villehurmalainen.fi

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ed:f6:a2:b7:f7:92:d2:49:bd:89:18:f7:78:67:58:81:f5 was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=villehurmalainen.fi

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ed:f6:a2:b7:f7:92:d2:49:bd:89:18:f7:78:67:58:81:f5
Serial Number (int): 342311613725893080370865720163568543367669
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 7a:72:e4:ac:84:b0:00:eb:ad:47:fa:c9:e7:43:2b:ba:40:40:1d:5c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 89:10:61:17:9b:60:7a:70:49:44:92:28:b7:4a:0c:e3:9d:ff:8a:b5
Fingerprint (sha256): 1f:3b:10:90:6e:4a:92:6f:c9:26:62:ee:f6:49:66:5c:57:d1:e2:83:0d:c0:f7:9e:d5:a8:1e:a8:72:f7:dc:d1

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate villehurmalainen.fi

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for villehurmalainen.fi

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

m.villehurmalainen.fi
villehurmalainen.fi
www.villehurmalainen.fi

Other certificates including the domain name villehurmalainen.fi

(limited to 100 certificates)
villehurmalainen.fi
villehurmalainen.fi
villehurmalainen.fi
villehurmalainen.fi
villehurmalainen.fi
villehurmalainen.fi
villehurmalainen.fi
villehurmalainen.fi
villehurmalainen.fi
villehurmalainen.fi
villehurmalainen.fi
villehurmalainen.fi
villehurmalainen.fi
villehurmalainen.fi
villehurmalainen.fi
villehurmalainen.fi
villehurmalainen.fi
villehurmalainen.fi

Certificate

The complete raw certificate details for villehurmalainen.fi in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 342311613725893080370865720163568543367669
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-11 16:07:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-09 16:07:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'villehurmalainen.fi'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 758687009092189580365713503516517747712384162012566349196475365267750611761091558110002664484737372554057882790765562252357525306141066159109477662235664578452338216518757880728009764661781415234451299445765916109784598472209202364069801985317274393973234994876335046693581013574424305166133596006716983286290591668083599543618948629103102853422375512457327477784193697114765008730851376879756168061572493059816014183517185809490369178082804159656195382910440351640548040020998215591946079255826640284842648192948181927816997148032518960701824760855525903547850982608219135756537213527295585926213351173000819779299306028509983464471846763796830806274847066950166888741413556380673363354127527928403340805555529251014773679451967668504454767493199632662558542877970297286824020853206196408040055037069868256132887014357171056171496774468665077723564102838355558818615121913354303424120788033220047700587603965050748913285843292360635656486801686550435588243144588024279669222323056727495730785616992357322273810254228080689892707352543728418573117736779326523263385955962321419231687874631258992762858456072175740693692773909255486649706538612444262852742891624200910425579826189152507485760512291186354702630683228833484142460879861
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7a72e4ac84b000ebad47fac9e7432bba40401d5c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (71 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.villehurmalainen.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'villehurmalainen.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.villehurmalainen.fi'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016aa7dd1969000004030046304402200717498534568b6c632d742478484fcf4e7bfd65882ab76f4f898e48cb689eb2022032e90805d084cd1bb6bc4facb6e7b8af5edea3621034a4092595a88f68c780c8007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016aa7dd195f000004030047304502206919ca74a369c1d6276c29aaed1763b34e7b3707806224d35befa311caabeedf022100c56c95ea3e0378406678831991998bf923bccc81f8c8880c0ce9d099fd655576
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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