pt.hel.ninja

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:26:06:37:f5:e1:58:0c:70:a8:d4:ae:98:b9:dd:11:69:c5 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=pt.hel.ninja

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:26:06:37:f5:e1:58:0c:70:a8:d4:ae:98:b9:dd:11:69:c5
Serial Number (int): 274275853669622269642599193617176300972485
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c2:ee:68:c4:ce:a2:2f:75:b0:a5:50:29:9e:88:4f:f7:e2:1f:99:8a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 84:7e:0b:9a:27:f4:51:a1:92:a7:bd:bc:a6:2d:1a:08:c7:59:c4:49
Fingerprint (sha256): 30:26:40:05:61:66:1a:eb:af:11:ff:48:2f:45:30:43:13:55:08:27:7f:ef:e1:da:9a:58:89:14:64:16:0c:73

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate pt.hel.ninja

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pt.hel.ninja

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

pt.hel.ninja

Other certificates including the domain name hel.ninja

(limited to 100 certificates)
makasiini.hel.ninja
digi.hel.fi
varaamo.hel.ninja
makasiini.hel.ninja
kerrokantasi.hel.ninja
koulurekisteri.hel.fi
varaamo.hel.ninja
linkedevents.hel.ninja
kehmet.hel.fi
tilapankki.hel.ninja
profile-api.test.hel.ninja
helerm.dev.hel.ninja
tilapankki.hel.ninja
kerrokantasi-api.prod.hel.ninja
helerm.test.hel.ninja
tilapankki.hel.ninja
osallistu.hel.ninja
linkedcourses-api.test.hel.ninja
profile.dev.hel.ninja
osallistu.hel.ninja
huonevaraus.hel.ninja
mvj.dev.hel.ninja
varaamotest.hel.ninja
mvj.dev.hel.ninja
digi.hel.fi
sentry.hel.ninja
osallistu.hel.ninja
varaamotest.hel.ninja
linkedevents.hel.ninja
jassari.test.kuva.hel.ninja
huonevaraus.hel.ninja
profile.dev.hel.ninja
analytics.hel.ninja
hnh.hel.ninja
varaamotest-espoo.hel.ninja
koulurekisteri.hel.fi
analytics.hel.ninja
digiedu.test.hel.ninja
tiedonohjaus.hel.ninja
omahelsinki.test.hel.ninja
mvj-ui.dev.hel.ninja
helerm.test.hel.ninja
ltj-api.dev.hel.ninja
sentry.hel.ninja
linkedcourses-api.test.hel.ninja
koulurekisteri.hel.ninja
www.helsinkioppii.fi
monitor.hel.ninja
monitor.hel.ninja
geoflock.hel.ninja
osallistu.hel.ninja
digi.hel.fi
front1.hel.ninja
mvj-ui.dev.hel.ninja
venepaikka.test.hel.ninja
koulurekisteri.hel.ninja
varaamotest.hel.ninja
analytics.hel.ninja
linkedevents.hel.ninja
venepaikka-api.test.hel.ninja
aplans.api.hel.ninja
linkedevents-api.prod.hel.ninja
tiedonohjaus.hel.fi
tiedonohjaus.hel.fi
digiedu.test.hel.ninja
mvj-ui.dev.hel.ninja
www.helsinkioppii.fi
helerm.dev.hel.ninja
kerrokantasi.hel.ninja
tiedonohjaus.hel.ninja
www.helsinkioppii.fi
monitor.hel.ninja
varaamotest-espoo.hel.ninja
analytics.hel.ninja
tiles.hel.ninja
mvj-ui.dev.hel.ninja
sentry.hel.ninja
osallistu.hel.ninja
monitor.hel.ninja
sentry.hel.ninja
logstash.hel.ninja
palvelut.hel.ninja
salasana.hel.ninja
virkarespa.test.hel.ninja
profile.dev.hel.ninja
geoflock.hel.ninja
venepaikat.hel.fi
monitor.hel.ninja
monitor.hel.ninja
digiedu.test.hel.ninja
pt.hel.ninja
pt.hel.ninja
profile.dev.hel.ninja
ltj-api.dev.hel.ninja
logstash.hel.ninja
kunto.hel.ninja
varaamo.hel.ninja
tiedonohjaus.hel.ninja
venepaikat.hel.fi
osallistu.hel.ninja

Certificate

The complete raw certificate details for pt.hel.ninja in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 274275853669622269642599193617176300972485
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-17 07:27:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-15 07:27:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pt.hel.ninja'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 718097230913505920193056533972513506017583957259975724618051929415605226648955909179559788312986772718978059963651705496981213992476011856156147241914882383030265684127602316473615944737758534452402155376454284442385860664825863066336262752907189337610220742284698411336988978144514659844129828050496843719548770251399100840972993268195255266450830500090588251645779059735978760757764433449372970745553250188873665718777747603853590818782009110131086764600271360641842323659892801806423671555320442904604517268615015601670992601607121793700367683492982789287988609225421298219145000759302792916587835684041375040609838642992854508456365573120729721341588363932869425434402129486441782588199948556823945102931328610926883051949053289790877586589552202952757487964477201111804832115212308315550746731840351531218750520115344482733256383513674985386852534981675798064092210727987221090331147144939106083746639395778572449883785631211134586617246861285051609247623894477246299027607650865409840040649802077818175165164680558999273456558221059894573770568736872127451529592951552213304567763371335518381181379791359322498253117082382964256010344788751569959381793990381415876397368646789784777466280336369757179021410020580175971341357629
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c2ee68c4cea22f75b0a550299e884ff7e21f998a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pt.hel.ninja'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075005ea773f9df56c0e7b536487dd049e0327a919a0c84a11212841875968171455800000170e79ab735000004030046304402204205e589c027b4aaa6aa5eaf2098e8bdbfbf0107140ad0a47d607891b47b8e6f02200727549d474b50a1c619292912c2bbbbdcc9c4097381a3e539e67c2d7e53252c00750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c00000170e79ab7980000040300463044022069ac37a0fa64aa9aad575604d79ec6532a9f16011d1c6a813d89371e59ec80fe022031dffbbdf75ede54cbb7acf62b34c8723299c3e02998bd63b5a70579bd56383d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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