alihankinta.tv

Issued by R3

About this certificate

This digital certificate with serial number 03:bc:d9:b6:b5:45:46:1a:c1:ea:45:dd:15:b7:6d:7b:ec:e7 was issued on by Let's Encrypt.

With 30 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=alihankinta.tv

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:bc:d9:b6:b5:45:46:1a:c1:ea:45:dd:15:b7:6d:7b:ec:e7
Serial Number (int): 325599333926135328926968337061685046799591
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: bd:a2:51:a6:81:aa:bd:dd:b6:d9:74:c7:f7:9e:a8:88:4e:58:f4:2c
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 00:2d:40:95:12:d4:e2:dc:4b:85:e8:b8:a8:82:72:d2:4d:79:85:ee
Fingerprint (sha256): 87:44:02:73:a9:25:ff:15:8d:82:1c:67:1f:6d:69:43:8e:12:71:c1:2e:7b:2e:87:a7:48:2b:81:a7:75:f9:ed

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate alihankinta.tv

30

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for alihankinta.tv

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

alihankinta.tv
asiakaskokemuksenakatemia.fi
bf.icareus.com
ekspress.icareus.com
events.icareus.com
events.lampio.fi
fliigatv.com
futurelab.icareus.com
heimotv.westendindians.fi
inez.fi
ipsweden.icareus.com
kirjastokino.fi
my.icareus.com
play.icareus.com
salibandytv.icareus.com
suite.icareus.com
tiedekulmamedia.helsinki.fi
tv.lavis.fi
video.eventmedia.ee
video.inez.fi
videos.icareus.com
videos.minifiddlers.org
videot.kanta.fi
videot.kela.fi
weontv.icareus.com
www.asiakaskokemuksenakatemia.fi
www.fliigatv.com
www.helsinkikanava.fi
www.inez.fi
www.kirjastokino.fi

Other certificates including the domain name alihankinta.tv

(limited to 100 certificates)
suite.icareus.com
alihankinta.tv
suite.icareus.com
alihankinta.tv
alihankinta.tv
alihankinta.tv
alihankinta.tv
suite.icareus.com
suite.icareus.com
suite.icareus.com
alihankinta.tv
alihankinta.tv
alihankinta.tv
suite.icareus.com
alihankinta.tv

Certificate

The complete raw certificate details for alihankinta.tv in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFXcxkgqvLFiejbHPIJi
NTM4ztOVz73SziWc/oIdAoXkFXc+cJc4vSw3SqQljwP7iNnGt6I1jqyNCW2qW9wR
nNFBtVLLsusrxJ4VIdJCM1PLapM8aTOfEqhOODhTYDmgL1jojejKDyZ7FzcTnVPW
s3uNhYcaT7+ScaNs1UicQq6G6fbtOagzoG/MzPV7QczsV6X3qjctb0ADA06ALhLc
txQ5UQo3ojgRKVi2tTICrQLnFJWoODgw+y/RTzeN5MnqjsRt/pZIKGcUnBjyQsmi
EW9FCEZV0vgFHfxSuZ9VpNjkmK4W1d5oKKaQc/KqLesDPfQAqWUQXm0V8oFZPGtV
QwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 325599333926135328926968337061685046799591
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-01 08:13:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-30 08:13:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'alihankinta.tv'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23775141661371768791861653818309833096565919859087160942159379366003918490637360041352736550037138930441470370851736930697276057021999342629100272260707848602129034162866352049971016504089385798834281947528951642582841011188026722466493338957523786144250109376303113651319106256461512903133633420411348198494620873527433306273246899280390221386184910772321816550894260500325557280296457137319585551354256785813739021926553127440195328761331942627418619930476166205933313547173058506784684033290749174385817659180815325968106183136131162700624260786165928964409794371509150989992357782433695500906072681912720916436291
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bda251a681aabdddb6d974c7f79ea8884e58f42c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (601 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alihankinta.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asiakaskokemuksenakatemia.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bf.icareus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ekspress.icareus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.icareus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.lampio.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fliigatv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'futurelab.icareus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heimotv.westendindians.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inez.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipsweden.icareus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kirjastokino.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.icareus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'play.icareus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salibandytv.icareus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suite.icareus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tiedekulmamedia.helsinki.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tv.lavis.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.eventmedia.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.inez.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'videos.icareus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'videos.minifiddlers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'videot.kanta.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'videot.kela.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weontv.icareus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.asiakaskokemuksenakatemia.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fliigatv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.helsinkikanava.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.inez.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kirjastokino.fi'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018df949f8d300000403004630440220397c83ca1220928465d460b56d351e820c266c41213320655429e10c9cb850950220656e6fcaec10a56e0fe62847d54052a174755f9b6f75d59cb6b15ab873087f20007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018df949f8e00000040300473045022100d88e5d1e7507fd7d1515dc5615a3991170319b26a054dd1461334ac53a756e7102203d03e9c68f5ab32a8b3546bc3ef4879ef62d8bea9c88a77b4c7cba11332b8741
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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