andersinnovations.fi

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:9a:45:1d:ff:7e:7c:25:f2:d6:f0:bf:ff:72:af:f3:3c:28 was issued on by Let's Encrypt.

With 76 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=andersinnovations.fi

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:9a:45:1d:ff:7e:7c:25:f2:d6:f0:bf:ff:72:af:f3:3c:28
Serial Number (int): 313832214791458939444687055248165818285096
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 33:e7:1e:00:c3:1a:cd:7b:be:50:d6:16:40:0a:bf:0e:6f:14:92:c7
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 9b:37:72:ec:17:52:5f:0f:2e:9c:85:c9:64:66:49:90:b2:4b:4c:90
Fingerprint (sha256): 31:95:06:6f:85:b7:75:98:d9:cb:c8:ee:63:9d:c1:06:a1:1c:53:b1:9a:6c:c0:1c:e2:56:fe:ef:84:42:1c:d1

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate andersinnovations.fi

76

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for andersinnovations.fi

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

alfonshakans.com
alfonshakans.fi
anders.fi
andersfinland.fi
andersholdings.fi
andersinno.com
andersinno.fi
andersinno.net
andersinnovations.com
andersinnovations.fi
andersvisual.fi
aurinkolaiva.turkuamk.fi
blogi.turkuamk.fi
chancellorofjustice.fi
digidim.com
helsingforsbilder.fi
helsinkiphotos.fi
helvar.cn
helvar.co.uk
helvar.com
helvar.de
helvar.eu
helvar.fi
helvar.fr
helvar.ie
helvar.it
helvar.net
helvar.org
helvar.se
itspure.com
justitiekanslern.fi
oikeuskansleri.fi
okv.fi
polvituki.fi
project-test.anders.fi
punavuorenpeikko.fi
respecta.fi
tuas.fi
turkuamk.fi
www.alfonshakans.com
www.alfonshakans.fi
www.anders.fi
www.andersfinland.fi
www.andersholdings.fi
www.andersinno.com
www.andersinno.fi
www.andersinno.net
www.andersinnovations.com
www.andersinnovations.fi
www.andersvisual.fi
www.chancellorofjustice.fi
www.digidim.com
www.helsingforsbilder.fi
www.helsinkikuvia.fi
www.helsinkiphotos.fi
www.helvar.cn
www.helvar.co.uk
www.helvar.com
www.helvar.de
www.helvar.eu
www.helvar.fi
www.helvar.fr
www.helvar.ie
www.helvar.it
www.helvar.net
www.helvar.org
www.helvar.se
www.itspure.com
www.justitiekanslern.fi
www.oikeuskansleri.fi
www.okv.fi
www.polvituki.fi
www.punavuorenpeikko.fi
www.respecta.fi
www.tuas.fi
www.turkuamk.fi

Other certificates including the domain name andersinnovations.fi

(limited to 100 certificates)
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
web.anders.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
web.anders.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
web.anders.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
web.anders.fi
web.anders.fi
web.anders.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
web.anders.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
web.anders.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
web.anders.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
web.anders.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi

Certificate

The complete raw certificate details for andersinnovations.fi in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAwLzNBR0fJW3kcsw+laaC
82PuVsub/jmGGiJhKJiit+2JNRBPy4sQtuX6Th/2xKj2fAuNyAM2IAbyc+vMmB8Z
U2ySshMT7wL+B4c0MfYy9bB7UHS08Jdq3aWBrWzaeTChj6+SJ91bMAHA9peJOjhl
TxtL6KAUYwfVg+uExAcXQTQ/ZvfEnVlulkizm1qAfFksTFdOVYgpUaFGZhYuCYeM
l+yRF9lNL3Pl2N2cDft4uZ9J9E7Y1RFTd2x7d5Avi0f1265XpdgIjVbLuFWURciu
lSHpS7JoM2AxzacMWWq7QrPEniPuRY6VWdd8v+GxpWAw1XagpyHwn5OIHnuzVn81
Uj9XZoc+G6yQLz3mYHRda7q3dUdtVLGfNUJHNOsKuA9TnC7URL7C8Pz7VhOwjYwU
42/rGCm+7/gvNDQGkK7gWuT5ZqlQgUlbWb9cnX/bQufPKkMxnG1IUfWFRAIZkoft
NOipuAVbQ3mSwdsa++lEtpflz4fWLnJA+JDJvKF0AjSyhaVN8/VIPaaFg80evDgK
WK33sermLhDxmzkLr/QdIshjHiuqLKaTppfM4qNxMwcs+kuDQY46gqvSgK/NspLh
WbqY+gL08aZjHQVdVyyAd9ZbwfLUwWfsYuBVRa6s0Mr4177ie0Izb7rLE4tHhLPM
u/ZS/2NwwQ+MD5BeaNBxyC0CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 313832214791458939444687055248165818285096
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-04-19 06:39:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-07-18 06:39:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'andersinnovations.fi'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 786300412253605241707609532051180957700849204531892623737884664305049462540521864614696313157065620885738638254322881126396781852395454953358276881732836661105942977416715414293002712256964469994116888469413150715592825667631852612210455814134986196036084397047158977652241719372417549212131367108097720836110637447221217318654399898435426388006553689177728575630925265661853717466047966422169628385929201213746641313726607825391840225721347593805278781812646251484270191159284454718381405323714578090559109237169082297711164804746851498160829126972117578788148608571280576971257753136577898164333606640789237599807890134176681158872964657649027378662704401671322820888017534576388524517518248826594609408761951830809691775458104717388336942657161558021711721614880798820715350677578670025029527229250385971225975572856311312753768797815856816431673633199417679821793783627889990139790849683401938811557531979982836246040683811954877710667607130127815830356531384673312247361659910564530688607806560376471026943324688027852449027699872937149628669717036451233777107895815643848544692017353955144441818474605534986481609446971797886872422965619781531988821630569115529362758491757192696431005717491098999593568592588902884568133126189
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							33e71e00c31acd7bbe50d616400abf0e6f1492c7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1317 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alfonshakans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alfonshakans.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anders.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andersfinland.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andersholdings.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andersinno.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andersinno.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andersinno.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andersinnovations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andersinnovations.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andersvisual.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aurinkolaiva.turkuamk.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blogi.turkuamk.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chancellorofjustice.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digidim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helsingforsbilder.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helsinkiphotos.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helvar.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helvar.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helvar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helvar.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helvar.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helvar.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helvar.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helvar.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helvar.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helvar.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helvar.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helvar.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itspure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'justitiekanslern.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oikeuskansleri.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'okv.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'polvituki.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'project-test.anders.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'punavuorenpeikko.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'respecta.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tuas.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'turkuamk.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alfonshakans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alfonshakans.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.anders.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.andersfinland.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.andersholdings.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.andersinno.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.andersinno.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.andersinno.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.andersinnovations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.andersinnovations.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.andersvisual.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chancellorofjustice.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.digidim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.helsingforsbilder.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.helsinkikuvia.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.helsinkiphotos.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.helvar.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.helvar.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.helvar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.helvar.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.helvar.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.helvar.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.helvar.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.helvar.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.helvar.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.helvar.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.helvar.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.helvar.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.itspure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.justitiekanslern.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oikeuskansleri.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.okv.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.polvituki.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.punavuorenpeikko.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.respecta.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tuas.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.turkuamk.fi'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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