ehasa.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:ac:24:61:3a:c8:64:9b:8d:a8:b0:91:ee:b5:9a:3d:0a:f4 was issued on by Let's Encrypt.

With 80 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ehasa.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:ac:24:61:3a:c8:64:9b:8d:a8:b0:91:ee:b5:9a:3d:0a:f4
Serial Number (int): 407026067890342463219999912184641952221940
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 0a:ec:67:4d:a5:2d:d8:f1:fa:8f:f8:31:0f:87:f8:8d:71:3e:f6:4e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): f8:82:00:4e:f3:1f:e7:73:63:c8:fd:4d:b1:13:47:ef:0f:1a:43:e5
Fingerprint (sha256): 95:ba:cf:eb:d6:a8:13:10:45:ef:8a:9f:42:78:aa:e3:df:59:ca:d2:89:c0:33:d1:b1:7c:3e:7e:04:91:f1:92

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate ehasa.org

80

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ehasa.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

berget.ehasa.org
boogie.ehasa.org
carrington.ehasa.org
carrington2.ehasa.org
carrington3.ehasa.org
carrington4.ehasa.org
code.ehasa.org
conquest.ehasa.org
conquest10.ehasa.org
conquest11.ehasa.org
conquest12.ehasa.org
conquest13.ehasa.org
conquest14.ehasa.org
conquest15.ehasa.org
conquest16.ehasa.org
conquest17.ehasa.org
conquest18.ehasa.org
conquest19.ehasa.org
conquest2.ehasa.org
conquest20.ehasa.org
conquest3.ehasa.org
conquest4.ehasa.org
conquest5.ehasa.org
conquest6.ehasa.org
conquest7.ehasa.org
conquest8.ehasa.org
conquest9.ehasa.org
ehasa.org
feedback.ehasa.org
file.ehasa.org
gallery.ehasa.org
gallery2.ehasa.org
ilveskallio.ehasa.org
jpt.ehasa.org
kalja.ehasa.org
kaudenlopetus.ehasa.org
kauppa.ehasa.org
kevatmatto.ehasa.org
kevatmatto2016.ehasa.org
kevatmatto2017.ehasa.org
kevatmatto2019.ehasa.org
kevatmatto2020.ehasa.org
kuulaportti.fi
laskutus.ehasa.org
news.ehasa.org
news.tstos.fi
palaute.ehasa.org
parola.ehasa.org
players.ehasa.org
rekry.ehasa.org
ryhmakilpailu.ehasa.org
s.ehasa.org
status.ehasa.org
status2.ehasa.org
stirre.ehasa.org
syysmatto.ehasa.org
syysmatto2018.ehasa.org
syysmatto2019.ehasa.org
syysmatto2020.ehasa.org
talvimatto.ehasa.org
talvimatto2018.ehasa.org
talvimatto2019.ehasa.org
talvimatto2020.ehasa.org
tickets.ehasa.org
tstos.fi
tstos17.ehasa.org
tstos17.kuulaportti.fi
tstos18.ehasa.org
tstos18.kuulaportti.fi
tstos19.ehasa.org
tstos19.kuulaportti.fi
tstos20.ehasa.org
tstos20.kuulaportti.fi
tstosnews.ehasa.org
tuki.ehasa.org
vallisto.ehasa.org
www.ehasa.org
www.kuulaportti.fi
www.tstos.fi
yopeli.ehasa.org

Other certificates including the domain name ehasa.org

(limited to 100 certificates)
conquest3.ehasa.org
conquest12.ehasa.org
carrington.ehasa.org
tstos18.ehasa.org
status.ehasa.org
conquest5.ehasa.org
carrington3.ehasa.org
conquest5.ehasa.org
status.ehasa.org
conquest4.ehasa.org
ehasa.org
ehasa.org
conquest12.ehasa.org
tstos18.ehasa.org
www.ehasa.org
conquest7.ehasa.org
conquest4.ehasa.org
conquest2.ehasa.org
www.ehasa.org
www.ehasa.org
ehasa.org
conquest12.ehasa.org
status.ehasa.org
conquest6.ehasa.org
status.ehasa.org
ehasa.org
carrington.ehasa.org
conquest7.ehasa.org
status.ehasa.org
carrington2.ehasa.org
conquest4.ehasa.org
conquest5.ehasa.org
conquest.ehasa.org
conquest8.ehasa.org
code.ehasa.org
conquest4.ehasa.org
conquest3.ehasa.org
conquest8.ehasa.org
conquest7.ehasa.org
conquest5.ehasa.org
ehasa.org
conquest6.ehasa.org
conquest8.ehasa.org
conquest2.ehasa.org
file.ehasa.org
status.ehasa.org
ssl.ehasa.org
www.ehasa.org
conquest.ehasa.org
s.ehasa.org
tstos18.ehasa.org
carrington2.ehasa.org
conquest6.ehasa.org
file.ehasa.org
ehasa.org
ehasa.org
conquest.ehasa.org
file.ehasa.org
gallery.ehasa.org
tstos17.ehasa.org
conquest3.ehasa.org
conquest9.ehasa.org
conquest9.ehasa.org
ehasa.org
conquest3.ehasa.org
ehasa.org
status.ehasa.org
status.ehasa.org
status.ehasa.org
conquest7.ehasa.org
conquest2.ehasa.org
ehasa.org
s.ehasa.org
code.ehasa.org
ehasa.org
conquest9.ehasa.org
ehasa.org
ehasa.org
code.ehasa.org
conquest8.ehasa.org
sni.cloudflaressl.com
conquest5.ehasa.org
conquest12.ehasa.org
code.ehasa.org
ehasa.org
conquest6.ehasa.org
sni.cloudflaressl.com
gallery.ehasa.org
tstos18.ehasa.org
conquest12.ehasa.org
conquest3.ehasa.org
conquest9.ehasa.org
status.ehasa.org
status.ehasa.org
tstos18.ehasa.org
ehasa.org
ehasa.org
ehasa.org
status.ehasa.org
conquest9.ehasa.org

Certificate

The complete raw certificate details for ehasa.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8NXYkI6wxu3QN26GED47
eKqSMptSuV6Am557tk8GY7eibI/U0UQ4wNiVJ7iTAwV4HMBBP/8TQfl68p+xkgeV
jWaNmQmAHNCdrSSXTXh1EiMLokM2epjfWqy0gGiIKP5plPQ8cNT6y8mSNPumE+59
l88YMZd7Qpng0uI5fVol1Tkb5NtZGC86sbHYpkRBjTx1nz6cB5nnEmsnaTaTwUXu
NLlB9tO8CVcZiOrEiEA38M+VM/ceNaRiGHCYxcz7yZedS3uP8HZn1q50il5B+nxK
aPHLQdkdgXcECYP0FK3EgHIut84ILclQY3u9MjavOos/vNKfcE8LP2miIYpJ92y+
5QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 407026067890342463219999912184641952221940
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-22 18:47:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-21 18:47:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ehasa.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30402644562870994344748634803013787489324492042009691273140094802774014803156547048649958889194949185343248435154856999814889653612679737247661425697333272667874990608043528345253266164726640562164173968536332731687487233082479654847040207512743772964884350971770243908780349443958562953212338245953501874108442974860910262098263581943116259665221934445442060764393157817405054960540526552823044035675210220414487154289928651514352807303534188691262283524454490421582070973271958765696112294660772225234229027863822711154708829479106390786961498214300538345880042241087295382428205982908821014269226101477688052858597
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0aec674da52dd8f1fa8ff8310f87f88d713ef64e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1641 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berget.ehasa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boogie.ehasa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carrington.ehasa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carrington2.ehasa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carrington3.ehasa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carrington4.ehasa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'code.ehasa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conquest.ehasa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conquest10.ehasa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conquest11.ehasa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conquest12.ehasa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conquest13.ehasa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conquest14.ehasa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conquest15.ehasa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conquest16.ehasa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conquest17.ehasa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conquest18.ehasa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conquest19.ehasa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conquest2.ehasa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conquest20.ehasa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conquest3.ehasa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conquest4.ehasa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conquest5.ehasa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conquest6.ehasa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conquest7.ehasa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conquest8.ehasa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conquest9.ehasa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ehasa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feedback.ehasa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'file.ehasa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gallery.ehasa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gallery2.ehasa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ilveskallio.ehasa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jpt.ehasa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kalja.ehasa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaudenlopetus.ehasa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kauppa.ehasa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kevatmatto.ehasa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kevatmatto2016.ehasa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kevatmatto2017.ehasa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kevatmatto2019.ehasa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kevatmatto2020.ehasa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kuulaportti.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laskutus.ehasa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.ehasa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.tstos.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'palaute.ehasa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parola.ehasa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'players.ehasa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rekry.ehasa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ryhmakilpailu.ehasa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's.ehasa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.ehasa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status2.ehasa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stirre.ehasa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'syysmatto.ehasa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'syysmatto2018.ehasa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'syysmatto2019.ehasa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'syysmatto2020.ehasa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'talvimatto.ehasa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'talvimatto2018.ehasa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'talvimatto2019.ehasa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'talvimatto2020.ehasa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.ehasa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tstos.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tstos17.ehasa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tstos17.kuulaportti.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tstos18.ehasa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tstos18.kuulaportti.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tstos19.ehasa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tstos19.kuulaportti.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tstos20.ehasa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tstos20.kuulaportti.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tstosnews.ehasa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tuki.ehasa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vallisto.ehasa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ehasa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kuulaportti.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tstos.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yopeli.ehasa.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf640000016602d285a4000004030048304602210091904d14b09aced1454043a00950b8da3968f7aa2a3b477f76a58f79dfc12cb30221009b68d0866df53503db115e2a61dc2c7a186bc4da0d72151c6718e21f218f07b4007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016602d287730000040300483046022100d7cac0e1533381c35edea6e288a9c753c1bede36a3eba84afc4380a7253a72df022100eb54066477f54af483936475dbf950c757a70fbf85ece7e1513c46500fbe2d65
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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