stat.helkela.fi

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:73:7e:4e:17:dd:af:86:50:f4:de:44:d1:33:7c:15:1c:9d was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=stat.helkela.fi

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:73:7e:4e:17:dd:af:86:50:f4:de:44:d1:33:7c:15:1c:9d
Serial Number (int): 300637218201871695409426425876607212526749
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f7:5b:f2:ea:2b:e1:57:6a:44:61:71:5b:45:6e:6b:5d:67:02:63:d2
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ff:47:2c:d7:1d:ab:87:a9:4a:c0:97:8c:66:e4:e0:4d:ad:c3:4c:bf
Fingerprint (sha256): 1e:da:7c:29:01:a6:35:75:0b:d7:bf:81:68:16:49:ae:f9:e5:80:d5:b0:f9:23:4a:2d:f6:08:6e:47:5a:5f:04

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate stat.helkela.fi

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for stat.helkela.fi

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

stat.helkela.fi

Other certificates including the domain name helkela.fi

(limited to 100 certificates)

Certificate

The complete raw certificate details for stat.helkela.fi in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGWDCCBUCgAwIBAgISA3N+Thfdr4ZQ9N5E0TN8FRydMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTAzMjIyMjEwNThaFw0x
OTA2MjAyMjEwNThaMBoxGDAWBgNVBAMTD3N0YXQuaGVsa2VsYS5maTCCAiIwDQYJ
KoZIhvcNAQEBBQADggIPADCCAgoCggIBAM6I5FJa8MQGMTMLtVXlkv/XCeL25yqH
1zYzKwBuzVUTTV0LxlKgBCCNpOio5CkTULF5eIMnyG6xzNa1avvT9sWyvHajQy/F
bLNmLFIv/InQLUJJPOo9VEJwvy0iBXpkv0Hg5y9JmmFadslUaI7I/Kh2XVFmPW4o
B/ThOEooA6RD3yT2MiV5u2JCapbKYGLA2Jq6y3KMKK1ND4SGpIPObflwBr4IeRR4
NxWzNbPcrCsh5NY3kqwU9ZTQrSUobp8AQtpxXP3g81I9nbnDQ+myfu9TP+F6qwUP
XcF8sH0Thkzvnu4EJyqGlOhnxvZoRA8f+YkofVlnRAA8RKu/3iEdsYDbt8ARQLa0
sbzwXCiZ0IdwqPbNzr9JWcflEDplgW+fSyqgPndW46+2tKjMJdTtSay7IMCPNS6E
12btds6r117+kwLUqD5dOMDF5WC2ZVjJWsprh5XKMjsVJMYZzXFuAtbhFsiJjPXT
+9t99GVtMQlvhOm9n/+Pang2uCSxt1N7WzLND9LSGOLn5XQHypUco0kfU/2i4VyT
t3euYvSYgrOP+FJ3X/vXEtXNmguQyTNbNLicDLwP3Fp+ZRU+iL26B9Yy0zNkixSa
2yEUM45PY5nIEWaBbCBdcz8PCOFbpsO3VoQUCzqXGtSDR4Y/Ck2lsFL/NAU74gpp
weYFMs6hnKqxAgMBAAGjggJmMIICYjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYw
FAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFPdb
8uor4VdqRGFxW0Vua11nAmPSMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/z
qOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50
LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50
LXgzLmxldHNlbmNyeXB0Lm9yZy8wGgYDVR0RBBMwEYIPc3RhdC5oZWxrZWxhLmZp
MEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUH
AgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBgYKKwYBBAHWeQIEAgSB
9wSB9ADyAHcAY/Lbzeg7zCzPC3KEJ1drM6SNYXePvXWmOLHHaFRL2I0AAAFpp6v1
ugAABAMASDBGAiEAo79A76+UsZnk7FuW2soQeWSY21ewfaXuxZCEmjBwoJMCIQDf
VfzQWyYAOocRBvp9djkIilhP31fL6OGhwy89H7ZaFgB3AOJpS64m6OlACeiGG7Y7
g9Q+5/50iPukjyiTAZ3d8dv+AAABaaer96sAAAQDAEgwRgIhAKR2MDC9xCCjwDbF
QoaZiu57+H0CncGbSKcNcb/BqlmJAiEAnr/zLdZLLaoINUMLfxBHMw8D+S6hPLbx
wwaKwaRqLNAwDQYJKoZIhvcNAQELBQADggEBAHS4HM28ZgsjDortsIMTAqFMvhfq
oRJyDbiVbsrBkdRfnUQCtnUyOefVC94PmFq9VOgnXJEw7dqJCQl2fnV/u8l6Sfwq
npw82CMz+BLsYzDts73KoedoVuCfD12vmlE7gn2Isna2EqRkyNX1SrZyw1OVxqAD
Jqyxfq+/6SfvcRc69x/KcpY/dCWwoKu5mcWbq6vbOAFU/mkoDcO/Abm4+JeDzOYV
vwWPCxe9Y3VX39BWQFGDOQliJC00Cg9eI7HfO5uEJqOQGy6tdFzGsKZJDhbWNGM5
9dA7cY5X0yPvcsVVTOjhnu9u2ObYIhf/vsvkL7BnaJ0PhQOkfLruVPpu+dM=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 300637218201871695409426425876607212526749
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-22 22:10:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-20 22:10:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'stat.helkela.fi'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 842588202046902206104621351287808500991016749081767881298901132913646522206241073109292009221793019957849803365733604320271521158901440370829651397307546078691989221189251468059551378291423495328869123053185677747509427145936911791956056832377271590857029963683266187206200043301597540465963079338909595500287435141873394690549559618039304880120535973468016953426643278268959348621106903786554860384461317723538058777970429821701814346950898534499080943162234701431815681536516809374960367899669191926165107600522987500596633418934579448816524194998977475753909849385442997182347729162471534847373470885025680634823958809295585153066234788210248923608903877144612863359931278819580891555232775041438719210005674531592017946848511827450950671302328301349197558177200259706131988065313117178407952502541921122288123581132448385557036654321171682816906780853822964936804584948165617503308488869395059315307179814927464779800167421758331032473876927658722097132573007673925531787265403754334658498592520327640318272477568891555829583514422309737635924470565373348467958541569199969868567780210991421039319663775688491282749296782344646443708367358372171684460385999080059919524984840078890470105035126390900219762496211130533795537398449
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f75bf2ea2be1576a4461715b456e6b5d670263d2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stat.helkela.fi'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f200770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000169a7abf5ba0000040300483046022100a3bf40efaf94b199e4ec5b96daca10796498db57b07da5eec590849a3070a093022100df55fcd05b26003a871106fa7d7639088a584fdf57cbe8e1a1c32f3d1fb65a16007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000169a7abf7ab0000040300483046022100a4763030bdc420a3c036c54286998aee7bf87d029dc19b48a70d71bfc1aa59890221009ebff32dd64b2daa0835430b7f1047330f03f92ea13cb6f1c3068ac1a46a2cd0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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