minimeijeri.fi
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:89:98:31:b6:fc:9e:48:12:3f:7d:80:78:76:9e:bb:c0:d1 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=minimeijeri.fi
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:89:98:31:b6:fc:9e:48:12:3f:7d:80:78:76:9e:bb:c0:d1Serial Number (int): 308157842852767715432172396328164819452113
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 85:4f:ea:bf:5a:65:d7:c1:7a:b2:24:4d:a1:6a:77:a1:14:8a:fc:90
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): af:88:4b:e7:00:18:41:0c:fb:f6:d6:ec:36:67:95:8a:e4:33:4c:e5
Fingerprint (sha256): 59:9c:ec:a0:9f:08:8e:78:fc:8b:c1:1a:a1:f1:3b:cd:c7:57:7f:ad:3c:94:87:bd:0a:0e:15:51:93:a1:06:b9
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate minimeijeri.fi
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for minimeijeri.fi
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
minimeijeri.fi
www.minimeijeri.fi
www.minimeijeri.fi
Other certificates including the domain name minimeijeri.fi
(limited to 100 certificates)
Certificate
The complete raw certificate details for minimeijeri.fi in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGaTCCBVGgAwIBAgISA4mYMbb8nkgSP32AeHaeu8DRMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODEyMjUyMTIwMTFaFw0x OTAzMjUyMTIwMTFaMBkxFzAVBgNVBAMTDm1pbmltZWlqZXJpLmZpMIICIjANBgkq hkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAu+KiggitKe/ujdQ7O3LR304wZDej/dmG 1rkNFtgrEGqQKfnO50HpODCpC/rVsoZWKb7of1Z+JtNf69YCLRbDnuDYXXQNP3H+ zaagZwyzpJkRMH9HQ87v8ZJ6jH/mCTtyPvKLQ6qlDLvZ04Y3FIZ/85xID1yTZJet cu3duHc2TvQHFjidpCJ5G8AsiCt/RBWWc5mRFnHNgx1X2IJf3d3tFCnVZI4FzrkN d0XLb0DlbDa4iNkmuk1J4/6yNmXFcTgNcGnkERHgJNmt9u2sTQWPz5N5PoUjMOAN vdr8CJofNC8p3Oh8ZpaMNd2Sm6Hmr6JXslnffDdAg2QIeTmCTMo5Kd16AMU7fszb 0EFpLV+xDijrv5JK/FKzZRVov99h3Se5vNPXnw70fCogxow2F7iehlq9YlaCkVtR lXnU2/4E+UfXRXTun/meBo0efbdmTSDw6xF594Qy/3YiJEOVAG+GXb/jOZWxmavR /dkC/AcgiDyknbHmOFvkgUZWCq7lw3C2fnDd5j5wdKc4tFclWUlPMFIrVWhIJToX dKO9aPa/MKeNdmg5LTQk58F3AAAJS9w9WY4yhFIKx+Px+/EOfDPGCdgsip8c6CEb XYExGHiHsy0cX8jaQtfmACGYtoYOBxe26YsLvYB23vAxWHoAAvyryJA7cGhlTbUb 0g5LZe6+IMkCAwEAAaOCAngwggJ0MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAU BggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUhU/q v1pl18F6siRNoWp3oRSK/JAwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo 7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQt eDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQt eDMubGV0c2VuY3J5cHQub3JnLzAtBgNVHREEJjAkgg5taW5pbWVpamVyaS5maYIS d3d3Lm1pbmltZWlqZXJpLmZpMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQB gt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3Jn MIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDxAHYAY/Lbzeg7zCzPC3KEJ1drM6SNYXeP vXWmOLHHaFRL2I0AAAFn53Q1LQAABAMARzBFAiBTwrWN6JntCSx3YVIPlHkDBB1+ jgzIDmVmBb5o4ysf+wIhANA+Lskx6PXWjkbvOhIkZektP9/mvfkrjnAixEq6JpKj AHcA4mlLribo6UAJ6IYbtjuD1D7n/nSI+6SPKJMBnd3x2/4AAAFn53Q3IgAABAMA SDBGAiEAxxjo2OsMM/N+t1KsgBufRANX0lyiV/Di2o3x0O1ddaUCIQCjID1GLcdg 1QUnG+M63h7Kb+mBl4s/Eai+NAklpLQDRzANBgkqhkiG9w0BAQsFAAOCAQEAPZYX Eh4EGeZpaEZ/NHPLkdXvxIXOtPTeplMCqX+cQso670UAL8SnKNyJ8QhBsjfHeNfZ 55D/1erQVOxHjqD77MuZPP9odfGZyYtyQA+bIGBoJ2b3Kz4icA66/kAbNqBFr4HP bqVySfhLdnpqpXm0irw6jKF5nibr015SzU6Np5xCY8LWvCIFXVChebBHqcK2wreL rB0AibKZVx1tQWIroudk+KwncqTk08GGiirS4YcWuTJc4kNV/CS0/xwmXMVVZ+jY ZdcWkou5/c0pXCqfVTp5oVxcGOH/9A6WTQoKlHDKA+OOokQWaA7PXzhmYt48S7E8 42vTygb8S7k/rwZhkw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAu+KiggitKe/ujdQ7O3LR 304wZDej/dmG1rkNFtgrEGqQKfnO50HpODCpC/rVsoZWKb7of1Z+JtNf69YCLRbD nuDYXXQNP3H+zaagZwyzpJkRMH9HQ87v8ZJ6jH/mCTtyPvKLQ6qlDLvZ04Y3FIZ/ 85xID1yTZJetcu3duHc2TvQHFjidpCJ5G8AsiCt/RBWWc5mRFnHNgx1X2IJf3d3t FCnVZI4FzrkNd0XLb0DlbDa4iNkmuk1J4/6yNmXFcTgNcGnkERHgJNmt9u2sTQWP z5N5PoUjMOANvdr8CJofNC8p3Oh8ZpaMNd2Sm6Hmr6JXslnffDdAg2QIeTmCTMo5 Kd16AMU7fszb0EFpLV+xDijrv5JK/FKzZRVov99h3Se5vNPXnw70fCogxow2F7ie hlq9YlaCkVtRlXnU2/4E+UfXRXTun/meBo0efbdmTSDw6xF594Qy/3YiJEOVAG+G Xb/jOZWxmavR/dkC/AcgiDyknbHmOFvkgUZWCq7lw3C2fnDd5j5wdKc4tFclWUlP MFIrVWhIJToXdKO9aPa/MKeNdmg5LTQk58F3AAAJS9w9WY4yhFIKx+Px+/EOfDPG Cdgsip8c6CEbXYExGHiHsy0cX8jaQtfmACGYtoYOBxe26YsLvYB23vAxWHoAAvyr yJA7cGhlTbUb0g5LZe6+IMkCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 308157842852767715432172396328164819452113 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-25 21:20:11 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-25 21:20:11 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'minimeijeri.fi' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 766505117687731823000657089710358535393593392073875294744233042972539543084863413562159716234058715096790181614302245144124680744825058018132989980041050937474145242673403331240265564236795354032662567170136474691133925706201468552096022541533053727857515902920002518382325800121957664668355007419502139224230300706569017572070699267047140672985676490053915251767162689928854145669381743430578499545093589980444211723470804818634156835813317314141437298643150122281766710595825696061460587911431664870547841766542762007910381414472303953582708161656225843305046032485796413946539802415258373561172042396865694839539407345514086836007909204250778456719760234394664015693323395164120069023615101957105752231637561421252162030269086855031202257913096874422896508986907147107641173537593330197594940489271211694441603446764679028937830295454291001739588374511195270395003350358468955427561694452924480602594160524061000496724059367821729600021628065886824659876624074846418657750135107093134993777730020915733275649710195219894596683123394820887875746219644045709888886723491595077788835425181510760028667764856020169765460661465136882606251498820156492291579226650668402518300542473981792618795505220664922815482156529036631789583343817 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 854feabf5a65d7c17ab2244da16a77a1148afc90 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minimeijeri.fi' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.minimeijeri.fi' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f100760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000167e774352d0000040300473045022053c2b58de899ed092c7761520f947903041d7e8e0cc80e656605be68e32b1ffb022100d03e2ec931e8f5d68e46ef3a122465e92d3fdfe6bdf92b8e7022c44aba2692a3007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000167e77437220000040300483046022100c718e8d8eb0c33f37eb752ac801b9f440357d25ca257f0e2da8df1d0ed5d75a5022100a3203d462dc760d505271be33ade1eca6fe981978b3f11a8be340925a4b40347 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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