vauva.fi

Issued by Amazon

About this certificate

This digital certificate with serial number 0d:95:14:37:7f:28:69:6e:b2:b1:31:af:81:6e:3e:14 was issued on by Amazon.

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=vauva.fi

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:95:14:37:7f:28:69:6e:b2:b1:31:af:81:6e:3e:14
Serial Number (int): 18054026222220058152941668081964301844
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 20:14:68:a0:8a:de:bd:df:93:67:b4:a9:5f:aa:9b:7b:b8:2e:22:ca
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): ec:2d:3a:d4:56:a5:2c:ee:0a:36:b0:c1:c6:fb:1e:d7:b3:86:01:d7
Fingerprint (sha256): 62:b7:ef:18:7d:cb:52:42:4f:59:02:70:cd:2c:cb:64:b5:c2:8c:5d:eb:1e:70:4d:be:4c:60:3b:62:a1:06:35

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate vauva.fi

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for vauva.fi

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

vauva.fi
*.vauva.fi
perhe.fi
*.perhe.fi
vauva-lehti.fi
*.vauva-lehti.fi
lastenoma.fi
*.lastenoma.fi
aihevapaa.fi
*.aihevapaa.fi

Other certificates including the domain name vauva.fi

(limited to 100 certificates)
vauva.fi
images.cdn.menaiset.fi
tarinat.vauva.fi
uutiskirje.vauva.fi
www.vauva.fi
amonas.10kysymysta.fi
tarinat.vauva.fi
tarinat.vauva.fi
tarinat.vauva.fi
tarinat.vauva.fi
vauva.fi
tarinat.vauva.fi
vauva.fi
images.cdn.menaiset.fi
tarinat.vauva.fi
tarinat.vauva.fi
tarinat.vauva.fi
vauva.fi
tarinat.vauva.fi
vauva.fi
tarinat.vauva.fi
tarinat.vauva.fi
vauva.fi
tarinat.vauva.fi
vauva.fi
tarinat.vauva.fi
amonas.10kysymysta.fi
tarinat.vauva.fi
m.vauva.fi
amonas.10kysymysta.fi
test.vauva.fi
tarinat.vauva.fi
images.cdn.menaiset.fi
tarinat.vauva.fi
images.cdn.menaiset.fi
message000.sp-prod.net
images.cdn.menaiset.fi
tarinat.vauva.fi
tarinat.vauva.fi
tarinat.vauva.fi
tarinat.vauva.fi
kauppa.vauva.fi
vauva.fi
tarinat.vauva.fi
tarinat.vauva.fi
tarinat.vauva.fi
vauva.fi
tarinat.vauva.fi
amonas.10kysymysta.fi
amonas.10kysymysta.fi
images.cdn.menaiset.fi
tarinat.vauva.fi
vauva.fi
prod.vauva.fi
test.vauva.fi
m.vauva.fi
www.vauva.fi
amonas.10kysymysta.fi
tarinat.vauva.fi

Certificate

The complete raw certificate details for vauva.fi in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMJ01XCxMZrZEF6clrlF
YeSOTBoOewUmgbY/6y93nuIfCLx/irPFw0RMJWikUZC9Oh6MJDVilVIqw1ZLE+Rd
yIFZ2HFvgcSUMNnipM+7v8RNVYmgO5PRu++t0NyqVg+PtaSUmmDNl8ze6M2hAEIs
qa09CJfonrIqmrHHf/4yHT27irK6UpuWJejkl+Am/7pGy9mmsnCwLaBKACHZRZEj
kyIHx+bqqn++q9lH9VAIy3SpR1z6Hq4i0tPeoTCSg0CyHGKTmxWt8nUGjmh01eW9
HGfMHN383AcAaIr3Kpi9tPYkcN4wEJ9XIyTmLjQVRbahQxl4Lc+1lI8WYeMQz3p0
pwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18054026222220058152941668081964301844
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-08 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'vauva.fi'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20294018810324043299291963358856492192527748441393651806038990080784249753794270747998827031360881458044661959024174651883738711437703582646202143156856889661216497612549913502473422811645119242332218930017430449676884027836289031287040523699626533027533654621382602172410923090291161625917096084138388483495292052157783713045406531793514257556756527271324968474343811915570746335410428142295564260969982335815502292654885370966169070763109577880890875950687393635465296029018778496115216902374767390733857346022209625265162201925450638055020095419432473648697097880804732322683738807644024061055269223384491665028263
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							201468a08adebddf9367b4a95faa9b7bb82e22ca
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (141 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vauva.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vauva.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perhe.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.perhe.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vauva-lehti.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vauva-lehti.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lastenoma.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lastenoma.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aihevapaa.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aihevapaa.fi'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed1850000017157655da60000040300473045022100be5ef130021e22a6fd65f7c5bffc8f90596031e089b1c377924107fe2a8bf96202201a58f725a6362a76f17d83f03dc88539c48d53e6cfa2c5e7590bb81be0381c9f0076005cdc4392fee6ab4544b15e9ad456e61037fbd5fa47dca17394b25ee6f6c70eca0000017157655dc3000004030047304502207e1010653ffd1412e728fb6550a6b6789501feda620af42246fceb9051206a34022100db8ee1c5ef1f57b21e880f0c78a3e79da7c954c4d75b0c7154a3ea1d9dbf512e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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