www.uusi.clementia.fi

Issued by R3

About this certificate

This digital certificate with serial number 04:80:9f:f4:12:83:bc:63:2a:98:e4:c2:39:31:50:97:85:89 was issued on by Let's Encrypt.

With 15 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.uusi.clementia.fi

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:80:9f:f4:12:83:bc:63:2a:98:e4:c2:39:31:50:97:85:89
Serial Number (int): 392217901240204959253301646282298268026249
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 4d:c7:58:b7:e5:76:3c:44:0f:35:0e:16:da:bb:b7:1a:69:8a:a3:e1
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): a5:66:02:40:b0:1c:08:be:9f:2b:b2:dc:bc:7f:90:0c:f4:4d:2b:93
Fingerprint (sha256): 1d:01:a3:b6:30:ab:09:0b:f6:c8:bd:24:58:e3:9e:ed:56:35:ed:c6:49:c6:39:66:43:e0:ac:b8:ff:8e:b2:5f

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.uusi.clementia.fi

15

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.uusi.clementia.fi

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.clementia.fi
*.muksubarometri.fi
*.suomenparas.fi
muksubarometri.fi
suomenparas.fi
www.healthex.clementia.fi
www.jokiranta.clementia.fi
www.lukkaroinen.clementia.fi
www.muksubarometri.clementia.fi
www.stagingtraining.clementia.fi
www.suomenparas.clementia.fi
www.testi.clementia.fi
www.training.clementia.fi
www.uusi.clementia.fi
www.webmail.clementia.fi

Other certificates including the domain name clementia.fi

(limited to 100 certificates)
suomenparas.fi
muxurd.clementia.fi
clementia.fi
uusi.clementia.fi
muksubarometri.fi
muksubarometri.fi
jokirannankantriklupi.fi
ervasti.fi
pelikirja.net
refex.clementia.fi
muksunkirja.fi
suomenparas.fi
healthex.clementia.fi
healthex.clementia.fi
ervasti.fi
ervasti.fi
pelikirja.net
healthex.clementia.fi
suomenparas.fi
uusi.clementia.fi
kampaaja.clementia.fi
pelikirja.net
healthex.clementia.fi
muksunkirja.fi
ervasti.fi
taatankirja.fi
jokirannankantriklupi.fi
www.uusi.clementia.fi
taatankirja.fi
muksubarometri.fi
lukkaroinen.clementia.fi
taatankirja.fi
ervasti.fi
clementia.fi
pelikirja.net
pelikirja.net
clementia.fi
muksubarometri.fi
taatankirja.fi
ervasti.fi
ervasti.fi
jokirannankantriklupi.fi
muksubarometri.fi
clementia.fi
lukkaroinen.clementia.fi
muksunkirja.fi
muksunkirja.fi
webmail.clementia.fi
muksunkirja.fi
muxurd.clementia.fi
jokirannankantriklupi.fi
pelikirja.net
muksubarometri.fi
suomenparas.fi
muksunkirja.fi
ervasti.fi
taatankirja.fi
clementia.fi
aj.clementia.fi
muxurd.clementia.fi
clementia.fi
taatankirja.fi
jokirannankantriklupi.fi
ervasti.fi
lukkaroinen.clementia.fi
pelikirja.net
healthex.clementia.fi
suomenparas.fi
muksunkirja.fi
muxurd.clementia.fi
healthex.clementia.fi
muksubarometri.fi
pelikirja.net
pelikirja.net
pelikirja.net
jokirannankantriklupi.fi
refex.fi
muxurd.clementia.fi
pelikirja.net
ervasti.fi
jokirannankantriklupi.fi
healthex.clementia.fi
jokirannankantriklupi.fi
aj.clementia.fi
uusi.clementia.fi
*.pelikirja.net
suomenparas.fi
clementia.fi
suomenparas.fi
aj.clementia.fi
healthex.clementia.fi
taatankirja.fi
muksubarometri.fi
muxurd.clementia.fi
lukkaroinen.clementia.fi
muksunkirja.fi
clementia.fi
jokiranta.clementia.fi
suomenparas.clementia.fi
taatankirja.fi

Certificate

The complete raw certificate details for www.uusi.clementia.fi in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZnY/9DQ/fVWKfbRsgc9
Q5V8zdH2DsacbXK7kJfkP1feSFsaNI3nHn4HyTa/qyumzsQesPrHXsFXLOb0Kkix
BZGkKSrF+faMLBg+ZX4sq4ve2FHOsLrLir9qmnrzxwhzKmcx8/uRpBQWa/VFiihf
h419BIxT9bXKBUd/PJaG72TUYjMlkAb4U6yL5ehjyANXkcI+k1T2WoDa7Zz3Xmv+
CBV/NRAxAnGTioWlPRGbW5bX4lLQVrxZzTEq5Xh5UOQsr3bopC4WpXHPbTp+zObJ
0hxd5+jfh9OXQ+5LdrHxbfzq0sDpewnPS34ESWcms5krdeE0VTNBBoct4I5du4Wz
SQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 392217901240204959253301646282298268026249
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-13 12:19:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-12 12:19:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.uusi.clementia.fi'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22420045084433676498233194471269048922497586853239727755408936877056299303903362420471861727071029244265155910673582222749252100669364509395995072848266265531742683282470270523266282157083244521408352191134950725129476866610973340786538093411937215330212587764881908942333120282659027078405358200396168309427527845988243916796999582325598956529313594987433788232138978985359219012580974170344241925840558301811630305709405155373367866796060802275565631236368444748222748220625467523009425350976488688785236411099561266275445320029736582132646893955291026770180817434108196872940974296463669717470683321308047269540681
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4dc758b7e5763c440f350e16dabbb71a698aa3e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (376 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clementia.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.muksubarometri.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.suomenparas.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'muksubarometri.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suomenparas.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.healthex.clementia.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jokiranta.clementia.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lukkaroinen.clementia.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.muksubarometri.clementia.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stagingtraining.clementia.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.suomenparas.clementia.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.testi.clementia.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.training.clementia.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uusi.clementia.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.webmail.clementia.fi'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018a8eb211150000040300483046022100d4e25263222674f732ec40e0d9dcc4c4d1b2124e94eab178741f8ca5251a3caa022100bb71d5bad54e92ff0186985c36433f55c27e3a9db908236fca2c64f04545aff90076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018a8eb2112a0000040300473045022100c532842e5feacc6f2c9aefa4d9a7d0efb90e12923982946a81b3340e0fcac13302206bcc20b67a255ac8ce97cea0ae564e7b37a6175c63aec0cc9760958a139606aa
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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