mail.kauneushoitolamarika.my.ee

Issued by R3

About this certificate

This digital certificate with serial number 03:6b:83:91:75:ec:eb:1d:09:1c:2d:a6:5a:93:e0:e6:08:2a was issued on by Let's Encrypt.

With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mail.kauneushoitolamarika.my.ee

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:6b:83:91:75:ec:eb:1d:09:1c:2d:a6:5a:93:e0:e6:08:2a
Serial Number (int): 297921955198126001119599021935022504806442
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ff:6f:9c:05:50:c4:04:67:bd:fe:16:25:5e:a4:31:d1:b0:c2:1b:17
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ed:0a:ba:27:14:19:b2:b3:6a:00:10:35:b9:3e:f4:33:9d:66:50:9a
Fingerprint (sha256): 6d:32:fb:7d:6a:a9:21:39:d7:29:14:9a:e6:54:34:54:d1:e1:e4:4c:41:60:e8:6a:39:9b:be:be:77:7b:69:6d

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate mail.kauneushoitolamarika.my.ee

12

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mail.kauneushoitolamarika.my.ee

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

autodiscover.kauneushoitolamarika.fi
cpanel.kauneushoitolamarika.fi
cpcalendars.kauneushoitolamarika.fi
cpcontacts.kauneushoitolamarika.fi
kauneushoitolamarika.fi
kauneushoitolamarika.my.ee
mail.kauneushoitolamarika.fi
mail.kauneushoitolamarika.my.ee
webdisk.kauneushoitolamarika.fi
webmail.kauneushoitolamarika.fi
www.kauneushoitolamarika.fi
www.kauneushoitolamarika.my.ee

Other certificates including the domain name my.ee

(limited to 100 certificates)
cpcalendars.oliva.my.ee
cpcontacts.kaupparinne.fi
kuna.my.ee
kiinteistotuotto.fi
rantasaunat.com
cpcalendars.combi.fi
muovaamo.fi
handstaff.ee
testikauppa.cpnoteshot.my.ee
sindimsope.my.ee
dev0.fi
hommik.my.ee
bastfore.fi
rcekassa.my.ee
mitoro.my.ee
karaokecenter.eu
www.cpnoteshot.my.ee
cpanel.tshop.ee
autodiscover.tshop.ee
jsport.my.ee
www.uus.demo.my.ee
cpnoteshot.my.ee
minukoduleht.my.ee
cpcontacts.kuusmet.fi
webmail.demo.my.ee
cpanel.peepsaluvee.ee
autodiscover.rcekassa.my.ee
autodiscover.framille.fi
ridaaja.my.ee
cpanel.tarjus.ee
testikauppa.cpnoteshot.my.ee
muld.my.ee
lamatta.my.ee
sindimsope.my.ee
tshop.ee
artonrengaspalvelu.fi
karaokecenter.my.ee
saima.my.ee
cpcontacts.crossfitkuopio.com
kuvat.cpnoteshot.my.ee
helah.fi
info.my.ee
haagissuvila.ee
siteb.kristjan.my.ee
vivid.my.ee
daniel.fi
tshop.ee
www.seijalaukkanen.my.ee
autodiscover.mitoro.my.ee
kauneuskeskuslux.fi
handstaff.ee
wobbleri.fi
tuijafagerlund.com
nekalanhuoltopiste-autokorjaamo.my.ee
kasvuhooned.my.ee
kauneushoitolamarika.fi
spottikuva.fi
kauneushoitolamarika.fi
handstaff.ee
autodiscover.peepsaluvee.ee
kaupparinne.fi
testikauppa.cpnoteshot.my.ee
kiinteistotuotto.fi
webmail.wobbleri.fi
rantasaunat.com
rantasaunat.com
kuivjaa.ee
hyvarisenpaja.fi
f1cel.eu
seolikerran.my.ee
kliendiabi.ee
rantasaunat.com
cpcontacts.kaupparinne.fi
kuivjaa.ee
rantasaunat.com
sindihindamine.my.ee
muovaamo.fi
mail.mitoro.my.ee
rockfest.my.ee
autodiscover.rcekassa.my.ee
ostajanonni.fi
ekassa.my.ee
cpanel.jsport.my.ee
kauneuskeskuslux.fi
hommik.my.ee
webmail.kauneuskeskuslux.fi
info.my.ee
rekkurescue.com
mitoro.my.ee
toidutellimine.my.ee
greenwhale.fi
dev0.ee
hyvarisenpaja.fi
kaupparinne.fi
dev0.ee
wp.minukoduleht.my.ee
helah.fi
demo.net.ee
tshop.ee
cpnoteshot.my.ee

Certificate

The complete raw certificate details for mail.kauneushoitolamarika.my.ee in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4K2UbVswZxlOGwcD/sON
U61FgEbhawbV6SI4YT3xxZqEEnTKzCW2ToiHZLWreU17gVxSJ2KUgplkNSmGOAYs
0q/fP9wGO9igHusqExVHVZgrABqsMrExHqzSK8VNXnmDaIqZBDBf/LHwkMyhsTAI
uGZNOFW7Ygv/660I9J1zxo48+21oDGGz41pEmXgeepEYDUrmZ38p4qeblEN7UEbr
cKUjR32DgoXJG/CZHUqnywquXLouWSxtE7EIZlW0op8K8TU/m9olZClvmPJup3Tw
PEEGoS/uAfZDg+VfU52LZG1x2IGbX24b9xVHlx+/Vrcmwh+HmP9F8TdULGkG7gkU
5QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 297921955198126001119599021935022504806442
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-08 05:30:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-06 05:30:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mail.kauneushoitolamarika.my.ee'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28362975698826383126977762989734507901771872206498524042999304070887005471661218409102958789253973462878972530563350821229552821797742947796131643873351349604393406176319820691367626523599906435636329149640389547200421856029324592120812104546730030171996519143811129756274227117323526672152240014704180057468252394759251863363730061666219869903614277922015219846683808293051154032528433312315338940255555654543902196335071600026073964645685320418256845272310105369770672224836989702813972436631595065998997688788786189944928766530877966503328780719917647258052495243254494417767287942367371486182482160241346626524389
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ff6f9c0550c40467bdfe16255ea431d1b0c21b17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (390 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.kauneushoitolamarika.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.kauneushoitolamarika.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcalendars.kauneushoitolamarika.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcontacts.kauneushoitolamarika.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kauneushoitolamarika.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kauneushoitolamarika.my.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.kauneushoitolamarika.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.kauneushoitolamarika.my.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.kauneushoitolamarika.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.kauneushoitolamarika.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kauneushoitolamarika.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kauneushoitolamarika.my.ee'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000189d3d69b610000040300463044022028243279eb154df9b3c765b9e6c310924db7b428836630482606e89a753d3c7a0220531be9ddb7bdb01e9b8b634133d4c21db31788f5b7f3b196f0e3bf4717c3fd84007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000189d3d69b4e0000040300473045022100c12005ae4ed776d3076584e203fdbf5ec830fdc5dd7f9aef7f93f4750d27045e02201f1280fc7fc56b028f8fd0803ce096cf0395fd49b2d2d84f3371d6db559aec05
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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