*.grannen.fi
Issued by R3
About this certificate
This digital certificate with serial number 03:2a:9c:04:cc:68:9d:84:13:c1:ce:8f:b0:bc:18:6f:39:7e was issued on by Let's Encrypt.
With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=*.grannen.fi
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:2a:9c:04:cc:68:9d:84:13:c1:ce:8f:b0:bc:18:6f:39:7eSerial Number (int): 275836101688390073285291407035294582520190
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 52:60:47:3c:1e:c4:7b:fe:df:a9:b4:f3:5a:c1:ee:57:25:86:94:8b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 15:05:7d:9c:90:58:26:a9:a3:48:e4:4b:44:d2:29:67:d7:2e:9c:56
Fingerprint (sha256): 4b:95:e7:1f:e9:49:1f:b9:a9:12:5c:25:6b:e6:26:49:5b:4b:35:8a:dc:76:e6:e7:2c:c7:80:7d:a9:d5:5b:fb
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate *.grannen.fi
8
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.grannen.fi
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.a-netti.com
*.grannen.fi
*.martinsen.fi
*.sharedassets.app
a-netti.com
grannen.fi
martinsen.fi
sharedassets.app
*.grannen.fi
*.martinsen.fi
*.sharedassets.app
a-netti.com
grannen.fi
martinsen.fi
sharedassets.app
Other certificates including the domain name grannen.fi
(limited to 100 certificates)
Certificate
The complete raw certificate details for *.grannen.fi in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgISAyqcBMxonYQTwc6PsLwYbzl+MA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDAyMDQyMzA2NDNaFw0yNDA1MDQyMzA2NDJaMBcxFTATBgNVBAMM DCouZ3Jhbm5lbi5maTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMSF yFwpYANSu6jkpv1RKf2BOTqxjfKrErsqdUCgzkVIQat3bRy3z88PTFU/Me9SqwxW BlCSw8gCUPokbDfP4ttbuG8FL+Aodc4+3oq519EdpNQE6LcV1e/7YoYyPEToNBzv oZDjdLCnWkJHkr51ZPQuTuQijQMxwOjaEwTiOPZ+YHVohfPEbVvRkQsNb8zB0ipq 9tUwKZNrYMZsd2Li5WwR2eSMHAkLumoqw1VmSTc11Miywrzv53TTwz9U7x7iuMiz 5TX5xHjbayEXqox3IAXun1BiV73f+xP1Hk3/PR56MRui2R2760936veitwY9UbMt /Gi+4FAdfsmhFCofUmkCAwEAAaOCAnkwggJ1MA4GA1UdDwEB/wQEAwIFoDAdBgNV HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4E FgQUUmBHPB7Ee/7fqbTzWsHuVyWGlIswHwYDVR0jBBgwFoAUFC6zF7dYVsuuUAlA 5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8vcjMu by5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9yZy8w gYMGA1UdEQR8MHqCDSouYS1uZXR0aS5jb22CDCouZ3Jhbm5lbi5maYIOKi5tYXJ0 aW5zZW4uZmmCEiouc2hhcmVkYXNzZXRzLmFwcIILYS1uZXR0aS5jb22CCmdyYW5u ZW4uZmmCDG1hcnRpbnNlbi5maYIQc2hhcmVkYXNzZXRzLmFwcDATBgNVHSAEDDAK MAgGBmeBDAECATCCAQIGCisGAQQB1nkCBAIEgfMEgfAA7gB1ADtTd3U+LbmATosw Wwb+QDtn2E/D9Me9AA0tcm/h+tQXAAABjXaWsjcAAAQDAEYwRAIgSkdI2jURANBq EOcrOsVRpqf4VWgHhqfKs2BoqJEYIDECIHYdlPpfI4L5Mwh7dvFYWaZX9fFhkUXh sIwOlEOAM+1UAHUA7s3QZNXbGs7FXLedtM0TojKHRny87N7DUUhZRnEftZsAAAGN dpa0JAAABAMARjBEAiBWbF0GmbvHbmMozrPOVu4DmhrXm/ElA+He5zl4EtnK3AIg L7DtgMeQurou0+XxifCoo6NB5NxsAllI0xCoZkkmDAQwDQYJKoZIhvcNAQELBQAD ggEBACO/DwVdpTRsTH6VnkdTxVs2koCtSM18Mz2ipMwVagxMkcqe1KZpqkXkFK4e Jrkp3Q1TLKbNmsigrTrcPpIr8ODJ/yfqZctudJLiI0yyp4uCyXfMF+rlFGFbnefn 6T0uZ3ko81Wasfixfi1QRjMwKFWwYjg5/LU2bysih4BOkeJM6x6rdNB46g8sf7Cs yt7bS7V0CWQfWZCOTU0CFs+2Sb8F5ln68qY09+buJ0qTcxEFywRac9ujKz9FkSQ6 yTYfDNOV5eMqyNk6Sa1nb0STusTIQPEUG+9twsbNg/EM/yjBUf6Of351JTHCvWxs cR/uPfzgGkWV5L14+W4O0HepOYc= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIXIXClgA1K7qOSm/VEp /YE5OrGN8qsSuyp1QKDORUhBq3dtHLfPzw9MVT8x71KrDFYGUJLDyAJQ+iRsN8/i 21u4bwUv4Ch1zj7eirnX0R2k1ATotxXV7/tihjI8ROg0HO+hkON0sKdaQkeSvnVk 9C5O5CKNAzHA6NoTBOI49n5gdWiF88RtW9GRCw1vzMHSKmr21TApk2tgxmx3YuLl bBHZ5IwcCQu6airDVWZJNzXUyLLCvO/ndNPDP1TvHuK4yLPlNfnEeNtrIReqjHcg Be6fUGJXvd/7E/UeTf89HnoxG6LZHbvrT3fq96K3Bj1Rsy38aL7gUB1+yaEUKh9S aQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 275836101688390073285291407035294582520190 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-04 23:06:43 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-04 23:06:42 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.grannen.fi' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24808678459917723916539533965117857006538135737153481457098966463348917453683702959659548604812402803794843070282836459912395066696023279483608270364126076902680362415955729658112255542791103607587277137501868625844557350681772968706812738103520532048628680543605550978666225579715871234873790174884257186106069364769271233354670321074894216388201132578192975141872442201381001674818032691257791827773798564600660731937391889377888098914179987904737912948801148825540405294325670835218552133005551283453423613551424629618980023520702376099551201465678205336448605066467178387476423311834548508186132027792387599192681 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 5260473c1ec47bfedfa9b4f35ac1ee572586948b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (124 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.a-netti.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.grannen.fi' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.martinsen.fi' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sharedassets.app' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a-netti.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grannen.fi' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'martinsen.fi' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sharedassets.app' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes) 00ee0075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d7696b237000004030046304402204a4748da351100d06a10e72b3ac551a6a7f855680786a7cab36068a8911820310220761d94fa5f2382f933087b76f15859a657f5f1619145e1b08c0e94438033ed54007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018d7696b42400000403004630440220566c5d0699bbc76e6328ceb3ce56ee039a1ad79bf12503e1dee7397812d9cadc02202fb0ed80c790baba2ed3e5f189f0a8a3a341e4dc6c025948d310a86649260c04 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0023bf0f055da5346c4c7e959e4753c55b369280ad48cd7c333da2a4cc156a0c4c91ca9ed4a669aa45e414ae1e26b929dd0d532ca6cd9ac8a0ad3adc3e922bf0e0c9ff27ea65cb6e7492e2234cb2a78b82c977cc17eae514615b9de7e7e93d2e677928f3559ab1f8b17e2d504633302855b0623839fcb5366f2b2287804e91e24ceb1eab74d078ea0f2c7fb0accadedb4bb57409641f59908e4d4d0216cfb649bf05e659faf2a634f7e6ee274a93731105cb045a73dba32b3f4591243ac9361f0cd395e5e32ac8d93a49ad676f4493bac4c840f1141bef6dc2c6cd83f10cff28c151fe8e7f7e752531c2bd6c6c711fee3dfce01a4595e4bd78f96e0ed077a93987