www.luonnonpaivat.fi

Issued by COMODO RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number 2b:53:42:6e:a9:95:1b:a5:66:0c:1c:76:13:56:e9:bf was issued on by COMODO CA Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.luonnonpaivat.fi,OU=Domain Control Validated+OU=PositiveSSL

COMODO CA Limited

Organization: COMODO CA Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 2b:53:42:6e:a9:95:1b:a5:66:0c:1c:76:13:56:e9:bf
Serial Number (int): 57589111864624717969247840184860862911
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: c7:12:5b:ad:01:39:88:59:1f:53:28:3c:e0:f4:ad:10:89:21:78:ca
AuthorityKeyId: 90:af:6a:3a:94:5a:0b:d8:90:ea:12:56:73:df:43:b4:3a:28:da:e7

Fingerprint (sha1): be:b4:ef:07:d0:ff:ca:09:0a:10:cb:ce:32:d1:72:64:b5:aa:ab:6e
Fingerprint (sha256): 67:af:9b:f1:73:40:11:9e:41:a5:11:48:f9:67:ad:c8:eb:cb:86:dc:87:9e:4b:51:34:3a:a0:02:84:0d:d8:ae

Issuing Certificate URL: http://crt.comodoca.com/COMODORSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.comodoca.com
CRL Distribution Point: http://crl.comodoca.com/COMODORSADomainValidationSecureServerCA.crl

Check the revocation status for certificate www.luonnonpaivat.fi

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.luonnonpaivat.fi

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.luonnonpaivat.fi
luonnonpaivat.fi

Other certificates including the domain name luonnonpaivat.fi

(limited to 100 certificates)
luonnonpaivat.fi
luonnonpaivat.fi
luonnonpaivat.fi
luonnonpaivat.fi
luonnonpaivat.fi
luonnonpaivat.fi
luonnonpaivat.fi
luonnonpaivat.fi
www.luonnonpaivat.fi
luonnonpaivat.fi
luonnonpaivat.fi
luonnonpaivat.fi
luonnonpaivat.fi
luonnonpaivat.fi
luonnonpaivat.fi
luonnonpaivat.fi
luonnonpaivat.fi
luonnonpaivat.fi
luonnonpaivat.fi
luonnonpaivat.fi
luonnonpaivat.fi
luonnonpaivat.fi
luonnonpaivat.fi
luonnonpaivat.fi

Certificate

The complete raw certificate details for www.luonnonpaivat.fi in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGWDCCBUCgAwIBAgIQK1NCbqmVG6VmDBx2E1bpvzANBgkqhkiG9w0BAQsFADCB
kDELMAkGA1UEBhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4G
A1UEBxMHU2FsZm9yZDEaMBgGA1UEChMRQ09NT0RPIENBIExpbWl0ZWQxNjA0BgNV
BAMTLUNPTU9ETyBSU0EgRG9tYWluIFZhbGlkYXRpb24gU2VjdXJlIFNlcnZlciBD
QTAeFw0xNjA1MzAwMDAwMDBaFw0xOTA1MzAyMzU5NTlaMFgxITAfBgNVBAsTGERv
bWFpbiBDb250cm9sIFZhbGlkYXRlZDEUMBIGA1UECxMLUG9zaXRpdmVTU0wxHTAb
BgNVBAMTFHd3dy5sdW9ubm9ucGFpdmF0LmZpMIICIjANBgkqhkiG9w0BAQEFAAOC
Ag8AMIICCgKCAgEA0hMC+V9PnbC/EmVC5zzOA0l8cQDd8OpKGkSFWXvdQC5+VeDj
dB+qJD421ZSdkSc4U6Ykt8xRGhLJGdELna63zIiv0ImIqi0qRUaQZ0urGZe6BSyk
pR/Ir1WJ4kRBntorQdkwAX7jpDVgB5kC/4O/GgvW2rnAJmGwEefZsY4uKyFAqePC
CT4JEfvaonGXvRA3zFTpEshWOiBVqXx4Y2+Evy5MjzBlkqY4tTfKA5oELy8SaSGJ
dl8uFx+9rhvNhZUBswYw6D90vDLzzhz7iwoOjldCUz6qurc2pqRvhveMtZ01UwMv
/E8oCK2xodul3CIAFFKj6pCaIB8SvR1EYvmmbVVMuXhYOLVGBOUGFcxH+rVKaAEH
n/vFcOqlh72yqWNWOpaSndXYZtzNO2+vAabN1IuORzKZLbLmCiI0fR+K5IGj6LS+
8AJEp82wYoapg9TbTRfFgesB/FM8XgYtpCN3TlsOxrF6VvDR05CjWPZZ8yrQqlsh
jNd6h2olzMHRduzj96Gtf/MqPDsG+4Zhc6GwxsMfTbWo3jzUB6iOq6KB3pSiFGJm
3JEOXiymiQ6opIz9VJmGQ8fRhBSH+3E/bCWe9Vmx48G30LOcGIM7nb2jMlW9+Lja
br5J5mvlxAM3/jzUhqJIQiABT+hLsCOcRRTw6pJtGsEmUYFlltutNNgS8skCAwEA
AaOCAeMwggHfMB8GA1UdIwQYMBaAFJCvajqUWgvYkOoSVnPfQ7Q6KNrnMB0GA1Ud
DgQWBBTHElutATmIWR9TKDzg9K0QiSF4yjAOBgNVHQ8BAf8EBAMCBaAwDAYDVR0T
AQH/BAIwADAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwTwYDVR0gBEgw
RjA6BgsrBgEEAbIxAQICBzArMCkGCCsGAQUFBwIBFh1odHRwczovL3NlY3VyZS5j
b21vZG8uY29tL0NQUzAIBgZngQwBAgEwVAYDVR0fBE0wSzBJoEegRYZDaHR0cDov
L2NybC5jb21vZG9jYS5jb20vQ09NT0RPUlNBRG9tYWluVmFsaWRhdGlvblNlY3Vy
ZVNlcnZlckNBLmNybDCBhQYIKwYBBQUHAQEEeTB3ME8GCCsGAQUFBzAChkNodHRw
Oi8vY3J0LmNvbW9kb2NhLmNvbS9DT01PRE9SU0FEb21haW5WYWxpZGF0aW9uU2Vj
dXJlU2VydmVyQ0EuY3J0MCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5jb21vZG9j
YS5jb20wMQYDVR0RBCowKIIUd3d3Lmx1b25ub25wYWl2YXQuZmmCEGx1b25ub25w
YWl2YXQuZmkwDQYJKoZIhvcNAQELBQADggEBAGeM2gP3xypbfx0GUVKBNixw3+8o
c4Sad/v37YLfRoIvhEZRrP6ZOF88WMAPhnXFIi+ij18AjU4zWBa5MVFBE5pb9X8x
gBdLPjIE/A10yeUVBxbfylLq4NMYbTx9x9qgGHDymIUrTGGVQBVsSyvEXLX+Kxr3
8qEa2vdLUrq45MIQUorLTwEtZHrDbzdgtAF+ewFZjjSJBxPAAdkS5Eo49o23PC9u
d7az6JnSM32EkJr53mqPqYucFT9UHSWYTy0gTB0JLSJYhf4JBiBOqTEfyDpJT6Yp
q+2WKqJLC6EuGfbViRZSHAOiT/4qrPy0lGcWe3Hb9RGTvaLgwrt1ju3NINc=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 57589111864624717969247840184860862911
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO CA Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-05-30 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-30 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PositiveSSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.luonnonpaivat.fi'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 857028225507057430995224594194833016546600921113079894099706134817941458006249887924545434587006991027589845442680065872806374213786574226434806188726801843391549186920665825025612499433043170885412862196414149258454131072443423800005471783893296695005179999330103638254124665951387163481071314159298150976733708718106501487394468756294784344252717626121178203609157323716693741144772702622866149015605704309261214762125810838372182420117490216461239770524594813811441453197367079994653824125437230328304407277654572993445666682785085855714854837241114724776262235650678406201434571066896978697551300859694134385590447443071256632206527100190351332567301630691961735994386503638987642254768724973472316641242090184625846656758365260797452539541208062775509406290554691138149263105613360619555267448924803552919585559935713933257965053623585897750632416073222928947453585107177743777018325415495797488363639353345934696470876634310311005456447724738463216020526354338544233781809178713102964757662700481729571429147772002629573069853886926739119918564877496273195951049356181023103156284091640199885785618136778954167178565596981247232286194134323608792133614685107984872159158362698900049917147633745395549042380200928312096397128393
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 90af6a3a945a0bd890ea125673df43b43a28dae7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:3|t:7|false]  
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://secure.comodo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (77 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodoca.com/COMODORSADomainValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (121 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca.com/COMODORSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.luonnonpaivat.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luonnonpaivat.fi'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00678cda03f7c72a5b7f1d06515281362c70dfef2873849a77fbf7ed82df46822f844651acfe99385f3c58c00f8675c5222fa28f5f008d4e335816b9315141139a5bf57f3180174b3e3204fc0d74c9e5150716dfca52eae0d3186d3c7dc7daa01870f298852b4c619540156c4b2bc45cb5fe2b1af7f2a11adaf74b52bab8e4c210528acb4f012d647ac36f3760b4017e7b01598e34890713c001d912e44a38f68db73c2f6e77b6b3e899d2337d84909af9de6a8fa98b9c153f541d25984f2d204c1d092d225885fe0906204ea9311fc83a494fa629abed962aa24b0ba12e19f6d58916521c03a24ffe2aacfcb49467167b71dbf51193bda2e0c2bb758eedcd20d7