digipaali.dev.hamk.fi

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:9e:22:cf:0a:95:a1:49:27:d7:ff:77:dd:ba:ac:67:27:ad was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=digipaali.dev.hamk.fi

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:9e:22:cf:0a:95:a1:49:27:d7:ff:77:dd:ba:ac:67:27:ad
Serial Number (int): 315147740540774428793547631933071492065197
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 4e:b9:60:88:84:6b:68:ef:44:34:80:12:9e:8b:ef:49:83:97:fc:ad
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): dc:20:96:31:81:be:8b:14:a0:4e:49:79:db:f0:34:cc:0a:f2:07:28
Fingerprint (sha256): 28:5b:a0:2b:65:ca:99:e8:b2:a6:77:ed:a8:d4:a5:a7:f1:bc:97:52:be:a0:87:bf:95:51:42:19:21:ca:55:27

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate digipaali.dev.hamk.fi

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for digipaali.dev.hamk.fi

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

digipaali.dev.hamk.fi

Other certificates including the domain name hamk.fi

(limited to 100 certificates)
tiedotus-hakija.hamk.fi
opendata.hamk.fi
imanagerle.hamk.fi
vdi.hamk.fi
nessus.hamk.fi
lectures.hamk.fi
shibbo.hamk.fi
myfiles.hamk.fi
myfiles.hamk.fi
video.hamk.fi
blog.hamk.fi
helpdesk.hamk.fi
unlimited.hamk.fi
vdi.hamk.fi
vpn1.hamk.fi
funity.hamk.fi
vdi.hamk.fi
uutiskirje.biotaloudentaydennyskoulutus.hamk.fi
login.hamk.fi
funity.hamk.fi
intra.hamk.fi
tapahtumat.hamk.fi
repo.hamk.fi
patu.hamk.fi
myfiles.hamk.fi
integration.hamk.fi
www5.hamk.fi
trainingstudy.hamk.fi
uutiskirje.biotaloudentaydennyskoulutus.hamk.fi
moodle.hamk.fi
shibboleth.hamk.fi
koha-migraatio-1.hamk.fi
adfs.hamk.fi
uutiskirje.biotaloudentaydennyskoulutus.hamk.fi
*.navi1.hamk.fi
robotics.mecheng.hamk.fi
ammaura.hamk.fi
www5.hamk.fi
wihi.hamk.fi
learn.hamk.fi
wm1.hamk.fi
*.ezproxy.hamk.fi
digipaali.dev.hamk.fi
*.ezproxy.hamk.fi
video.hamk.fi
entrance.hamk.fi
hamk.fi
share.hamk.fi
peppi.hamk.fi
wiki.hamk.fi
*.ezproxy.hamk.fi
hamk.fi
uutiskirje.biotaloudentaydennyskoulutus.hamk.fi
blog.hamk.fi
idmserver1.hamk.fi
funity.hamk.fi
vpn1.hamk.fi
uutiskirje.biotaloudentaydennyskoulutus.hamk.fi
portal.hamk.fi
intra.hamk.fi
dynasty10.hamk.fi
asia.hamk.fi
share.hamk.fi
moodle2.hamk.fi
apps.hamk.fi
peppi.hamk.fi
learn.hamk.fi
verkkomaksut.hamk.fi
*.navi1.hamk.fi
exam.hamk.fi
shibboleth.hamk.fi
pakki.hamk.fi
lukkari.hamk.fi
learn.hamk.fi
*.ezproxy.hamk.fi
funity.hamk.fi
vpn1.hamk.fi
vpn1.hamk.fi
intra.hamk.fi
entrance.hamk.fi
repo.hamk.fi
asia.hamk.fi
lukkari.hamk.fi
si-moodle.hamk.fi
repo.hamk.fi
opendata.hamk.fi
adfs.hamk.fi
hamk.fi
hamk.fi
taykkari.hamk.fi
apps.hamk.fi
apps.hamk.fi
hamk.fi
mimtest1.hamk.fi
soleops.hamk.fi
idmserverle1.hamk.fi
login.hamk.fi
opendata.hamk.fi
vcproxy1.hamk.fi
si-moodle.hamk.fi

Certificate

The complete raw certificate details for digipaali.dev.hamk.fi in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 315147740540774428793547631933071492065197
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-16 18:33:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-14 18:33:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'digipaali.dev.hamk.fi'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 818845999752950539596070806741897576530772077896445546633547923890947418685595453455150976954323362698811823668933336994383923464800660212872863183426526152651571132199411624324964369002776256014690637714222165544995930355741437336623653982698382208300101089479981025862447544013839161982784392884229461880974097102220075063027465039552618597506465272910305337160405415261547645539946907799624610719937412224529292881627553724317653703669119375016374310024699002460047666076495540650749683604285073429592232619079704825655088763369754937334235167927053460507731075980068039111897614780520579607607000886882686123019688083442397416462035481523562041482142426126680100698401401071064479940814582746482275513225727319863110520436640722229836358007457956542865523459978564013645759260117292279998947203928738220198433380690066446822862815022467151701719820775519620170639817601409069859902811121715982769555438080139282307439557469451157727867351140113642471939506743610496195385884535920960082809208494860285165666949789260856410309158591762232416736404185027236249305211418635354220156179021183421109262960260212020320782346675651612886150374840859475331104807484134503175896212538150109988660649581082601941610601565281560917141527567
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4eb96088846b68ef443480129e8bef498397fcad
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digipaali.dev.hamk.fi'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb27300000170e4d5fcc1000004030046304402205a37efd23919c275972ecb6d8da6cd1ae4deec114f1848b4145cf519db198d8c02204dc5ee5504df0a1c542120eff6c3c4e470bc63d84f5ae078bc25000f6e85923900760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c00000170e4d5fcec0000040300473045022100ba0c33c6dc2c57316d88251f50092b42cc9b37f3f63789ba26a502ed22d480e70220372d361fb9e26ed2ee096eaf0098e89c1051c931af2c08dba23bbec7beb52150
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0062b1cb7748bf2a5263e1cbc9d75ea964c629bf0480fea8947e3bd4b1300be42e13585f663aeecfcb4bb50eea0bdc47f5b3af4341d81c77c9fb7178d704fd81d54ae342aa824444ce9131a829ac1d399e7635e99341be7d8edf3aafdeb9325422c34b9bb9d5c33f030c33dbb41c8d649bab64b5456f4f1265d87ab3f24bccfce88f7e8bafd63d8999b9b286b385b4ee624386e1c483d3142d694048060251ba6ff74a533c668e5dbf04a3eb292f7d616586f3675862b206a8f02d336ebfbb16c9a2cdfa8b6806e252021f3b3743345e647b44abed1e517f9f1950c9708753e3e30016f6c7b74e7abc90306819aac8e948156b8af7ffeca56fea4e4b1e0a3947c7