.fi
audico-prod.magentokehitys.fi
mehilainen-test1.magentokehitys.fi
apteekki.magentokehitys.fi
*.magentokehitys.fi
thebodyshop-test1.magentokehitys.fi
lidl-prod.magentokehitys.fi
thebodyshop-test1.magentokehitys.fi
apteekki.magentokehitys.fi
apteekki.magentokehitys.fi
poratuuli-prod.magentokehitys.fi
mehilainen-test1.magentokehitys.fi
www.kulta-center.fi

Certificate

The complete raw certificate details for apteekki.magentokehitys.fi in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCE9l/eTmVHReXkK/Dfu
in01Rz0iOZbMxguNf58XTl1kxwXaiqP/d0Om5ZFkrfghmia7lQbKBxb3V0F4j0rM
8TqXbOAlRr/X3mEcuYHewiBP3hyrYtU9IHK4JDht4+BXMnqyrwMk4MEqRsq9mFGW
WYgk8NZsZrOX0TPtPI76zKx0jjw6z2wRGoy3N3Adro5SxzUxLEPKyk62UheNa+Mp
7FJZX8x8lfesoW8sOUOJEYSddA4aSOOl0m8S/4rDpkN5kHKrnX0VgBO5DwXpU6rO
yCwyGq5qkOvJckm3T6TGt4j+M9ri7/iGP7Mbi3peBbisNO5Yv2BK2/MxZ8nhhoDB
owIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 351676291507458874318087254788889835708597
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-11 14:15:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-10 14:15:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'apteekki.magentokehitys.fi'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22234333224849134978855259117637390613815152196372257630267765431804693720551729992943672494896391577265893605194678177538387110022857714864427914510283919484136325707734752223688886056841858425587319995989789545330421502360242308918753976945171134202674248981599446177203364795950811083382693892110403887417516403016677563451303563184818596131999902785975092164176848858333994015534516730801107780243932531117420177148884307431894902292437097391173613460665200383662344223438556381241689763092855224650274662631088457570967071817714788626849673690569594579164342377326122519828804758667675815568422344037641947759011
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f1569a02c15fb266fa49e43965270224ab183c3e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (76 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apteekki.magentokehitys.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tapiolanapteekki.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tapiolanapteekki.fi'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016d20e4de3d0000040300463044022075a8899d858c382f47e076e4ee9cc0aa08735a1970f62c3752fb2001f933f77f02206d01ac8c6f5b0a344833e16185066007001ee69ccec370189dff0782b7ddf783007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016d20e4de060000040300483046022100a4e7fff13a852d1dcde561f6afee54524fe0e250d3e51661b19ee7be94eb8323022100a4a394d8c6952912b55e87ad173c0c8e5a4e801b3b2fbcff4641f788eead4167
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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