stat.helkela.fi

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:25:3c:f0:24:f4:e1:ad:92:8d:dc:4f:5a:54:d3:75:e0:4f was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=stat.helkela.fi

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:25:3c:f0:24:f4:e1:ad:92:8d:dc:4f:5a:54:d3:75:e0:4f
Serial Number (int): 274008305951916867747421236751438437539919
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c9:bd:39:72:0d:62:13:38:51:21:dc:03:10:ea:15:c6:dd:37:33:be
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 2f:47:0c:0d:fb:7d:d7:3a:e9:64:bd:48:4c:60:55:d8:39:68:67:95
Fingerprint (sha256): 85:3c:6f:2e:da:29:eb:77:e0:ce:96:18:14:73:f8:89:59:07:90:fc:58:b9:bd:a1:4c:09:37:ea:34:6b:bf:7f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate stat.helkela.fi

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for stat.helkela.fi

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

stat.helkela.fi

Other certificates including the domain name helkela.fi

(limited to 100 certificates)

Certificate

The complete raw certificate details for stat.helkela.fi in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 274008305951916867747421236751438437539919
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-18 22:09:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-16 22:09:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'stat.helkela.fi'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 905990196587993952502026357946778896613364873470832642270669433231803748733944950607301895490088734101915104758014954392743546064099255276939694954172498410666203531054684913141300212898105366392113615403690532686797744814239235599735658098124119660445933271553475656057127426095202569686584253109396608612201034976992696068378647594608244731678477239381604075054432565304296557665178793364682035274749041641678415268390666934604701446837671255358442410752073303742838882353898817959540059752222501053289529331840780843977649004532650742967184708955083599910347342121427962308253917451501343212758377510341260410477605822843940680898935383776444398762583003854937796024060447185973765511788697915634891892780574489440102051865947774595974653370820268287040135434021277760392045350510456773056028528741671342624819498160545269916719887360028955212629388841594714442930244819779197123345595663321119172953026815381985977451802989883058751735849968337188542100385966072755459474017095075439511671144923065168692404119880598392985783861993729480246483182949875796234935994489991850295538856314677394980951338309584862729434834312320372705982528388819545704265349987924735717613620078173527536799333632487617950816589500976059491206586663
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c9bd39720d6213385121dc0310ea15c6dd3733be
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stat.helkela.fi'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016e80c7a6a000000403004630440220659217502d292cff622f6910f43d3d157105e09e294470ccbdf3917793cb1cd902204fc981b305d6315577ce8e8cd7c78fe20865152396733c290c92a5034082530400760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016e80c7a6e7000004030047304502207d55eb0fc9782a67481ba6de004cc36297c3f6f96252ad66428518c658ca5e20022100a04df0cc7b331f12b7e96bb721881f292d4b5539eff7ae13f745a3b81c211d25
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		003ce23b2b08edc71af1798b1e4da14c968fcc1b747fd115ebcc3b1cc65c8f1b68aa1f477152ee026526422abb89877a30afcd57c71065b96fa611d271d7cfb62124f1a8f5c4e3d760e2751a29aeff4b7ff1c4ce1c9c4caecb5d38352298c0f9503118bd01a4d2f50bf0ab455d11546d39e2c533d0ad1202ed3bfaf0890b2c2f3a89028a15eec22bbc612f5ee8d6bed76ba83607f840bd332616261e949a4ff14e5e77c4b66e35b8d087c06db756eadfb4271cc18a8a0a730fed28f0105c9f4918e1d35e284c44c7aa963be64c3ef689393341732a7ad22e5586996a6ce887a1933fa63750bebc67839b364f56e7bc0719641c5e22a0c5dc3bbf1d67469146df7d