ilona.rista.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:7e:d5:9a:a4:48:87:38:93:cb:7e:60:5a:71:28:5b:8c:f9 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ilona.rista.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:7e:d5:9a:a4:48:87:38:93:cb:7e:60:5a:71:28:5b:8c:f9
Serial Number (int): 304496364536198839354654633888560682077433
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 8c:43:d7:03:ba:16:67:f8:4e:1a:ff:7b:60:c8:fa:f2:51:da:c4:37
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a6:79:5a:76:91:4f:62:8c:23:4e:f4:2a:c3:23:65:30:9f:d6:e6:a3
Fingerprint (sha256): 68:01:9b:2a:4b:b8:c1:84:76:29:23:20:a7:24:45:a0:f0:25:4b:c8:11:a0:6e:bb:05:bf:5f:72:d5:1e:5e:f3

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate ilona.rista.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ilona.rista.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ilona.rista.net

Other certificates including the domain name rista.net

(limited to 100 certificates)
voikko.rista.net
git.rista.net
git.rista.net
rista.net
voikko.rista.net
git.rista.net
voikko.rista.net
ilona.rista.net
rista.net
www.rista.net
voikko.rista.net
wagtail.rista.net
ilona.rista.net
sentry.rista.net
sentry.rista.net
rista.net
tilajakamo.rista.net
voikko.rista.net
git.rista.net
hima.rista.net
git.rista.net
voikko.rista.net
ilona.rista.net
voikko.rista.net
www.rista.net
tilajakamo.rista.net
tilajakamo.rista.net
voikko.rista.net
rista.net
sentry.rista.net
hima.rista.net
tilajakamo.rista.net
hima.rista.net
hima.rista.net
tilajakamo.rista.net
voikko.rista.net
tilajakamo.rista.net
git.rista.net
sentry.rista.net
voikko.rista.net
hima.rista.net
ilona.rista.net
git.rista.net
rista.net
git.rista.net
voikko.rista.net
rista.net
hima.rista.net
sentry.rista.net
hima.rista.net
voikko.rista.net
rista.net
sentry.rista.net
rista.net
rista.net
hima.rista.net
git.rista.net

Certificate

The complete raw certificate details for ilona.rista.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFVjCCBD6gAwIBAgISA37VmqRIhziTy35gWnEoW4z5MA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAyMDkwMjM1NDFaFw0y
MDA1MDkwMjM1NDFaMBoxGDAWBgNVBAMTD2lsb25hLnJpc3RhLm5ldDCCASIwDQYJ
KoZIhvcNAQEBBQADggEPADCCAQoCggEBAMqG94dPC8LrF9KH+qQsFSpGwVjipe1E
nEe0bRZYJwNb9pn7NzK4Ffgy++NsdtX2W6ddiizkTbeVNPF0dIKqQiPmsI2y3MtW
CiulL+fHLH4Hh0qbYQclZAWLDsMIWzbU6YMBKXltzWZMO4T1dzWFQYzjQs2EbqX+
YXXBBuilvZNz2x0bkb2/WrBh6+1czspzYdpojWjWkar6gCqXs6+WXO7eZHo9vCqO
/2IKEEwf04c8uNKPhvQB5jNtstCV//gMQVuO6SolCZijdM59DCBb4hr3IyKPA5wS
9rrpE7BpZkkoWEKtu6JC5Lzy6Cy/SlPOOLKz6ptYvE0v2l28um7WY6kCAwEAAaOC
AmQwggJgMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYB
BQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUjEPXA7oWZ/hOGv97YMj68lHa
xDcwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUHAQEE
YzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5cHQu
b3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5cHQu
b3JnLzAaBgNVHREEEzARgg9pbG9uYS5yaXN0YS5uZXQwTAYDVR0gBEUwQzAIBgZn
gQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5s
ZXRzZW5jcnlwdC5vcmcwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdgBep3P531bA
57U2SH3QSeAyepGaDIShEhKEGHWWgXFFWAAAAXAoBGSKAAAEAwBHMEUCIQCYJR2I
ElbuuikWElG9nP3HuKIlbGj0uP6jDFCWQQQ3KgIgOAkw0nndlRu8b+kszhS/OhEI
b3f2nz3ZikcyaX6ZB7EAdgAHt1wb5X1o//Gwxh0jFce65ld8V5S3au68YToaadOi
HAAAAXAoBGSlAAAEAwBHMEUCIAfc6GfVJ3KCA5iohL3s51BRmfgJRxuSk6LFcfsL
YCWWAiEA9LGRs9iBey/kUWAsVhG8uoq8D2JKF40Vlb0xZZ+mlYYwDQYJKoZIhvcN
AQELBQADggEBAEZr2PaeJcZbqWywruEphk/ekQT4/dNASov9U/kbqwqgVRWw+3Xa
APB7qBnU1Y0P45S1xElNmLOlxwkr5UZV7et1shoQhlnCz9IVBEFbAGJT5daUTTeA
kuJuGe8/sJUl4CRPL5Xyid/Ep0cYEgDTvntdY1dMZfACKUBR4C9DDx/fQqaBCvw2
CzFr1ekNvH2lZzbxEiFsvI+L40uic99Ya2aAvMj/JxS/o281D+mOsNLtyWvr04MO
BV89iR76apTmmKsUAfpbDfRnbivHGdwS557VKWKuq8IblbPruDIrdu6+Clhf2IP5
7ZJ495OPo3ApvYhG9iDI/+iD64oIQzbiZ8w=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyob3h08LwusX0of6pCwV
KkbBWOKl7UScR7RtFlgnA1v2mfs3MrgV+DL742x21fZbp12KLORNt5U08XR0gqpC
I+awjbLcy1YKK6Uv58csfgeHSpthByVkBYsOwwhbNtTpgwEpeW3NZkw7hPV3NYVB
jONCzYRupf5hdcEG6KW9k3PbHRuRvb9asGHr7VzOynNh2miNaNaRqvqAKpezr5Zc
7t5kej28Ko7/YgoQTB/Thzy40o+G9AHmM22y0JX/+AxBW47pKiUJmKN0zn0MIFvi
GvcjIo8DnBL2uukTsGlmSShYQq27okLkvPLoLL9KU844srPqm1i8TS/aXby6btZj
qQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 304496364536198839354654633888560682077433
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-09 02:35:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-09 02:35:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ilona.rista.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25566692266201171607785598558333923930665732415006143947407962341274898688486381321278888462428888261707949869599200464845587358016228071541024872353336814980954779598592382049197427406324872574692783047563405033652291957880075063088072275813499266678006044265024718767623790746154347584105788786324985891876850081492058804312574045822044402594103838505276844898774852415710631947823015607796998565671761291596339227587576850779981400801152383844718826875839581061880744281611857679739524444535600896506713509202452526276531015688818052497236051243997202434233560525713515296387467425833324590780023011692692641309609
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8c43d703ba1667f84e1aff7b60c8faf251dac437
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ilona.rista.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076005ea773f9df56c0e7b536487dd049e0327a919a0c84a112128418759681714558000001702804648a000004030047304502210098251d881256eeba29161251bd9cfdc7b8a2256c68f4b8fea30c50964104372a0220380930d279dd951bbc6fe92cce14bf3a11086f77f69f3dd98a4732697e9907b100760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c00000170280464a50000040300473045022007dce867d52772820398a884bdece7505199f809471b9293a2c571fb0b602596022100f4b191b3d8817b2fe451602c5611bcba8abc0f624a178d1595bd31659fa69586
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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