venepaikat.hel.fi

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:cc:d0:4d:c1:0e:d9:bd:56:5e:ae:05:36:74:5c:18:2b:e1 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=venepaikat.hel.fi

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:cc:d0:4d:c1:0e:d9:bd:56:5e:ae:05:36:74:5c:18:2b:e1
Serial Number (int): 331031343792815191091644789691719832054753
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3d:72:0a:c4:3a:1b:93:d2:9c:d4:04:6c:a2:f6:d4:e4:87:3b:9f:85
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): e5:37:a7:49:2c:ae:b9:07:52:c1:59:3c:10:92:d7:c6:f2:ba:f2:26
Fingerprint (sha256): 2d:60:b1:97:fc:01:8e:94:d6:3a:cd:64:a8:56:fd:5a:6c:2b:ab:92:d4:2a:60:cb:d7:ab:f0:61:95:3b:9f:cb

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate venepaikat.hel.fi

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for venepaikat.hel.fi

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

venepaikat.hel.fi
venepaikat.prod.hel.ninja

Other certificates including the domain name hel.fi

(limited to 100 certificates)
liikuntakauppa.hel.fi
digi.hel.fi
shared2.anders.fi
aineistopankki.hel.fi
www.kasarmitorinkesa.hel.fi
*.edu.hel.fi
koulurekisteri.hel.fi
*.movendosplatform.com
numerot.hel.fi
dev.hel.fi
misi.hel.fi
kehmet.hel.fi
tilanvaraus.edu.hel.fi
muistopaikat1918.hel.fi
linkedevents.hel.fi
ohjaamo.hel.fi
varaamo.hel.fi
digineuvonta.hel.fi
palvelukeskus.crm.hel.fi
kerrokantasi.hel.fi
securemail2.hel.fi
tyoterveys.ajanvaraus.hel.fi
toimintaymparisto.hel.fi
api.hel.fi
kerrokantasi.hel.fi
beeblebrox.edu.hel.fi
shared2.anders.fi
keskustelu.hel.fi
omastadi.hel.fi
huonevaraus.hel.ninja
linkedevents.hel.fi
pohjavesi.hel.fi
opehuone.edu.hel.fi
opehuone.fi
uutiskirjeet.hel.fi
varaamo.hel.fi
webmail.ish.edu.hel.fi
digi.hel.fi
helluntaiseurakunta.fi
osallistu.hel.fi
ideapaahtimo.osallistu.hel.fi
*.movendosplatform.com
kruunusillat.hel.fi
helvi.hel.fi
shared2.anders.fi
tcm.hel.fi
huonevaraus.hel.ninja
omastadi.hel.fi
finalsite.net
numerot.helmi.hel.fi
kaupunkitilaohje.hel.fi
koulurekisteri.hel.fi
linkedevents.hel.fi
tunnistus.hel.fi
*.lib.hel.fi
*.movendosplatform.com
kerrokantasi.hel.fi
koulurekisteri.hel.fi
shared2.anders.fi
uutiskirjeet.hel.fi
www.att.hel.fi
nextlevel.hel.fi
nextlevel.hel.fi
numerot.helmi.hel.fi
geoserver.hel.fi
linkedevents.hel.fi
www.hel.fi
eterveys.hel.fi
ohjaamo.hel.fi
palvelukartta.hel.fi
linkedevents.hel.fi
webcal.edu.hel.fi
api.hel.fi
www.influenssarokotus.hel.fi
geoserver.hel.fi
palvelukeskustest.crm.hel.fi
sts.hel.fi
servicekarta.hel.fi
turvalomake.hel.fi
sip.hel.fi
palvelukartta.hel.fi
winhawiivi.edu.hel.fi
digi.hel.fi
helluntaiseurakunta.fi
brand.hel.fi
numerot.hel.fi
uutiskirjeet.hel.fi
misi.hel.fi
palvelukartta.hel.fi
numerot.helmi.hel.fi
www.kruunusillat.fi
dev.hel.fi
beeblebrox.edu.hel.fi
nextlevel.hel.fi
palvelukeskustest.hel.fi
tilajakehitys.hel.fi
*.movendosplatform.com
dev.hel.fi
tiedonohjaus.hel.fi
tiedonohjaus.hel.fi

Certificate

The complete raw certificate details for venepaikat.hel.fi in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 331031343792815191091644789691719832054753
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-13 09:59:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-11 09:59:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'venepaikat.hel.fi'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 791157749753134144712966702348495118166475299418511070283688237898744653204411866572899470676134436343641911256465910190580074695105030641269682633987478910802580283907684184966248465754500653410768934899860885808601977352386093239769543698215154187809988840304638941606336423527554000561992840714688933348352237324551180265281995546312730025121830351987556831312889467883076415577551754154668025200237253809559019274646938143860355878068274758901524663101805446720365581358746266443041627974146246824593143885977467710944291888814078446164777554955557857563679629933554398130095925567293555214594703430137810809635006397862058953080036340977141780414714222781533464079755530498699930112110666314796935104003533592050022579060327784849646646896453844695949268684061958747191750799843002078814886655533212852366418407771419709771997330777085737916551424218298703882294902792722931883587385776420503732965053370228480871595895980936406713683514954874316253148325869735554021602190536039930569047760037661744874697937668039961376822949604260891832978147541524490165985275476057275689552003848073691232448889695329397547566211748070130892076111929735509241019991914817523872356013051948374027621978630777684445585610221205059972231129833
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3d720ac43a1b93d29cd4046ca2f6d4e4873b9f85
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'venepaikat.hel.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'venepaikat.prod.hel.ninja'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016976b505e1000004030046304402207c45be3168ef7a6c58e71eca6a432967864aa0f6d9df80fe2b8048232257576502205e0534fb337e176fd6d78a232e889943b36db4cb2d711b1997c7d3e3b64b7154007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016976b5078c0000040300483046022100ca69f93318fbb1eb9c5af97398908718a75807d0e109b980667147321ac0fb15022100a327a943b8fd86006df2b081017f3a5eb6932fce0754664a74fe644ea77e4272
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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