co2-raportti.fi

Issued by R3

About this certificate

This digital certificate with serial number 04:c8:d0:d3:19:90:b1:7c:13:86:97:51:e4:a6:8d:f6:d4:34 was issued on by Let's Encrypt.

With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=co2-raportti.fi

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:c8:d0:d3:19:90:b1:7c:13:86:97:51:e4:a6:8d:f6:d4:34
Serial Number (int): 416783192627513116968457697431058805871668
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 27:c4:69:4d:f7:f6:d7:9e:10:fe:63:08:fc:a0:98:c8:9b:2e:44:e6
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 39:55:d6:4c:d1:d8:9e:15:b4:7d:7c:4f:0e:dc:66:bd:58:0c:86:e0
Fingerprint (sha256): 4a:63:33:b5:e1:09:79:1b:82:a9:46:60:8c:89:91:66:de:e7:73:ce:bc:6d:ec:e6:ed:2b:6a:ad:d6:61:1d:48

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate co2-raportti.fi

18

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for co2-raportti.fi

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

benviroc.com
benviroc.fi
co2-raportti.fi
enco.fi
jjoy.fi
livair.fi
paloassat.com
paloassat.fi
sitowise.com
www.benviroc.com
www.benviroc.fi
www.co2-raportti.fi
www.enco.fi
www.jjoy.fi
www.livair.fi
www.paloassat.com
www.paloassat.fi
www.sitowise.com

Other certificates including the domain name co2-raportti.fi

(limited to 100 certificates)

Certificate

The complete raw certificate details for co2-raportti.fi in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcIkiCM0Xuu+I1wozfQi
/Rc1vcUF47Li4rEWqQOSHqdib8DmWVsdcc5WBx0Lyk7bX/FzBoFxeNpn885oqCLB
Q2/U/pE5AhP0tWgOfmc9fKMZ81r8kqVigNa2WwK51CpB/6wcfhLACeuWq6axQV5K
hRbAg2h0SxWdCaKyFBtHN7PDUmggVJSWEQ+Ktuv6i8Q2IKaMpOqW0hiqODxakF+c
CfV/zl8B1X6BsC324YXSfHKgzYmDJQK3/ScyOhJQ+YDUm2IUrNcVC90BSW8t7bx0
QQqmXXqfLH6tTOLrYLWSIShqDETegiQdzjT5RQnqAQVL/ZE1c9MMrbrb6qtxm8l2
rQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 416783192627513116968457697431058805871668
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-29 07:13:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-27 07:13:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'co2-raportti.fi'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22944868533462403069338958086880601687900628393700044580054940694495897538296159642071725853942478090534447675511372117475444566507665173649346132272877623699740567332892623692604508969155369204958707176214791689481699602405871928506518899343785773937179682186775167388152185598128103537307967019483225542746721895071033999499823600905273969468847514151812205818534657181543718966827908177831788973509891102368812727438813026774205971265711736949790782616327627870705352602230083599000560993029546334791938003201439609530407860027814702932935605795213223857879396945398282122852521432808452993956350237727428792907437
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							27c4694df7f6d79e10fe6308fca098c89b2e44e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (272 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benviroc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benviroc.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'co2-raportti.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enco.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jjoy.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livair.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paloassat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paloassat.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sitowise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.benviroc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.benviroc.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.co2-raportti.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.enco.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jjoy.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.livair.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paloassat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paloassat.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sitowise.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000184c272f2590000040300473045022100b161413645f2dede7fd00d6a3a0211010978e6f2ec5ae98f66dbb94b9f07cfdb0220601954ae97c0b3c3ab61c08f55c16f3ea8f3605e280cf740940bc4429f6992eb007500e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000184c272f252000004030046304402207793322c24a9c6234d82e3c9a5e8a5eeae7bdd6f909ba2b18ecc1cc32a5cd77202204fc8a1f2a610f9896c597ee14ecd93214c55e2e7ce55b9dea4b5a0c79ee56f28
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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