pukkilan.kokoomus.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ab:c6:ae:0e:29:3b:a0:ef:5d:e7:3e:d3:7b:9f:65:52:95 was issued on by Let's Encrypt.

With 40 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=pukkilan.kokoomus.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ab:c6:ae:0e:29:3b:a0:ef:5d:e7:3e:d3:7b:9f:65:52:95
Serial Number (int): 319789233428800558883247695551946098561685
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 1e:5d:e7:23:4c:f2:92:ef:dd:e6:9d:be:2c:0c:41:bc:f8:2e:67:05
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 93:8b:02:e4:70:c8:90:62:e9:46:b8:7e:3c:64:23:3f:02:65:78:17
Fingerprint (sha256): 3d:31:36:fb:d2:bf:0f:91:77:52:2d:3f:d5:5d:a0:1a:a4:ad:c8:10:83:cc:19:b1:a2:0f:be:43:89:20:52:54

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate pukkilan.kokoomus.net

40

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pukkilan.kokoomus.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

pukkilan.kokoomus.net
raasepori.kokoomus.net
raseborg.kokoomus.net
ruotulankokoomusnaiset.kokoomus.net
ruoveden.kokoomus.net
ruskonkokoomus.kokoomus.net
saarijarvi.kokoomus.net
sakylan.kokoomus.net
sarivilen.kokoomus.net
satakunnantoivo.kokoomus.net
savokarjalankokoomusnaiset.kokoomus.net
siirto-www-ritvaasulamyllyn.kokoomus.net
simo.kokoomus.net
sipoo.kokoomus.net
siuntion.kokoomus.net
sodankyla.kokoomus.net
someronkokoomus.kokoomus.net
sonkajarvenkokoomus.kokoomus.net
sulkavankokoomus.kokoomus.net
taipalsaarenkokoomus.kokoomus.net
tammelan.kokoomus.net
tarvasjoki.kokoomus.net
teppoharkonen.kokoomus.net
terhinkokoomus.kokoomus.net
teuvan.kokoomus.net
timotvuori.kokoomus.net
tohmajarvenkokoomus.kokoomus.net
toivakka.kokoomus.net
turunkansallisseura.kokoomus.net
ulvilan.kokoomus.net
urjalan.kokoomus.net
vantaankosken.kokoomus.net
varsinais-suomenkokoomusnaiset.kokoomus.net
virolahden.kokoomus.net
wellamonkokoomusnaiset.kokoomus.net
ydin-hame.kokoomus.net
ylistaron.kokoomus.net
ylivieska.kokoomus.net
ylojarvenkokoomusnaiset.kokoomus.net
ylojarvi.kokoomus.net

Other certificates including the domain name kokoomus.net

(limited to 100 certificates)
tawastin.kokoomus.net
seijapuputti.kokoomus.net
tiinahokkanenoja.kokoomus.net
minnahirvonen.kokoomus.net
sampsakokko.kokoomus.net
*.kokoomus.net
sampsakokko.kokoomus.net
lottakoponen.kokoomus.net
*.kokoomus.net
pukkilan.kokoomus.net
sampsakokko.kokoomus.net
lottakoponen.kokoomus.net
tawastin.kokoomus.net
seijapuputti.kokoomus.net
sampsakokko.kokoomus.net
minnahirvonen.kokoomus.net
*.kokoomus.net
*.kokoomus.net
*.kokoomus.net
pekkaruotsalainen.kokoomus.net
alavuden.kokoomus.net
hausjarvenkokoomus.kokoomus.net
susannaruotsalainen.kokoomus.net
artonatkynmaki.kokoomus.net
alavuden.kokoomus.net
susannaruotsalainen.kokoomus.net
pukkilan.kokoomus.net
saila.kokoomus.net
*.kokoomus.net
pekkaruotsalainen.kokoomus.net
minnahirvonen.kokoomus.net
pukkilan.kokoomus.net
minnahirvonen.kokoomus.net
artonatkynmaki.kokoomus.net
toivoajatuspaja.kokoomus.net
saila.kokoomus.net
pukkilan.kokoomus.net
kokoomuskaarina.kokoomus.net
tiinahokkanenoja.kokoomus.net
pekkaruotsalainen.kokoomus.net
alavuden.kokoomus.net
seijapuputti.kokoomus.net
*.kokoomus.net
alavuden.kokoomus.net
alavuden.kokoomus.net
artonatkynmaki.kokoomus.net
pukkilan.kokoomus.net
saila.kokoomus.net
*.kokoomus.net
seijapuputti.kokoomus.net
*.kokoomus.net
lottakoponen.kokoomus.net
artonatkynmaki.kokoomus.net
*.kokoomus.net
hausjarvenkokoomus.kokoomus.net
minnahirvonen.kokoomus.net
susannaruotsalainen.kokoomus.net
pukkilan.kokoomus.net
sampsakokko.kokoomus.net
susannaruotsalainen.kokoomus.net
seijapuputti.kokoomus.net
pekkaruotsalainen.kokoomus.net
pukkilan.kokoomus.net
lottakoponen.kokoomus.net
alavuden.kokoomus.net
tawastin.kokoomus.net
tawastin.kokoomus.net
tawastin.kokoomus.net
artonatkynmaki.kokoomus.net
alavuden.kokoomus.net
saila.kokoomus.net
turunkokoomusnaiset.kokoomus.net
pukkilan.kokoomus.net
pukkilan.kokoomus.net
tiinahokkanenoja.kokoomus.net
pekkaruotsalainen.kokoomus.net
tiinahokkanenoja.kokoomus.net
toivoajatuspaja.kokoomus.net
alavuden.kokoomus.net
lottakoponen.kokoomus.net
seijapuputti.kokoomus.net
susannaruotsalainen.kokoomus.net
tawastin.kokoomus.net
saila.kokoomus.net
pekkaruotsalainen.kokoomus.net
jyvaskylankokoomusnaiset.kokoomus.net
toivoajatuspaja.kokoomus.net
artonatkynmaki.kokoomus.net
minnahirvonen.kokoomus.net
toivoajatuspaja.kokoomus.net
minnahirvonen.kokoomus.net
hausjarvenkokoomus.kokoomus.net
*.kokoomus.net
susannaruotsalainen.kokoomus.net
*.kokoomus.net
tiinahokkanenoja.kokoomus.net
lottakoponen.kokoomus.net
alavuden.kokoomus.net
hausjarvenkokoomus.kokoomus.net
hausjarvenkokoomus.kokoomus.net

Certificate

The complete raw certificate details for pukkilan.kokoomus.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzstIgkFp4rtfWqV3Z0ny
EyRlFV5vJgtyYTM9sxXKIRQWcbR1cC4J98+eUo2NektWiAY+kGochQnMAIzKK8mI
QIOOxpi4S0UjKdr8sb687tAqMVGHnLjKlHsfxnbKPheEGm/Ib2tY7HfjiNbZ6S4g
i6IDpE6fmVzoVnFKv65lq1Rus32m4NmTnAeYvtXAbeRv9IuNjHHgVcLpPSmcVJR4
In5uLkVhy3NqmEwNeuddN/ZB5yAmzEpEsirD+S9najXpeQklf8L0isMX+AiACfjT
EJCpVKUV20VCW3ae7lkh/tc3aPK7/rRy8NcEOxTE816gRQSd8eyBwo/kpaiZ2Cus
TQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 319789233428800558883247695551946098561685
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-02 00:47:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-01 00:47:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pukkilan.kokoomus.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26105333523536419306447312027141197305489491612711763130607135128245772878025142530148562406491463800397810042167946821350290128899077073886423901585733262229222569778076592729683201198409254946984198529833433261595399180894569728275300120129203300392715546583950156970911245555145995827958010869031162366458881585325048296927970485073670982141334685885027271676797355958424637982745064264582483266040876440925052365809690998491825105444575040572439494186009727974919519375415923477763323922675101676714495936529784923814113083440348638049151353663181681612204203706240582701424698878337290130696550531393652452469837
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1e5de7234cf292efdde69dbe2c0c41bcf82e6705
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1117 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pukkilan.kokoomus.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raasepori.kokoomus.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raseborg.kokoomus.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ruotulankokoomusnaiset.kokoomus.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ruoveden.kokoomus.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ruskonkokoomus.kokoomus.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saarijarvi.kokoomus.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sakylan.kokoomus.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sarivilen.kokoomus.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'satakunnantoivo.kokoomus.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'savokarjalankokoomusnaiset.kokoomus.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'siirto-www-ritvaasulamyllyn.kokoomus.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simo.kokoomus.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipoo.kokoomus.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'siuntion.kokoomus.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sodankyla.kokoomus.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'someronkokoomus.kokoomus.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sonkajarvenkokoomus.kokoomus.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sulkavankokoomus.kokoomus.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taipalsaarenkokoomus.kokoomus.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tammelan.kokoomus.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tarvasjoki.kokoomus.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teppoharkonen.kokoomus.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'terhinkokoomus.kokoomus.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teuvan.kokoomus.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timotvuori.kokoomus.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tohmajarvenkokoomus.kokoomus.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toivakka.kokoomus.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'turunkansallisseura.kokoomus.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ulvilan.kokoomus.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'urjalan.kokoomus.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vantaankosken.kokoomus.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'varsinais-suomenkokoomusnaiset.kokoomus.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'virolahden.kokoomus.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellamonkokoomusnaiset.kokoomus.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ydin-hame.kokoomus.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ylistaron.kokoomus.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ylivieska.kokoomus.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ylojarvenkokoomusnaiset.kokoomus.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ylojarvi.kokoomus.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf6400000162840966710000040300473045022100d2875c3895a91a8cc7ced1c961ab6d75bff4a5696f01ff14fd7296fc9ebe77a4022058598d612c89744c1c6882b9c09e6fe492b39300e8b2d9c1fbaf00eacec4ec74007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000162840966be000004030046304402206da34993f86903897f58a80c383f9b4bff1d43c5007e83a5781f3bd15a361c7202204056e2ae0866318d91af6cf739a21739ea2a97d2d7efd9555e2446f6ea660e10
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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