apu.vaihde.fi

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:d1:6f:af:17:ac:fa:e7:e4:e8:c9:cf:38:a3:b8:c4:7c:e9 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=apu.vaihde.fi

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d1:6f:af:17:ac:fa:e7:e4:e8:c9:cf:38:a3:b8:c4:7c:e9
Serial Number (int): 332604325921439564492199604568160523812073
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d3:2a:65:92:13:44:dd:09:1f:8f:13:e5:2b:07:80:d4:bf:ce:cb:04
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 95:0b:b2:bd:27:0a:5c:b3:b5:d6:34:f7:06:ed:a6:af:67:d1:e8:09
Fingerprint (sha256): 5c:d7:d8:f8:f9:51:6b:2e:d6:4a:c3:63:92:13:f3:28:68:03:f4:a5:5e:c1:08:30:04:3d:87:f7:d4:49:d9:e5

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate apu.vaihde.fi

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for apu.vaihde.fi

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

apu.vaihde.fi

Other certificates including the domain name vaihde.fi

(limited to 100 certificates)
apu.vaihde.fi
puh.vaihde.fi
apu.vaihde.fi
puh.vaihde.fi
puh.vaihde.fi
apu.vaihde.fi
oma.vaihde.fi
apu.vaihde.fi
oma.vaihde.fi
puh.vaihde.fi
apu.vaihde.fi
apu.vaihde.fi
apu.vaihde.fi
apu.vaihde.fi
apu.vaihde.fi
apu.vaihde.fi
oma.vaihde.fi
oma.vaihde.fi
apu.vaihde.fi
oma.vaihde.fi
oma.vaihde.fi
apu.vaihde.fi
puh.vaihde.fi
oma.vaihde.fi
apu.vaihde.fi
oma.vaihde.fi
oma.vaihde.fi
oma.vaihde.fi
oma.vaihde.fi
oma.vaihde.fi
apu.vaihde.fi
oma.vaihde.fi
apu.vaihde.fi
oma.vaihde.fi
apu.vaihde.fi
apu.vaihde.fi
apu.vaihde.fi
apu.vaihde.fi

Certificate

The complete raw certificate details for apu.vaihde.fi in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAtpW/ZxYCrJgVzR+FKjb5
6zV4wioM5iKasfxTq3jMys9U4I+rQQFXBiOJ/qZzbHMDC1rXoGj2pzmuZDawFXNP
kqMUy7gmEx3KWQQs6dMENKV3L351bvzracg6/cWnRK8Ec2QC1mHp7RPiR5tveUV9
ex+UvOiEnZOoaoYhTRpIMyCvlXXEefwg5xdSzfNO9BNuu+ryN1YWUKGu/HJxQj2A
vI+9YBIlkB+zRL36ndT0+XV65sB4WOCrkdgQt4HEbMUiEdZVyP8fW5GgWonunXjo
u+L/uEhAZmaRRwbjTsbJFTwIexXBAkoGduJbOFs0O7iaKs0h3qqzCL8BxqjboSz8
8OKjkwDWmUg8SC0QlMjRq4xnxpsP8GMq2sMR87PGnoVgpSYUoC90KVn7Xz+Dtalr
8oy/31pz+rc70PHWxXv3MJvPD5rVPX/ZtvjWV+Z/ikJzbHFpx3Xs7oOS752Y10jH
KKNl6MXjw6mykmij2keAcT9k5b0CIgFEgkcrlPo7l0VQdIwVWpOJ4EEqb3QYNhQi
0zVRR222RSmka81Qa/JKn2UoG61KkVOtXbBnLehgJarFwScgKERo0X09XdUdj1C3
P92+BAxdQ38WadU54MQCq+nsBrpme+RiasQjcE/kWcxi8W3Ad40js8/Rpv478k21
x4RkjHiFu0LoIpgztGpXwxcCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 332604325921439564492199604568160523812073
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-18 10:36:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-18 10:36:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'apu.vaihde.fi'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 744881615614907926132228003163697370469247136498626591406303470392869986747669833619516024884856865858020154427374163796722315676185165817768267244156792608006237376397577911464174088812536645921933097204942763679427524473805133289060615209162081833642588566339801619735654949257846187294361573887406926984752719847293444019857382336647083430012681041954695387536732221703801090705999272446070077745773529024623230498306608374694298848049203538546039794429543381095100480005176308679973381158469333430994651775605669614018912294484953729182556119004502538097251988431280183021846111972793518514978394374093751385402508306893307586140418489623424766363921374399932342463947327650458090798782604110644252275521419291342963057542061507910770966358850126268294846096610194850354899500179247265901911867327695329400990706801025703455713923839121235235094045425350306610239943386801008490248646122657151365884510285516556764573729416035608091465322343641666475981329526468312881116080930164631116195307771789898013193573840839511111512609191395453944092915446408888339799905892289726632993484710974591726558149439509988038930950569649466396216835359282575586013726535052207359754010390250035118771597911037015265220532875757019899121615639
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d32a65921344dd091f8f13e52b0780d4bfcecb04
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apu.vaihde.fi'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016860bfc49a000004030047304502205dbed2e382a11f72bbd1f9dc7894b637d439a7a6bdb0e93ccf88eb14fd67745a022100e0dc25baabfea5340deb573a96850629646e2f67d4e992a336b7f4c5bc863ad3007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016860bfc4f40000040300473045022100b4ee7b2241149f3323115dcce8509fb01b0446ee91b2679bf1654a4d7d607ed1022047703ee1d96fb10df91510a98fdd172bc82b564e091b0fb77519652b7fba2d33
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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