blogi.keuda.fi

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:a8:54:83:fc:fb:dd:0e:1e:31:9a:50:c4:5b:be:72:1b:44 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=blogi.keuda.fi

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a8:54:83:fc:fb:dd:0e:1e:31:9a:50:c4:5b:be:72:1b:44
Serial Number (int): 318616635911654704963481181828980619221828
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 0b:94:2f:7b:f6:75:d5:50:c3:08:f2:ab:af:a6:87:0d:eb:da:24:1b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b2:76:a5:bb:0f:58:a4:f2:09:f8:0b:72:bb:dd:f6:c8:46:46:e9:e8
Fingerprint (sha256): 5c:a3:8f:c5:62:74:6f:e2:3d:3a:1d:e2:33:3e:85:eb:8b:d8:f9:a6:45:68:5b:32:72:25:1f:68:e5:3a:17:3b

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate blogi.keuda.fi

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for blogi.keuda.fi

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

blogi.keuda.fi

Other certificates including the domain name keuda.fi

(limited to 100 certificates)
blogi.keuda.fi
opiskelija.keuda.fi
yrityksille.keuda.fi
blogi.keuda.fi
ky-fed.keuda.fi
opiskelija.keuda.fi
webmail.keuda.fi
keuda-sr.keuda.fi
keuda.fi
pinja.keuda.fi
winha.keuda.fi
dynasty.keuda.fi
ky-fed.keuda.fi
opiskelija.keuda.fi
opiskelija.keuda.fi
webmail.keuda.fi
yrityksille.keuda.fi
yrityksille.keuda.fi
keuda.fi
dynasty.keuda.fi
opiskelija.keuda.fi
oppisopimus.keuda.fi
opiskelijaintra.keuda.fi
opiskelijaintra.keuda.fi
wiki.keuda.fi
keuda-adhk.keuda.fi
keuda.fi
opiskelija.keuda.fi
ims.keuda.fi
opiskelijakeuda.focusflow.net
wiki.keuda.fi
yrityksillekeuda.focusflow.net
blogi.keuda.fi
opiskelijaintra.keuda.fi
yrityksille.keuda.fi
yrityksille.keuda.fi
keuda.fi
web.keuda.fi
opiskelija.keuda.fi
yrityksillekeuda.focusflow.net
yrityksille.keuda.fi
winha.keuda.fi
ims.keuda.fi
oppisopimus.keuda.fi
ims.keuda.fi
mfiles.keuda.fi
ky-fed.keuda.fi
www.keuda.fi
opiskelija.keuda.fi
ky-fed.keuda.fi
dynastyweb.keuda.fi
winha.keuda.fi
keuda.fi
yrityksille.keuda.fi
keuda.fi
opiskelija.keuda.fi
opiskelija.keuda.fi
blogi.keuda.fi
blogi.keuda.fi
keuda-dw.keuda.fi
verkkokauppa.keuda.fi
oppisopimus.keuda.fi
verkkokauppa.keuda.fi
wiki.keuda.fi
blogi.keuda.fi
web.keuda.fi
blogi.keuda.fi
dynasty.keuda.fi
yrityksille.keuda.fi
yrityksille.keuda.fi
blogi.keuda.fi
sts.keuda.fi
oppisopimus.keuda.fi
oppisopimus.keuda.fi
yrityksille.keuda.fi
opiskelija.keuda.fi
opiskelijaintra.keuda.fi
yrityksille.keuda.fi
dynastyweb.keuda.fi
keuda.fi
yrityksille.keuda.fi
mfiles.keuda.fi
www.keuda.fi
opiskelija.keuda.fi
opiskelija.keuda.fi
opiskelijakeuda.focusflow.net
winha.keuda.fi
ky-fed.keuda.fi
ims.keuda.fi
ky-fed.keuda.fi
mfiles.keuda.fi
ky-fed.keuda.fi
web.keuda.fi
oppisopimus.keuda.fi
web.keuda.fi
web.keuda.fi
verkkokauppa.keuda.fi
intra.keuda.fi
yrityksille.keuda.fi

Certificate

The complete raw certificate details for blogi.keuda.fi in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 318616635911654704963481181828980619221828
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-25 04:09:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-23 04:09:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'blogi.keuda.fi'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 972918375417676215404086508897509300527865105466983441128138953167001341341585268560309546778245973654874502876600163724628410365335382738022018674423240259891169645592101470786052033778679383247599210533335214305426209913241010107340721947801972482156177789093863494083911970862247147999626623452228407791776044911906199896014344284074078389252789844971515534419335175693943483573628586506457436802556610608219216345856625412398461128122356015364716374536535146418230582832319775814678317721676811405019509267600685053372752272299231649715004727333003121742470499413236243427233831965710937369323500717987018280988706205948510974101708494127004176882353592698666694291521864947941980144445546153317554879969922488381367712510492197581599561887997430662700062819387223125498257381950619549602287281457380073459330009940738355736999118480619274075808474834975738100863414373058507056192168968800190850619539427981029522640673725247300235003536390230276279650260680526946900342010502663048299452972163010212554862809039534823291624142479234644583079921242549801374747320200027177105285620684875372940172754386843620604991772644658598234349622669149068475239739145725688196295426776015108045221816366074003833424444572659184232975317021
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0b942f7bf675d550c308f2abafa6870debda241b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blogi.keuda.fi'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000017110188a99000004030046304402205f21e1e80703f1db5a58bb812730e9de0d1a2ab0c525abf0e106ad23710b488302204bd4f40507693e14321a788d7e23ab63bc916e437634a97f8e7665d55147a737007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000017110188a8b000004030047304502202bdbd14422b04454144806db7c6944aa11b141fe640c893d7a303ff383f7cbb2022100e1cc975f2d8419b019472bbe0dea1b7298d1d9ee7afa1a6050eb8fb30a0bfd51
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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