varapiiat.fi

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:c0:d4:91:14:8b:0d:d7:9f:3d:59:6a:9a:91:ee:eb:f5:2a was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=varapiiat.fi

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c0:d4:91:14:8b:0d:d7:9f:3d:59:6a:9a:91:ee:eb:f5:2a
Serial Number (int): 326953621878917005278584378485796619679018
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ba:20:58:a5:09:48:8f:46:75:fa:b4:83:7d:e2:f2:94:eb:f9:00:98
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 6d:dc:40:4f:47:0f:e3:35:71:73:05:6d:1e:61:db:ea:31:a9:69:b5
Fingerprint (sha256): 27:45:e7:31:ef:95:74:96:e1:7c:e6:6e:f3:9b:f5:8b:54:96:04:22:de:27:d8:7c:5d:26:cd:a3:f7:92:c1:e2

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate varapiiat.fi

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for varapiiat.fi

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

varapiiat.fi
www.varapiiat.fi

Other certificates including the domain name varapiiat.fi

(limited to 100 certificates)

Certificate

The complete raw certificate details for varapiiat.fi in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 326953621878917005278584378485796619679018
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-28 00:02:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-27 00:02:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'varapiiat.fi'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 815013128979389524679070734027091078408142574423967051787735308730710469198221919801622757494257370869922660436650909246372552276890120108894030121296799234785825649568060432272376765123391490444694787672432923779526283808685085297913294164446403799768512829864234221258002788625935103302277861647337841279157944412319179113186323126381543527969264536447858346224523634620494698570033490046834284138164265523924991633997530361081660728714241420302433532927660650434742502142599706902637725884078935596507278944455170648043401808350292618581939638381952762845697711699726498340604054092413329253611701503029265436235864951924574890290009209284505424769170440612491449155175493099860345016385990597702435922025052377126726583149073021782087436277232864851422730321258159060341576643899451296030850511494993976760678089582842675922122750233488522502107672211202188516401094707742807088856671615774748163637807681903366887580092107300267619634842400575347478687515816630517020213874717671177271527849028835647795466277582060446051033327216806945368743746222240186550129659662471896681734939196702290979089705327905647377441818045643143588382652971463184167921666359074555122010558454395928409101277810416308371925777305001753891875969107
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ba2058a509488f4675fab4837de2f294ebf90098
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'varapiiat.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.varapiiat.fi'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f200770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016d7563a4d50000040300483046022100bd6671368ea7ebeddde7044ce2537c14e1038a9887146ed32ce5a753aac81df00221009b81688204632f93d843afe9f38dc6778d6f1d781e299afdd7ef0e49419c4235007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016d7563a6d10000040300483046022100952a088b36d88be5ddc1436528611b08145250811951bb5ebc6528ff875463e8022100a9b74e2202964a6e67191c5501a1d17c68ba82761d1b02425e430a0c1daf4fd0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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