koivukylanapteekki.fi

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:f4:88:ec:f7:d1:02:a6:47:11:64:40:b3:32:b5:7b:0e:89 was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=koivukylanapteekki.fi

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f4:88:ec:f7:d1:02:a6:47:11:64:40:b3:32:b5:7b:0e:89
Serial Number (int): 344547760739789765857728732572714006154889
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d5:8c:35:c9:55:5f:46:0a:8b:94:8e:03:b9:70:b5:2f:73:ba:88:f7
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ce:7d:5b:d9:0c:1d:50:76:ec:af:94:a9:30:92:68:fe:03:28:ef:41
Fingerprint (sha256): 35:bc:1f:d8:77:83:da:84:df:70:a8:a4:4e:b7:a4:bf:59:62:e4:a0:98:6c:a5:16:10:be:e9:55:b1:37:b7:96

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate koivukylanapteekki.fi

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for koivukylanapteekki.fi

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

koivukylanapteekki.fi
m.koivukylanapteekki.fi
www.koivukylanapteekki.fi

Other certificates including the domain name koivukylanapteekki.fi

(limited to 100 certificates)
apteekki.magentokehitys.fi
koivukylanapteekki.fi
apteekki.magentokehitys.fi
koivukylanapteekki.fi
koivukylanapteekki.fi
koivukylanapteekki.fi
koivukylanapteekki.fi
apteekki.magentokehitys.fi
koivukylanapteekki.fi
apteekki.magentokehitys.fi
koivukylanapteekki.fi
koivukylanapteekki.fi
koivukylanapteekki.fi
www.koivukylanapteekki.fi
apteekki.magentokehitys.fi
www.koivukylanapteekki.fi
apteekki.magentokehitys.fi
apteekki.magentokehitys.fi
apteekki.magentokehitys.fi
apteekki.magentokehitys.fi
koivukylanapteekki.fi
apteekki.magentokehitys.fi

Certificate

The complete raw certificate details for koivukylanapteekki.fi in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 344547760739789765857728732572714006154889
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-06 00:04:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-04 00:04:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'koivukylanapteekki.fi'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 792761825575583157145543130670416474877782007601205967573351327967657563497063890206085132392263656412819716515605545214419330909904867719780010923600622824470071918945617702167939162467621686454333444902132140140235040120147952210700041704772912391341408047621418614597166941995002174010876048217262714218252945184532505627836743710909569992591635481748247721645334807097014071916363275061927505869416332752807028566370096596693953841923282826035640129339132876597724858651479591244780367835028709045176881766198305872695950168488356312701487942070286611834205934688898183054664979761708927418678572144791838723146834712498288159504829425296200288577566055776545041148091170237633320160349201265804142268328201745770571994973292533865366559066510896634233141909590125366945601137260282443532828324428655316540552048669617733645462082086417414844499706063213759815736188855347746527506121735008043587234485999795721608982491799075571245926595985923934673377314941937367768242471969455547654829988946675522855780301201259435520463875200866873650393259999345148436594847805278120572623943693057552791633222613849989906160800096426604834189079971220023126819633459005680998898241136011326566196051231763259322397505694090169714247652273
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d58c35c9555f460a8b948e03b970b52f73ba88f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (77 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'koivukylanapteekki.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.koivukylanapteekki.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.koivukylanapteekki.fi'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016bc4cfed38000004030046304402202960e73fbbeb6ea94e3f2772389ed903e93c49252f491a0358dee6f6d51541a3022058dfbd700f339e77eb75481f357dfc23bb96fef9ae707a211b2120f7027826e500770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016bc4cfed100000040300483046022100b0a1689d5ac24ed37b0a25dba16f451b313ffb6ff4a9029ded6a6b15a4988bed022100ca2ee05b2af58c855302e4d52ae4ccf988b3ee78014825be9c8de529d98e7c62
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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