web.anders.fi

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:de:15:8b:a7:27:80:00:8a:a7:f5:f1:82:6e:e6:b4:fc:ab was issued on by Let's Encrypt.

With 52 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=web.anders.fi

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:de:15:8b:a7:27:80:00:8a:a7:f5:f1:82:6e:e6:b4:fc:ab
Serial Number (int): 336908182159195815287039512164584171830443
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 06:bc:bf:fb:3c:24:d4:3d:71:62:bb:e9:9a:27:c9:09:79:a5:ab:ab
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 7e:d7:85:69:91:a5:8f:63:16:8c:56:8f:61:01:45:da:72:ad:ab:a4
Fingerprint (sha256): 2a:3f:b3:0f:56:cf:3c:b4:ac:af:f6:a4:7c:53:96:38:e6:ba:ec:d6:73:db:c8:28:dc:0b:26:4c:2f:da:d9:9c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate web.anders.fi

52

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for web.anders.fi

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

alfonshakans.com
alfonshakans.fi
api.parkkiopas.fi
auth.tampere.fi
chancellorofjustice.fi
dashboard.parkkiopas.fi
fise-qa.anders.fi
helsinki-kuvia.fi
helsinkikuvia.fi
intersport.planexshop.fi
justitiekanslern.fi
kultastore.fi
oikeuskansleri.fi
okv.fi
op.planexshop.fi
parkkiopas.fi
patevyyspalvelu.fi
planexshop.fi
pubapi.parkkiopas.fi
respa-prod.shap2.anders.fi
respa.tampere.fi
respecta.fi
sahkotuonti.fi
suomensahkotuonti.fi
tasotilaus.kivilahde.fi
testapi.parkkiopas.fi
testdashboard.parkkiopas.fi
tuas.fi
tulospalkkaus.fi
turkuamk.fi
varaamo.tampere.fi
verkkokauppa.ts.fi
web.anders.fi
www.alfonshakans.com
www.alfonshakans.fi
www.chancellorofjustice.fi
www.helsingforsbilder.fi
www.helsinki-kuvia.fi
www.helsinkikuvia.fi
www.helsinkiphotos.fi
www.justitiekanslern.fi
www.kultastore.fi
www.oikeuskansleri.fi
www.okv.fi
www.parkkiopas.fi
www.patevyyspalvelu.fi
www.respecta.fi
www.sahkotuonti.fi
www.suomensahkotuonti.fi
www.tuas.fi
www.tulospalkkaus.fi
www.turkuamk.fi

Other certificates including the domain name anders.fi

(limited to 100 certificates)
fiupeapp01.anders.fi
shared2.anders.fi
fiupeapp01.anders.fi
andersinnovations.fi
aalto-shop-prod.fiupaaltp02.anders.fi
shared1.anders.fi
web.anders.fi
usawwebp01.anders.fi
andersinnovations.fi
andersinnovations.fi
lehti.karkkainen.com
fiupshap02.anders.fi
lehti.karkkainen.com
shared2.anders.fi
shared3.anders.fi
shared3.anders.fi
git.anders.fi
shared1.anders.fi
usawwebp01.anders.fi
shared1.anders.fi
mastermarktukku.fi
aalto-shop-prod.fiupaaltp02.anders.fi
shared3.anders.fi
lehti.karkkainen.com
shared2.anders.fi
shared3.anders.fi
fiupeapp01.anders.fi
shared2.anders.fi
shared2.anders.fi
andersinnovations.fi
deawccpp01.anders.fi
fiupeapp01.anders.fi
project.anders.fi
shared1.anders.fi
shared1.anders.fi
shared3.anders.fi
web.anders.fi
andersinnovations.fi
shared1.anders.fi
fiupeapp01.anders.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
shared3.anders.fi
fiupeapp01.anders.fi
lehti.karkkainen.com
web.anders.fi
mastermarktukku.fi
andersinnovations.fi
fiupeapp01.anders.fi
andersinnovations.fi
web.anders.fi
fiupeapp01.anders.fi
shared1.anders.fi
mastermarktukku.fi
shared2.anders.fi
andersinnovations.fi
shared2.anders.fi
shared3.anders.fi
shared3.anders.fi
shared1.anders.fi
shared3.anders.fi
shared1.anders.fi
andersinnovations.fi
web.anders.fi
fiupeapp01.anders.fi
shared2.anders.fi
shared3.anders.fi
web.anders.fi
web.anders.fi
shared3.anders.fi
andersinnovations.fi
shared3.anders.fi
fiupeapp01.anders.fi
shared2.anders.fi
deawwebp01.anders.fi
shared3.anders.fi
andersinnovations.fi
shared2.anders.fi
fiupeapp01.anders.fi
shared3.anders.fi
fiupnicp01.anders.fi
web.anders.fi
shared3.anders.fi
mastermarktukku.fi
andersinnovations.fi
andersinnovations.fi
fiupeapp01.anders.fi
lehti.karkkainen.com
shared2.anders.fi
mastermarktukku.fi
lehti.karkkainen.com
shared2.anders.fi
web.anders.fi
fiupeapp01.anders.fi
shared2.anders.fi
shared1.anders.fi
fiupeapp01.anders.fi
usawwebp01.anders.fi
andersinnovations.fi

Certificate

The complete raw certificate details for web.anders.fi in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdyZEhkkmzQpVlvXY1U3
v1dv3MR95YM6lruHZqczzTkhp4eIO3sDnbeu34Za3SZZEnQ+E+YQ9+Do7Gu2bgIy
P7uiU/SP1dJ2eXK/o00Q9GJANiM2NifxoigFUw/3xTMHOLVfa4ipk0PbTVIMmeR/
6d1aEXx2lQGav5eiylh3N8jj2acU8lagPfXwFMKCGichqPAi36LHnFaCEV0SN18W
jFIfIbA9kyVBIFTAgf6CkC68CWIeRHPcq03IiO+cmP4j23GaPxzsLMVReTPAV9xG
BOSPpBhfxP+uMTvvmZSYEtRpwJwLPqse2M2TcRIT5snkma7Sif44+7H69XTVeNgT
LQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 336908182159195815287039512164584171830443
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-17 12:08:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-15 12:08:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'web.anders.fi'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23967820533374364550832630079715908470366397984344948879834265979657560468573577036927286940023523648242774724888834737218113025404974842762945950715901448511053017588808868512809352620463926432299160136917111095795744320634909545547771883995061686382419240243430052581067346347573693734191164504091393740217995907540372213771611451457175092346577462945226487082560230592609756997532770978476462616730200994889111498703559089729619027551983096768726627998930698571348171225956798354505587334513566722712767842427818906518527679467106440987935658608842596130519777587221168827449589274935458764172613756208899369210669
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							06bcbffb3c24d43d7162bbe99a27c90979a5abab
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1030 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alfonshakans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alfonshakans.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.parkkiopas.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.tampere.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chancellorofjustice.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dashboard.parkkiopas.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fise-qa.anders.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helsinki-kuvia.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helsinkikuvia.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intersport.planexshop.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'justitiekanslern.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kultastore.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oikeuskansleri.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'okv.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'op.planexshop.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parkkiopas.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'patevyyspalvelu.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planexshop.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pubapi.parkkiopas.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'respa-prod.shap2.anders.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'respa.tampere.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'respecta.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sahkotuonti.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suomensahkotuonti.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tasotilaus.kivilahde.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testapi.parkkiopas.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testdashboard.parkkiopas.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tuas.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tulospalkkaus.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'turkuamk.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'varaamo.tampere.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verkkokauppa.ts.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web.anders.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alfonshakans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alfonshakans.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chancellorofjustice.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.helsingforsbilder.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.helsinki-kuvia.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.helsinkikuvia.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.helsinkiphotos.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.justitiekanslern.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kultastore.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oikeuskansleri.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.okv.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parkkiopas.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.patevyyspalvelu.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.respecta.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sahkotuonti.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.suomensahkotuonti.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tuas.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tulospalkkaus.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.turkuamk.fi'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076005ea773f9df56c0e7b536487dd049e0327a919a0c84a11212841875968171455800000170e89c2271000004030047304502210096558c4e01e25c34b91131cb8715469c891efb576c7c196987e0b7bc484eab4e0220668a2df4be2b35dbd025c20b8af6e156b5bd33cf09558b8180f009dc2c62daff007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170e89c2253000004030047304502203f42cd0e7781956280ed599293b843bfabeb0da648657a1dbb60735ea911fe72022100b9526d8dc5f78d40de9ef650eb73a971ce95c8dc22fd62435ad772d02a31ba50
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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