voimakas.fi
Issued by R3
About this certificate
This digital certificate with serial number 03:5b:cc:5e:92:a7:89:fc:7f:ff:2d:68:b8:37:e4:4f:97:08 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=voimakas.fi
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:5b:cc:5e:92:a7:89:fc:7f:ff:2d:68:b8:37:e4:4f:97:08Serial Number (int): 292574206746636575200034074857149234648840
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: ae:ea:57:9b:65:48:9b:d4:31:59:b4:56:6f:5a:fd:b9:f0:66:9f:7a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): bb:3c:71:ce:af:c8:59:f4:6a:28:8b:e0:94:c8:79:e4:29:eb:0d:fd
Fingerprint (sha256): 90:0c:88:c8:9e:d3:5a:ac:35:4a:7c:7f:72:36:60:5d:1c:56:dd:12:46:02:d8:bb:e1:5f:b2:85:28:f8:92:2a
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate voimakas.fi
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for voimakas.fi
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
voimakas.fi
Other certificates including the domain name voimakas.fi
(limited to 100 certificates)
Certificate
The complete raw certificate details for voimakas.fi in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF4jCCBMqgAwIBAgISA1vMXpKnifx//y1ouDfkT5cIMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzA5MjQwNTEzMjZaFw0yMzEyMjMwNTEzMjVaMBYxFDASBgNVBAMT C3ZvaW1ha2FzLmZpMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA4OwG 7P/SJWmXr7tS+zHejiSmN8+Qy8Vy7OBEeiTQuw1OFUhHJ79enBXB7x0IuLjkbwzW jQfu33z2+a35yWyvyb99IHE0UFPWSNl9JXJKsVebf55QX9LYt605JB+lh9zMNiSj UdoYRhmhbj3RW+OvgH5R3tYSAYPAsDb5GCQBpsYjbNkOwTGVxPpTZBV/WuCPGLWR k2TN4c2wKrN4V42CPrGahpeRMuCdWHOXGcVrDJF6++RRWPDYumsBxygNH2ppjOtP /PsUJoSA6lKWCv+ib7W8zmlV13yNRMxgCbnDKpe16HXG5Z/4D8ZdI0pmk+bIvGCy 1NVR0c5qkpiuZWaauwetTXbJIfxoiziKv0yh6Utyn95DA/FBVvieyKR7Z5wO5NQl PqpI/7K1B40UbxMimkQL7dwI5y1uR5KjPJN4M6WrpF2aYsTw6hiHoePMNSeM51N9 byv5wSTScfAegbn/TMafKK2oNdv5l/6o2St9LsPfcRGFzKPRfV1fct4pZfXTAgPj KjSALAyuYRk1CZVHDPGyf5YZPtQyJJgXCRCj8IrW+rVIL/c7dQTX93EABe2QiofD CA2SUguMpvGul6Gflr34tIDKf2KuBqNdtX70VRnh8JhSxJ3/pjabHV6EFiFd4J9F OusToRuoqNsFj0lCCjTxNlGlS1z08yaYgDhRV8kCAwEAAaOCAgwwggIIMA4GA1Ud DwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0T AQH/BAIwADAdBgNVHQ4EFgQUrupXm2VIm9QxWbRWb1r9ufBmn3owHwYDVR0jBBgw FoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUF BzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9y My5pLmxlbmNyLm9yZy8wFgYDVR0RBA8wDYILdm9pbWFrYXMuZmkwEwYDVR0gBAww CjAIBgZngQwBAgEwggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8AdgC3Pvsk35xNunXy OcW6WPRsXfxCz3qfNcSeHQmBJe20mQAAAYrF0kXnAAAEAwBHMEUCIBlaUQRhWzhA 4aTo4MATVOv8KEbl7aXNHGq+6TD1BNAIAiEAv6LJ88WY2gt3kUZxYlm0ZhAQdbCO zDaRyBbE2EGjWAUAdQCt9776fP8QyIudPZwePhhqtGcpXc+xDCTKhYY069yCigAA AYrF0kYnAAAEAwBGMEQCIA6yqwZk92xpa6EP0IVKs1UTAJbrmR1cRJY6x+bxHwsi AiB4ZZXES4XQe52nrUIj4dShGYH7lCCSwQSbsUPklemUxjANBgkqhkiG9w0BAQsF AAOCAQEAEFxj2gi346fb7FttFIkKhLu6qDEe7I19oSIRPuZ1R/MtJRZzCiqq0HbU q/xwL/fNliyWrAVOuJ4BlhPO97whHsWirrTPVdZHZZtSDyslsZwlyuEv2qwpuoMV VqijEIDDX7rtX0sNWaCzs8CSD6GtLd1rAOvFQAtk7nFMY0dnpC+OczS01j9HmkwP jQlpGvRkwbpYl7oarPBAeZsgA1xeKsQitLB/g/7SpZn+qc5+xlW2474WSI5jKZmm sEQEGYuCLOuUJxMrz1IuuJCeqHL4j0py/T2u9Ijl8IA0iVURc7qNPPhTjW8NH1IE nQ/dvppcMivVOfITln1yitx5W7tNjw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA4OwG7P/SJWmXr7tS+zHe jiSmN8+Qy8Vy7OBEeiTQuw1OFUhHJ79enBXB7x0IuLjkbwzWjQfu33z2+a35yWyv yb99IHE0UFPWSNl9JXJKsVebf55QX9LYt605JB+lh9zMNiSjUdoYRhmhbj3RW+Ov gH5R3tYSAYPAsDb5GCQBpsYjbNkOwTGVxPpTZBV/WuCPGLWRk2TN4c2wKrN4V42C PrGahpeRMuCdWHOXGcVrDJF6++RRWPDYumsBxygNH2ppjOtP/PsUJoSA6lKWCv+i b7W8zmlV13yNRMxgCbnDKpe16HXG5Z/4D8ZdI0pmk+bIvGCy1NVR0c5qkpiuZWaa uwetTXbJIfxoiziKv0yh6Utyn95DA/FBVvieyKR7Z5wO5NQlPqpI/7K1B40UbxMi mkQL7dwI5y1uR5KjPJN4M6WrpF2aYsTw6hiHoePMNSeM51N9byv5wSTScfAegbn/ TMafKK2oNdv5l/6o2St9LsPfcRGFzKPRfV1fct4pZfXTAgPjKjSALAyuYRk1CZVH DPGyf5YZPtQyJJgXCRCj8IrW+rVIL/c7dQTX93EABe2QiofDCA2SUguMpvGul6Gf lr34tIDKf2KuBqNdtX70VRnh8JhSxJ3/pjabHV6EFiFd4J9FOusToRuoqNsFj0lC CjTxNlGlS1z08yaYgDhRV8kCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 292574206746636575200034074857149234648840 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-24 05:13:26 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-23 05:13:25 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'voimakas.fi' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 917601624244393374875467780491020059886724585141266291231972264237452404152811255656699819346702305163575357156789501753404507854190468796550053716402063648315044026175139398237349298018637385612441487579843935627173285322690705097623445880888959903977201386217749234599762696839029646563727984680110002009466141058659959953423084681314911516958960502134900595765499770168386173351150773837781250369295195108421526627407007635276271267135638801072473966159389629933650296847146996479293596094461942312102147533874058260727321457512955049949865679830723526591726841264024399162627907932905922299064936142976036461898546794202633956109301196241648318137130839934423140484347812593212384936585558785574242946686407624994547170554900168770606204963275596590835503733104248425845428676423332411241065851817535077706870918516232134678570054027365216814553034033339463557340400784460926708709611342349562744107882732101454320885787024789659948286856942781067582542092412441039038847257746618130538037082470593161680628715532168868156038860615068794341333370804811618731070572885727711084425776764502896005919876313636729987998993417293476331114735873267390746863549385567682175963660551262434880060454863139316131140710430081602806038484937 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) aeea579b65489bd43159b4566f5afdb9f0669f7a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'voimakas.fi' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018ac5d245e700000403004730450220195a5104615b3840e1a4e8e0c01354ebfc2846e5eda5cd1c6abee930f504d008022100bfa2c9f3c598da0b779146716259b466101075b08ecc3691c816c4d841a35805007500adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018ac5d24627000004030046304402200eb2ab0664f76c696ba10fd0854ab355130096eb991d5c44963ac7e6f11f0b220220786595c44b85d07b9da7ad4223e1d4a11981fb942092c1049bb143e495e994c6 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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