rj.bel.fi

Issued by R3

About this certificate

This digital certificate with serial number 03:20:38:1c:19:15:6f:b1:5f:b0:90:ea:e0:0c:29:34:23:67 was issued on by Let's Encrypt.

With 89 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=rj.bel.fi

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:20:38:1c:19:15:6f:b1:5f:b0:90:ea:e0:0c:29:34:23:67
Serial Number (int): 272300476197585363806689336009443589235559
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 24:40:6e:ce:06:71:a7:e6:96:6e:fe:ee:f9:bd:70:fd:49:87:23:a7
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): b1:f5:95:7a:d5:f4:14:2c:ca:09:02:5d:11:c6:65:53:f9:c5:6d:b7
Fingerprint (sha256): 6e:56:e4:fc:68:29:56:96:8e:67:9f:98:1e:b0:eb:d8:b3:1e:a0:e7:2a:54:2a:02:f5:18:f9:a3:c9:96:7b:1d

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate rj.bel.fi

89

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for rj.bel.fi

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

4vuodenaikaa.kauppa.tulopos.fi
adlerfelt.kauppa.tulopos.fi
albina.lahjakortti.tulopos.fi
apotek.lahjakortti.tulopos.fi
bardot.kauppa.tulopos.fi
bardot.lahjakortti.tulopos.fi
bistroc.lahjakortti.tulopos.fi
bistroomat.lahjakortti.tulopos.fi
carelia.lahjakortti.tulopos.fi
cloudprnt.tulopos.fi
coolhead.lahjakortti.tulopos.fi
dashboard.tulopos.fi
dommikkeli.lahjakortti.tulopos.fi
draftsportsbar.kauppa.tulopos.fi
elm.lahjakortti.tulopos.fi
ennakkotilaus.rivierakallio.fi
fatlizard.lahjakortti.tulopos.fi
giftcard.coolhead.fi
gron.lahjakortti.tulopos.fi
hejmfroj.lahjakortti.tulopos.fi
helsinkiravintolat.lahjakortti.tulopos.fi
hillsdumplings.lahjakortti.tulopos.fi
hotellionni.lahjakortti.tulopos.fi
huberbertha.lahjakortti.tulopos.fi
joulukori.bardot.fi
kajo.lahjakortti.tulopos.fi
kallio.rivieracinemas.fi
kauppa.coolhead.fi
kauppa.makubrewing.com
kauppa.tenlen.fi
kauppa.tulopos.fi
kesateatteri.tenlen.fi
kirkkopuisto.lahjakortti.tulopos.fi
ksupermarkettapiola.kauppa.tulopos.fi
kuu.lahjakortti.tulopos.fi
kuukuu.lahjakortti.tulopos.fi
kuurna.lahjakortti.tulopos.fi
lahjakortit.kakolanruusu.fi
lahjakortit.kaskis.fi
lahjakortit.ravintolamestarit.net
lahjakortti.bardot.fi
lahjakortti.bertha.fi
lahjakortti.dining26.fi
lahjakortti.ravintelihuber.fi
lahjakortti.ravintolamestarit.net
lahjakortti.ravintolaperiscope.fi
lahjakorttikauppa.bistrogina.fi
lahjakorttikauppa.bistromat.fi
lahjakorttikauppa.lecoucouvert.fi
lahjakorttikauppa.matdistrikt.fi
lahjakorttikauppa.olympiakortteli.fi
lahjakorttikauppa.plevna.fi
lahjakorttikauppa.ravintolanonni.fi
lahjakorttikauppa.restaurantalbina.fi
lahjakorttikauppa.therook.fi
lonna.lahjakortti.tulopos.fi
lonnaennakko.kauppa.tulopos.fi
lonnanampari.kauppa.tulopos.fi
lonnankahvila.kauppa.tulopos.fi
lonnansauna.kauppa.tulopos.fi
lucyinthesky.lahjakortti.tulopos.fi
matdistrikt.lahjakortti.tulopos.fi
nolla.lahjakortti.tulopos.fi
orderatstands.redevents.kauppa.tulopos.fi
orderattable.bardot.fi
orderattable.loiloirooftop.com
orderattable.redevents.kauppa.tulopos.fi
ordertooffice.loiloirooftop.com
paven.kauppa.tulopos.fi
paven.lahjakortti.tulopos.fi
pavenarvoseteli.lahjakortti.tulopos.fi
plein.lahjakortti.tulopos.fi
punavuori.rivieracinemas.fi
ravintelisofta.fi
redevents.lahjakortti.tulopos.fi
redeventsf8ala.kauppa.tulopos.fi
redeventsf8yla.kauppa.tulopos.fi
rivierapunavuori.kauppa.tulopos.fi
rj.bel.fi
rtr.lahjakortti.tulopos.fi
sasor.lahjakortti.tulopos.fi
sicapelle.kauppa.tulopos.fi
sicapelle.lahjakortti.tulopos.fi
sorella.lahjakortti.tulopos.fi
store.coolhead.fi
ticket.coolhead.fi
tintintango.lahjakortti.tulopos.fi
wino.lahjakortti.tulopos.fi
zake.tenlen.fi

Other certificates including the domain name bel.fi

(limited to 100 certificates)

Certificate

The complete raw certificate details for rj.bel.fi in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAimAmkMBb+k/51bWy4qGO
n3XYFL24ZWz6m3dcLSm6fWbMSho5ZQxItMBjFFw7q7LENsxDsCty2GTq79pZ7glK
ymnFm3hTrvhX0XckG7CPfD+/biixdUIgpVsmEA+7UqSW6RNwIwgVv3shwf07+Zpj
BFRvfja5mHlyDEkjxtTqe7W4v66qXBqNwI4SkIrj0E6A0Zvkvx0u759FWmJO+MiM
qMu15N3R2eocgaGo7xVDVhvZrx+xdZ8erV19fnc/D85Sz/n5lUwWvrMiOw4tYo24
Uholgw4LtBTY0YsR7PkKhw8qLutMB0t+R7RX3JQJ952AXoOwtYVs0yJFs/FO1Hu3
CQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 272300476197585363806689336009443589235559
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-21 09:05:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-20 09:05:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'rj.bel.fi'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17468299736103626052607104131027695248882817461811784847688999022542333852442116712709686355184647291564457830600231346855193414074229301741650537686051972659452769647990491578598859908527524921813016375521366275134825945477510081258701947735490454023402140738872999622788493189450408102811206181266309482020728183646472137862970593795579302622298253895657836619887643170874737154052303433041428944462464847530033446075528959755315669183788625056584492467069228986611438910521342115455693728098172532058206575688102614817640281329795985145789045064375938618753132984488239663111721865408712980123329761490525396645641
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							24406ece0671a7e6966efeeef9bd70fd498723a7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2704 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '4vuodenaikaa.kauppa.tulopos.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adlerfelt.kauppa.tulopos.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'albina.lahjakortti.tulopos.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apotek.lahjakortti.tulopos.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bardot.kauppa.tulopos.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bardot.lahjakortti.tulopos.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bistroc.lahjakortti.tulopos.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bistroomat.lahjakortti.tulopos.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carelia.lahjakortti.tulopos.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloudprnt.tulopos.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coolhead.lahjakortti.tulopos.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dashboard.tulopos.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dommikkeli.lahjakortti.tulopos.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'draftsportsbar.kauppa.tulopos.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elm.lahjakortti.tulopos.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ennakkotilaus.rivierakallio.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fatlizard.lahjakortti.tulopos.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftcard.coolhead.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gron.lahjakortti.tulopos.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hejmfroj.lahjakortti.tulopos.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helsinkiravintolat.lahjakortti.tulopos.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hillsdumplings.lahjakortti.tulopos.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotellionni.lahjakortti.tulopos.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'huberbertha.lahjakortti.tulopos.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joulukori.bardot.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kajo.lahjakortti.tulopos.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kallio.rivieracinemas.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kauppa.coolhead.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kauppa.makubrewing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kauppa.tenlen.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kauppa.tulopos.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kesateatteri.tenlen.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kirkkopuisto.lahjakortti.tulopos.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ksupermarkettapiola.kauppa.tulopos.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kuu.lahjakortti.tulopos.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kuukuu.lahjakortti.tulopos.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kuurna.lahjakortti.tulopos.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lahjakortit.kakolanruusu.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lahjakortit.kaskis.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lahjakortit.ravintolamestarit.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lahjakortti.bardot.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lahjakortti.bertha.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lahjakortti.dining26.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lahjakortti.ravintelihuber.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lahjakortti.ravintolamestarit.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lahjakortti.ravintolaperiscope.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lahjakorttikauppa.bistrogina.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lahjakorttikauppa.bistromat.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lahjakorttikauppa.lecoucouvert.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lahjakorttikauppa.matdistrikt.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lahjakorttikauppa.olympiakortteli.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lahjakorttikauppa.plevna.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lahjakorttikauppa.ravintolanonni.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lahjakorttikauppa.restaurantalbina.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lahjakorttikauppa.therook.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lonna.lahjakortti.tulopos.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lonnaennakko.kauppa.tulopos.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lonnanampari.kauppa.tulopos.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lonnankahvila.kauppa.tulopos.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lonnansauna.kauppa.tulopos.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lucyinthesky.lahjakortti.tulopos.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matdistrikt.lahjakortti.tulopos.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nolla.lahjakortti.tulopos.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orderatstands.redevents.kauppa.tulopos.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orderattable.bardot.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orderattable.loiloirooftop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orderattable.redevents.kauppa.tulopos.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ordertooffice.loiloirooftop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paven.kauppa.tulopos.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paven.lahjakortti.tulopos.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pavenarvoseteli.lahjakortti.tulopos.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plein.lahjakortti.tulopos.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'punavuori.rivieracinemas.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ravintelisofta.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redevents.lahjakortti.tulopos.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redeventsf8ala.kauppa.tulopos.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redeventsf8yla.kauppa.tulopos.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rivierapunavuori.kauppa.tulopos.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rj.bel.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rtr.lahjakortti.tulopos.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sasor.lahjakortti.tulopos.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sicapelle.kauppa.tulopos.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sicapelle.lahjakortti.tulopos.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sorella.lahjakortti.tulopos.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.coolhead.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticket.coolhead.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tintintango.lahjakortti.tulopos.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wino.lahjakortti.tulopos.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zake.tenlen.fi'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c8bd60b050000040300463044022073ae2d78959bb2dba22dafc247124ebc299ee386132fa1a80786deba2246443202201b4122a078c430aa3c715c4f83424a38fe040b6d2731d6c39077f3356f52fe8400760029d03a1bb674aa711cd3035b6557c14f8aa78b4fe8389449eca453f944bd24680000018c8bd60bd90000040300473045022100a0b072cca84bf04d96288844c6cc683be1ebd8f04dde2a226e2fc4c840a3f70c02206caaba933bd2490a3facbb0d1ffcc70064e5fa9a5ad0c2a019989c12e03a5b00
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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