www.retkelle.test.getsome.fi

Issued by R3

About this certificate

This digital certificate with serial number 03:54:33:4f:98:b4:87:c5:95:46:bc:a2:a1:f8:79:c8:fa:34 was issued on by Let's Encrypt.

With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.retkelle.test.getsome.fi

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:54:33:4f:98:b4:87:c5:95:46:bc:a2:a1:f8:79:c8:fa:34
Serial Number (int): 289988780533105774178967215111646921423412
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: aa:f8:24:d7:59:7d:87:59:bc:da:56:e9:4d:dc:78:ef:be:e1:f6:7e
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 11:cc:f0:9c:87:e5:fe:1a:b9:c4:22:09:e0:69:5e:a0:0e:cc:67:2a
Fingerprint (sha256): 96:3e:5d:6a:a3:7d:8a:5a:ba:e0:14:c5:9a:4c:b1:1d:b7:63:10:17:45:e3:57:b2:ae:ec:3b:93:8a:aa:9f:59

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.retkelle.test.getsome.fi

18

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.retkelle.test.getsome.fi

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.fatbird.fi
*.fishy.fi
*.getsome.cloud24.hostingpalvelu.fi
*.getsome.fi
*.reposaari.cloud24.hostingpalvelu.fi
*.reposaari.fi
fatbird.fi
fishy.fi
getsome.cloud24.hostingpalvelu.fi
getsome.fi
reposaari.cloud24.hostingpalvelu.fi
reposaari.fi
retkelle.test.getsome.fi
www.fatbird.getsome.fi
www.fishy.getsome.fi
www.reposaari.getsome.fi
www.retkelle.test.getsome.fi
www.santasicecart.getsome.fi

Other certificates including the domain name getsome.fi

(limited to 100 certificates)
getsome.fi
fatbird.fi
getsome.fi
robomatic.getsome.fi
suomenparaskauppa.fi
robomatic.getsome.fi
fishy.fi
reposaari.fi
reposaari.fi
reposaari.fi
reposaari.fi
suomenparaskauppa.fi
getsome.fi
robomatic.getsome.fi
reposaari.fi
robomatic.getsome.fi
reposaari.fi
reposaari.fi
reposaari.fi
fishy.fi
fishy.fi
retkelle.com
reposaari.fi
getsome.fi
suomenparaskauppa.fi
retkelle.com
retkelle.com
buugogroup.com
reposaari.fi
suomenparaskauppa.fi
*.getsome.cloud24.hostingpalvelu.fi
robomatic.getsome.fi
fishy.fi
www.getsome.fi
retkelle.com
fishy.fi
retkelle.com
retkelle.com
retkelle.com
getsome.fi
getsome.fi
reposaari.fi
getsome.fi
buugogroup.com
reposaari.fi
getsome.fi
getsome.fi
buugogroup.getsome.fi
retkelle.com
buugogroup.com
reposaari.fi
fishy.fi
suomenparaskauppa.fi
blushbeauty.fi
retkelle.com
suomenparaskauppa.fi
getsome.fi
getsome.fi
getsome.fi
retkelle.com
suomenparaskauppa.fi
fishy.fi
getsome.fi
reposaari.fi
blushbeauty.fi
robomatic.getsome.fi
blushbeauty.fi
www.retkelle.test.getsome.fi
retkelle.fi
getsome.fi
reposaari.fi
buugogroup.getsome.fi
reposaari.fi
cpcalendars.reposaari.cloud24.hostingpalvelu.fi
blushbeauty.fi
fishy.fi
mail.fishy.fi
retkelle.test.getsome.fi
retkelle.com
fishy.fi
reposaari.fi
blushbeauty.fi
getsome.fi
suomenparaskauppa.fi
reposaari.fi
retkelle.getsome.fi
buugogroup.getsome.fi
getsome.fi
robomatic.getsome.fi
reposaari.fi
www.recu.getsome.fi
getsome.fi
fatbird.fi
suomenparaskauppa.fi
reposaari.fi
blushbeauty.fi
reposaari.getsome.fi
buugogroup.getsome.fi
webdisk.fatbird.fi
robomatic.getsome.fi

Certificate

The complete raw certificate details for www.retkelle.test.getsome.fi in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDUD5dTrOE5MDpUCKLu6
Owtt8jXAKFFRJ9aTmtLbKPWNAlDFilGtEy38YPXmeygxBTl0SIpnpFiACERZW7dG
DeG/l5BWrdGVM2BLpG2zdwlu8Q5/fyg2pLMb3UlCoWnd1ZsbkEprBfB5wK+01SqW
i5s/cYf/m914B7WFn7rVUV2Eq/kyGwCzF7ojXHmhxnQ7QX1dYY3PoKP5HSS9UZED
d6Ojxr50NvgxowHZQQ1UA8+2mmKH+erdKZ6AmhRXamJy8YShmgDUgFyfjcKoWp5a
FDCqATbKydwPmBlGRcwHJLtZZCn+Qjnrv/ev2leLNrZ6wY2G0BTOWHchtyL4rOSp
FwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 289988780533105774178967215111646921423412
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-15 22:11:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-13 22:11:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.retkelle.test.getsome.fi'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25273803775361026586791074203435223213481412973168734093395003803805896323259877155655299078842728371108052569901771610079523929292421565730785820341123548285504940942240808901977853760827640136874113004018887462661280543958661897452085603220312507262666899802713106775849308998657449220499888893215497657025499834456778977948804114288732281464151665629724589574885168436739196604460398625482045345937497414160583955382947762630237298701539510047164411171112511997105803901171543721079259067935643531035187449884766238400276708823032694743668190182411619498433252845811723753425971602740207219601584429852137475057943
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							aaf824d7597d8759bcda56e94ddc78efbee1f67e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (414 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fatbird.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fishy.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.getsome.cloud24.hostingpalvelu.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.getsome.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reposaari.cloud24.hostingpalvelu.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reposaari.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fatbird.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fishy.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getsome.cloud24.hostingpalvelu.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getsome.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reposaari.cloud24.hostingpalvelu.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reposaari.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retkelle.test.getsome.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fatbird.getsome.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fishy.getsome.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reposaari.getsome.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.retkelle.test.getsome.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.santasicecart.getsome.fi'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018b359becd800000403004730450220553d4053311567bc4a69b8ba8efe3c33d429c560d4c9c451257c804cb43df766022100bad0e81b55c52d4b1f6b419aa7560ef6b6f42c7b482e12ebe4c51fbd8dd7df19007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018b359becd10000040300483046022100931ee189ef02231d1bb4e93bae7358f9d4e0d2782c1738a5c0b2483c97db0ebc022100c70ebf954d7a2b51de3d26ae0d9a897728b4d329730b72a8a2b279bb9e40fa00
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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