koulia.fi

Issued by Sectigo RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number 9e:40:36:28:3d:7d:cf:c0:62:81:c2:4e:6f:cc:fd:69 was issued on by Sectigo Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=koulia.fi

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 9e:40:36:28:3d:7d:cf:c0:62:81:c2:4e:6f:cc:fd:69
Serial Number (int): 210351428771238717053092726320386604393
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 8e:14:94:4d:fb:5e:b1:78:7e:ea:bd:d4:2d:b0:69:c9:16:3a:7d:41
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1

Fingerprint (sha1): 2e:f6:bc:de:c9:a3:40:ca:b7:7b:08:61:19:94:c6:7d:53:cd:93:d4
Fingerprint (sha256): 79:e7:74:ef:60:6e:61:9c:d7:10:f9:57:14:02:14:b1:44:5e:81:80:ea:83:2b:08:41:6b:90:84:24:94:44:13

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate koulia.fi

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for koulia.fi

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

koulia.fi
www.koulia.fi

Other certificates including the domain name koulia.fi

(limited to 100 certificates)
www.koulia.fi
koulia.fi
mail.koulia.fi
gtrainerdemo.koulia.fi
www.koulia.fi
gtrainerdemo.koulia.fi
www.koulia.fi
gtrainerdemo.koulia.fi
koulia.fi
www.koulia.fi
mail.koulia.fi
www.koulia.fi
gtrainerdemo.koulia.fi
www.koulia.fi
koulia.fi
www.koulia.fi
www.koulia.fi
koulia.fi
www.koulia.fi
mail.koulia.fi
koulia.fi
koulia.fi
mail.koulia.fi
www.koulia.fi
koulia.fi
gtrainerdemo.koulia.fi
koulia.fi
mail.koulia.fi
koulia.fi
mail.koulia.fi
gtrainerdemo.koulia.fi
koulia.fi
gtrainerdemo.koulia.fi
koulia.fi

Certificate

The complete raw certificate details for koulia.fi in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjT7FduRD7h0+24u2x7rr
dr8PTPTek+aDCA+sZBf/AS02vowINbi3Tg3spykzvMXssw0w5KFiGlvJWeTjV0Se
5NbEMGsywfHkF4OgBB/WnaFH3Ov3EojxkzWgmiWTjIXxGW7RZu2tteIbVBpodvuZ
xhhY+HGoSRhDezk4k00Ovk34FraIDfSH0GyxWhLFPTuF7xzn3rf7pTKpRszQqQvY
bBd/Avtk+3bYMbxxMMjgRZZv3XHwOrja31gJJ6X0g0Z7kn+tpn8dKGBMwj+MCxMh
lB3tDyrB1b0d7Ii9hOb8+iR4YENtyjrpzy8yGxOGKuKgpWjMR2aQdQhIUfcLPa5e
uwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 210351428771238717053092726320386604393
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-25 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'koulia.fi'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17830554704287797541641131840481549693753072116278546128802414317746225908784693890979498346737386433215121102352109691060775313422552403011390422406923807897951241757934106304412032957083089835444807776780762709860929030764749514519824490213549083122559158776665260562067740733165037318472923283819892883416451541815958183667513251293971338989827711653473359103125245164168967299485351557512775865737109432305596756541028972375793654228937658131145592442137554866267482977512264164191197255890255754039423367451923255589972842259688399857466644396089442426327218128430002408230113267649932791208563682367747631505083
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8e14944dfb5eb1787eeabdd42db069c9163a7d41
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'koulia.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.koulia.fi'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed1850000016b9a818b910000040300483046022100fa223c8935fdd9d88d6d444838b6cd4b844eb0945e5ff5b98249ed3824f7fe110221008472390b51cdf60e20a30e9056ab079bad4712a5424021ae26183d91d9f819e6007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016b9a818c7d0000040300473045022012246c56b53224f17f137ad7548e88bdf473ccbefd44f53273e5cd67469632da022100b35222c412649bcb94850983561ab560231ba09040e842e9a71e5001977470e9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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