puh.vaihde.fi

Issued by Sectigo RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number df:cb:90:e0:99:08:ab:10:03:0e:41:86:b5:3c:37:02 was issued on by Sectigo Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=puh.vaihde.fi

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate will expire on

Certificate Details

Serial Number (hex): df:cb:90:e0:99:08:ab:10:03:0e:41:86:b5:3c:37:02
Serial Number (int): 297474817783771824431152708470961878786
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 71:7a:3e:d8:98:29:10:3d:6e:a1:91:57:dd:c5:bb:8d:3d:8f:d3:97
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1

Fingerprint (sha1): cf:72:e7:f3:91:35:29:d1:0f:f1:a4:48:e8:e5:57:5d:3f:cb:d0:14
Fingerprint (sha256): 1a:bb:eb:02:3a:1e:e7:00:6a:44:6b:db:17:01:8c:96:d9:e6:06:d2:94:a1:c9:f2:e9:93:63:2f:b9:b2:a7:d7

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate puh.vaihde.fi

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for puh.vaihde.fi

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

puh.vaihde.fi
www.puh.vaihde.fi

Other certificates including the domain name vaihde.fi

(limited to 100 certificates)
apu.vaihde.fi
puh.vaihde.fi
apu.vaihde.fi
puh.vaihde.fi
puh.vaihde.fi
apu.vaihde.fi
oma.vaihde.fi
apu.vaihde.fi
oma.vaihde.fi
puh.vaihde.fi
apu.vaihde.fi
apu.vaihde.fi
apu.vaihde.fi
apu.vaihde.fi
apu.vaihde.fi
apu.vaihde.fi
oma.vaihde.fi
oma.vaihde.fi
apu.vaihde.fi
oma.vaihde.fi
oma.vaihde.fi
apu.vaihde.fi
puh.vaihde.fi
oma.vaihde.fi
apu.vaihde.fi
oma.vaihde.fi
oma.vaihde.fi
oma.vaihde.fi
oma.vaihde.fi
oma.vaihde.fi
apu.vaihde.fi
oma.vaihde.fi
apu.vaihde.fi
oma.vaihde.fi
apu.vaihde.fi
apu.vaihde.fi
apu.vaihde.fi
apu.vaihde.fi

Certificate

The complete raw certificate details for puh.vaihde.fi in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 297474817783771824431152708470961878786
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-10 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'puh.vaihde.fi'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 728297147447623585087157189773603949106437702411826197790848825183549190543153146245896828795562747948983600174952657415108837987918718853329092003531863615696618688917612075733930207688863500441340662664481018420788504670986938831629100198358670081022279701602677794990571944205985164973079521353711027876351879562940880539646916543980590465559520933180784624358024695763929315697256058423239455223645231843900983547502949126944749267191722536566916687438953930231044000854789238987334003315906518787915316907604877925443754618413572066739091222781224133827506193896080116424458209639856417711295488879489779882516927768923304111937186905743886579931052141982860020026675992424072565416206307551779805815129968049874533783328973043358654896210271622355693580763785793169002073789837984124620397400351169351161122453331478487502426479450100431961056175071492895094174593665423739672770357700529017943260776520788222682382487153460941619469705780398381618063239362755008491015484003423214651415308486587121431225813911801557773847593911498320271150407410799340038608592734681247353602493377825713522360919889002504598662538294426472605148284027174081022763444082569467043146716664132193170796549335495090410075417047895483488945651341
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							717a3ed89829103d6ea19157ddc5bb8d3d8fd397
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'puh.vaihde.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.puh.vaihde.fi'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00a5b6eaa7c97d4d93f4220413061560cd3e63c99f7118e53a0dfe5223f5bd71b2e3d8c74314d861649d1b4866ac132521dfbd1306b7caff90668f76e18979215588f9a31aa47c20a56a888d8b7f02eff54e480a7339f977a5e608844b507d3c57bfcb768d520b1f7ed53a9e7fd05b581f07d895896e6189c19ec7b82ca9301c8e2bcd17155dde0f749ee38c7f031ee7aa1616ac1553819ecd07525cd135993faba7bd414cac4af8b873fc98ad0b9c6862b70aa608c13b2ab8609aae5ab306967501f2a3918d38319dab3adc214870900f953befc0a7e609edc99deedb857006e51d36f2e82e1d39e3de05c428093737fd41d4b230214dd1bbffeeca527d3e517a