kaihdinjamarkiisilahti.fi
Issued by R3
About this certificate
This digital certificate with serial number 04:a6:36:fe:96:e6:d4:2a:89:c8:c0:81:aa:1c:90:18:e4:fd was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=kaihdinjamarkiisilahti.fi
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:a6:36:fe:96:e6:d4:2a:89:c8:c0:81:aa:1c:90:18:e4:fdSerial Number (int): 405009116851740804998435573901974960661757
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: d7:8b:3c:16:ab:33:42:ac:1d:24:03:ec:68:d0:ae:5a:35:ef:69:90
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 41:93:aa:9d:7b:96:cb:55:aa:cd:66:44:dc:e8:ff:ef:d6:a6:c9:74
Fingerprint (sha256): 8e:46:70:d1:78:37:4d:07:0d:8f:6f:6e:55:47:87:62:fa:3d:55:ce:41:0a:31:e6:54:6b:e8:03:71:47:f3:b5
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate kaihdinjamarkiisilahti.fi
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for kaihdinjamarkiisilahti.fi
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.kaihdinjamarkiisilahti.fi
kaihdinjamarkiisilahti.fi
kaihdinjamarkiisilahti.fi
Other certificates including the domain name kaihdinjamarkiisilahti.fi
(limited to 100 certificates)
kaihdinjamarkiisilahti.fi
kaihdinjamarkiisilahti.fi
kaihdinjamarkiisilahti.fi
kaihdinjamarkiisilahti.fi
*.kaihdinjamarkiisilahti.fi
kaihdinjamarkiisilahti.fi
kaihdinjamarkiisilahti.fi
kaihdinjamarkiisilahti.fi
*.kaihdinjamarkiisilahti.fi
kaihdinjamarkiisilahti.fi
kaihdinjamarkiisilahti.fi
kaihdinjamarkiisilahti.fi
kaihdinjamarkiisilahti.fi
kaihdinjamarkiisilahti.fi
kaihdinjamarkiisilahti.fi
kaihdinjamarkiisilahti.fi
kaihdinjamarkiisilahti.fi
mail.kaihdinjamarkiisilahti.fi
kaihdinjamarkiisilahti.fi
kaihdinjamarkiisilahti.fi
kaihdinjamarkiisilahti.fi
kaihdinjamarkiisilahti.fi
kaihdinjamarkiisilahti.fi
kaihdinjamarkiisilahti.fi
kaihdinjamarkiisilahti.fi
kaihdinjamarkiisilahti.fi
mail.kaihdinjamarkiisilahti.fi
kaihdinjamarkiisilahti.fi
kaihdinjamarkiisilahti.fi
kaihdinjamarkiisilahti.fi
*.kaihdinjamarkiisilahti.fi
kaihdinjamarkiisilahti.fi
kaihdinjamarkiisilahti.fi
kaihdinjamarkiisilahti.fi
*.kaihdinjamarkiisilahti.fi
kaihdinjamarkiisilahti.fi
kaihdinjamarkiisilahti.fi
kaihdinjamarkiisilahti.fi
kaihdinjamarkiisilahti.fi
kaihdinjamarkiisilahti.fi
kaihdinjamarkiisilahti.fi
kaihdinjamarkiisilahti.fi
kaihdinjamarkiisilahti.fi
mail.kaihdinjamarkiisilahti.fi
kaihdinjamarkiisilahti.fi
kaihdinjamarkiisilahti.fi
kaihdinjamarkiisilahti.fi
kaihdinjamarkiisilahti.fi
kaihdinjamarkiisilahti.fi
kaihdinjamarkiisilahti.fi
kaihdinjamarkiisilahti.fi
kaihdinjamarkiisilahti.fi
mail.kaihdinjamarkiisilahti.fi
Certificate
The complete raw certificate details for kaihdinjamarkiisilahti.fi in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISBKY2/pbm1CqJyMCBqhyQGOT9MA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzA4MDIwODIwMDZaFw0yMzEwMzEwODIwMDVaMCQxIjAgBgNVBAMT GWthaWhkaW5qYW1hcmtpaXNpbGFodGkuZmkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC1I9gapP4UC4unfnLcxjLorMTjnN0vvFdAmtnRzFN4L3szdH9Y elOBEK1r7Fwfbpa/QgDporlfbJsdj1So4OTuY+8Vb1vPefXkPBubb9JRmsYJ1UnL NODtxRoCa91DgXFzG3a85nid9I6EOpqqBk2FR3kouLdW7sDYucdEN3RVoWb1ECvI IwYvajPesTAjKVBanQNE7Gmg+T9E1oBQnRHLIUIc5bbSj5BTXZMJUtzmrRWx/EA+ LaeIzoNNldCDVaoJZCxNRb9DWjGOH2JnRafLGOKAS8D1RY+wBKQRxydf8L3N1fAd EgoDolwDB7/O4JghrUwLG1rAMNoUvhLL6QE3AgMBAAGjggI2MIICMjAOBgNVHQ8B Af8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB /wQCMAAwHQYDVR0OBBYEFNeLPBarM0KsHSQD7GjQrlo172mQMB8GA1UdIwQYMBaA FBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcw AYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMu aS5sZW5jci5vcmcvMEEGA1UdEQQ6MDiCGyoua2FpaGRpbmphbWFya2lpc2lsYWh0 aS5maYIZa2FpaGRpbmphbWFya2lpc2lsYWh0aS5maTATBgNVHSAEDDAKMAgGBmeB DAECATCCAQIGCisGAQQB1nkCBAIEgfMEgfAA7gB1ALc++yTfnE26dfI5xbpY9Gxd /ELPep81xJ4dCYEl7bSZAAABibWMIWEAAAQDAEYwRAIgd3AfW5PUUIEXN6aR6hRq eyKrkH7OtJXGSIqFODsQEb8CIBnrHZ+uHW63CtN/rUZqXys7KPlHhhM3bh8nahLB ukT2AHUA6D7Q2j71BjUy51covIlryQPTy9ERa+zraeF3fW0GvW4AAAGJtYwhaAAA BAMARjBEAiBxANlBjW3PvF6ULHwVHzMAwUNXeCANSezHcDlpS0h6sgIgWPXrMwva QuBNWDbhQ54QMEtwdX3aqycnzfXNigS70TswDQYJKoZIhvcNAQELBQADggEBAFYA h/qG33exTXVlfzASpSmGUFuCe9Kbum4svfc/i+HSOEHKLex2qgItqNhoXDJuZzBK joEgUH3ECjpjAQZvtPmMmpnrly1jZ3gAAaG5pDQXZJ8zwEftCMYp91DwPQwBdMmW 1MOpVq5VkRBgzqZ7p6QwHjOEFZSJuvMtax6pW5WpsNAJPlE/JxbNYVR9/LEwTghV 1VrTO9qMHminIzOOHfbSg3+cnnKrY4TgtU7TwhH7D4l5XN8P6jZTVNnREYm9Xqcd UHBBaZ08TMKYznV5XPcV08R3C/LI5pt/LY4X+LLQujIutR7Ai1P6JNJ69mb0mA+b PAqqbobgs+M36dAy0dg= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSPYGqT+FAuLp35y3MYy 6KzE45zdL7xXQJrZ0cxTeC97M3R/WHpTgRCta+xcH26Wv0IA6aK5X2ybHY9UqODk 7mPvFW9bz3n15Dwbm2/SUZrGCdVJyzTg7cUaAmvdQ4Fxcxt2vOZ4nfSOhDqaqgZN hUd5KLi3Vu7A2LnHRDd0VaFm9RAryCMGL2oz3rEwIylQWp0DROxpoPk/RNaAUJ0R yyFCHOW20o+QU12TCVLc5q0VsfxAPi2niM6DTZXQg1WqCWQsTUW/Q1oxjh9iZ0Wn yxjigEvA9UWPsASkEccnX/C9zdXwHRIKA6JcAwe/zuCYIa1MCxtawDDaFL4Sy+kB NwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 405009116851740804998435573901974960661757 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-02 08:20:06 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-31 08:20:05 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kaihdinjamarkiisilahti.fi' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22866808611229385097930863504189624524491318461064673853464360330452118902950654557614863173955820881227703338188886108917710714204441744167473653512911355969865494944263069560409915648381362805673633765114759656524497987771693961298262944501602775541461574064552297594707668053853944995072522276065322313503455144016718865150486480079056613910755461907923976704573404595732858310067162458178927552230669919660883711295942284831744146858180275669123146682867200895921685070197393538229746917338111753263585800603286812895565412367541353815144566583756789794536420847720770218504807527733955407959995630706062715846967 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) d78b3c16ab3342ac1d2403ec68d0ae5a35ef6990 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kaihdinjamarkiisilahti.fi' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaihdinjamarkiisilahti.fi' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes) 00ee007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000189b58c21610000040300463044022077701f5b93d450811737a691ea146a7b22ab907eceb495c6488a85383b1011bf022019eb1d9fae1d6eb70ad37fad466a5f2b3b28f9478613376e1f276a12c1ba44f6007500e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000189b58c2168000004030046304402207100d9418d6dcfbc5e942c7c151f3300c1435778200d49ecc77039694b487ab2022058f5eb330bda42e04d5836e1439e10304b70757ddaab2727cdf5cd8a04bbd13b . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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