www.helkela.fi

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:83:d6:80:1c:fd:73:83:fa:4f:71:27:8c:4a:b5:dd:b4:b5 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.helkela.fi

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:83:d6:80:1c:fd:73:83:fa:4f:71:27:8c:4a:b5:dd:b4:b5
Serial Number (int): 306198967855007487454136179315741890032821
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 43:d4:82:ca:ea:cd:2e:7b:4d:55:c3:c4:0c:cd:ce:99:7e:da:84:65
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): fc:c0:10:cb:a6:17:41:4d:67:b9:f4:09:4d:d1:01:99:a6:ec:76:fb
Fingerprint (sha256): 2f:8b:04:46:5d:08:a4:66:9f:61:b9:2b:78:82:27:a5:94:5e:be:8b:3a:b1:fe:9f:2e:39:d2:ca:b7:cc:05:2e

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.helkela.fi

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.helkela.fi

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.helkela.fi

Other certificates including the domain name helkela.fi

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.helkela.fi in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 306198967855007487454136179315741890032821
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-21 21:10:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-19 21:10:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.helkela.fi'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 755819210750901395926819475554813613003517715702144573963222475755315455421237344778992925450211352282522035267254727878083974365673542397217267042960119222021299134009696373616435361811596501012830215038842790312520019476808789930608866967627618531036533867588063751905616692820950261904308324265408867519721701085698536863960709332289281115929681716907362788295498359008966092964790703919480377549446212593534704831008706288375172402467269913373950613740739936276577572635339594134035332435821969732419480111374698974536299684392548729289391276200221320464733380857001063514933039285237514483887599816418249479852007189133691910948138341786415774297362753523091380639928889104684706165687031355600700932167997705680514589550497286346476609773785404349137724119962318902097463386186614016748909816008981128800322508372404760384461427171001893185494408500618963526314791598866802808407059999736004964896373957930016788153405081686023089387575034946760745410202614382482296562422914520139182496326244155282144704953170609042932894249834531519905445821713697968607061201576056490138666326174874493986016704330289070556516953421501634452458650257423402031317881729435570892673984708902202136858027810863952529846820400373774605320018801
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							43d482caeacd2e7b4d55c3c40ccdce997eda8465
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.helkela.fi'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016c1695c0e0000004030047304502207e30f4e6696e2e9b144c5d4f67385b6a2b2f5d2088a311e6e4bcd9b76156904a022100d2a23e8e06bf998223c141605089b4d26128e77aea225aaa063b23da2264685e007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c1695c0ac0000040300473045022100bad1caac8e7e638e204ed4643a6a0987f3c976e5b889e4182bebd6995e97ad7402202e1ed93d8fe67cfc29f4659d6685442e98a7b7a15eeff1595e895b766f47f24c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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