digiedu.test.hel.ninja

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:85:5f:3b:26:4c:0f:9a:5a:f3:cb:a1:82:8e:d5:d1:36:a9 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=digiedu.test.hel.ninja

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:85:5f:3b:26:4c:0f:9a:5a:f3:cb:a1:82:8e:d5:d1:36:a9
Serial Number (int): 306720996377637510312337788282852305090217
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 6e:38:fe:db:6b:e5:4b:4b:15:86:b4:2a:86:64:74:49:4b:e0:f5:15
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 59:46:2d:78:c2:7b:a6:75:77:a0:95:a2:e6:7d:be:ad:82:39:e2:16
Fingerprint (sha256): 2e:64:e1:2c:39:53:23:e6:a4:61:f2:8c:ab:6b:7d:72:22:7e:d8:bb:12:bc:0f:af:37:a1:c6:36:d6:0b:32:34

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate digiedu.test.hel.ninja

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for digiedu.test.hel.ninja

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

digiedu.test.hel.ninja

Other certificates including the domain name hel.ninja

(limited to 100 certificates)
makasiini.hel.ninja
digi.hel.fi
varaamo.hel.ninja
makasiini.hel.ninja
kerrokantasi.hel.ninja
koulurekisteri.hel.fi
varaamo.hel.ninja
linkedevents.hel.ninja
kehmet.hel.fi
tilapankki.hel.ninja
profile-api.test.hel.ninja
helerm.dev.hel.ninja
tilapankki.hel.ninja
kerrokantasi-api.prod.hel.ninja
helerm.test.hel.ninja
tilapankki.hel.ninja
osallistu.hel.ninja
linkedcourses-api.test.hel.ninja
profile.dev.hel.ninja
osallistu.hel.ninja
huonevaraus.hel.ninja
mvj.dev.hel.ninja
varaamotest.hel.ninja
mvj.dev.hel.ninja
digi.hel.fi
sentry.hel.ninja
osallistu.hel.ninja
varaamotest.hel.ninja
linkedevents.hel.ninja
jassari.test.kuva.hel.ninja
huonevaraus.hel.ninja
profile.dev.hel.ninja
analytics.hel.ninja
hnh.hel.ninja
varaamotest-espoo.hel.ninja
koulurekisteri.hel.fi
analytics.hel.ninja
digiedu.test.hel.ninja
tiedonohjaus.hel.ninja
omahelsinki.test.hel.ninja
mvj-ui.dev.hel.ninja
helerm.test.hel.ninja
ltj-api.dev.hel.ninja
sentry.hel.ninja
linkedcourses-api.test.hel.ninja
koulurekisteri.hel.ninja
www.helsinkioppii.fi
monitor.hel.ninja
monitor.hel.ninja
geoflock.hel.ninja
osallistu.hel.ninja
digi.hel.fi
front1.hel.ninja
mvj-ui.dev.hel.ninja
venepaikka.test.hel.ninja
koulurekisteri.hel.ninja
varaamotest.hel.ninja
analytics.hel.ninja
linkedevents.hel.ninja
venepaikka-api.test.hel.ninja
aplans.api.hel.ninja
linkedevents-api.prod.hel.ninja
tiedonohjaus.hel.fi
tiedonohjaus.hel.fi
digiedu.test.hel.ninja
mvj-ui.dev.hel.ninja
www.helsinkioppii.fi
helerm.dev.hel.ninja
kerrokantasi.hel.ninja
tiedonohjaus.hel.ninja
www.helsinkioppii.fi
monitor.hel.ninja
varaamotest-espoo.hel.ninja
analytics.hel.ninja
tiles.hel.ninja
mvj-ui.dev.hel.ninja
sentry.hel.ninja
osallistu.hel.ninja
monitor.hel.ninja
sentry.hel.ninja
logstash.hel.ninja
palvelut.hel.ninja
salasana.hel.ninja
virkarespa.test.hel.ninja
profile.dev.hel.ninja
geoflock.hel.ninja
venepaikat.hel.fi
monitor.hel.ninja
monitor.hel.ninja
digiedu.test.hel.ninja
pt.hel.ninja
pt.hel.ninja
profile.dev.hel.ninja
ltj-api.dev.hel.ninja
logstash.hel.ninja
kunto.hel.ninja
varaamo.hel.ninja
tiedonohjaus.hel.ninja
venepaikat.hel.fi
osallistu.hel.ninja

Certificate

The complete raw certificate details for digiedu.test.hel.ninja in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 306720996377637510312337788282852305090217
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-31 07:48:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-31 07:48:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'digiedu.test.hel.ninja'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 756522595194321266802520718898590086317917265412171663378915767659145977126429096639461364770337445803377795227708662251445111714210641387483657211516455524399387269150782694838468327214211225459620306569710375289675355378436299333525335356599068144135035046087207348593638034607097593034556319188625349846921989143512225786544876604096591918478093203938287873015889440776976917173716589906321959436723562731469942522123937851998266409539994860748503443295774907756383333987403674128569139018288506339869116715004857192496065686147893424654673656892467077398744380859718771434944658787673385320346743530280625565678079234507018574124210304464627530086234484677118669880685254519389337044481788935959269956098247670007172112890220688765243050405888358925215855686980062064765297635991538760000781418884509369825549201653782578189704965075381788313612509276745096023813819667533638117017616279257267095518906863344726220386098255210209301464449441580164052070250832224199823768905425799684656522541351333204230241819664066918419723464699124333393672718517674919547566342131430449150526032150342395406973036128520120617072197074198458083480056414354604604057251714244705052546957763478886874509452055893002482942000393623189609954883059
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6e38fedb6be54b4b1586b42a866474494be0f515
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digiedu.test.hel.ninja'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000168037342e8000004030047304502202e246b0169d6f0940cdcab232940cc54c0325cd59ddc29703d06ac1a63bf6a1a02210097a1239df95402003aefc7f00407fe09afcdecb1ff6e8c4cd0ff1a75c8c23fbf007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000168037345280000040300473045022100d222db70e69ff4c32e7308c6eb4acd73bec3004297c554405728938a4036767d02203a6d4504f27d6a448ca572940a9093c0d2bf7b1785cbd7738083da92cbd31eab
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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