millitalli.fi

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:e5:4b:20:bd:65:db:b6:39:f8:58:66:69:7d:3c:23:d0:1b was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=millitalli.fi

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e5:4b:20:bd:65:db:b6:39:f8:58:66:69:7d:3c:23:d0:1b
Serial Number (int): 339361381914804446897448886718974732259355
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 81:f7:4c:b5:69:0e:46:00:bf:db:98:86:d9:b3:a3:ad:a4:a5:7b:bf
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 97:17:c1:c8:8f:f6:d6:85:6c:f1:d4:c9:a9:48:93:c6:74:65:6c:1f
Fingerprint (sha256): a4:f6:05:df:a4:53:6a:68:52:d3:9d:90:d5:b6:d5:3a:56:21:64:76:b4:52:22:3a:a4:eb:e3:46:9c:18:71:c9

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate millitalli.fi

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for millitalli.fi

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

millitalli.fi
www.millitalli.fi

Other certificates including the domain name millitalli.fi

(limited to 100 certificates)

Certificate

The complete raw certificate details for millitalli.fi in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGZTCCBU2gAwIBAgISA+VLIL1l27Y5+FhmaX08I9AbMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEwMjgwNjAyNDhaFw0y
MDAxMjYwNjAyNDhaMBgxFjAUBgNVBAMTDW1pbGxpdGFsbGkuZmkwggIiMA0GCSqG
SIb3DQEBAQUAA4ICDwAwggIKAoICAQDlrHZFNxGcSQCKNsx4EXki0aHt8aL1x0Vo
Jtj56PflNy09TVMcGqJBNloWFyk3L0ZyCQ9F7ZMTHb8l5cbwSsKmnk1H0Jg1GnJN
cyE3EY3E9C3MrmkFBN35vn3YlHPwHPJaWxrZN/xStEUlgKwZAAQNi5nZFe01koYK
F9Muz3Okq0r1yT1K5n+kqVxOG8QefTy9NCN23kPQI+CZ5CG6IomB0hQ/br8Sw6bZ
mIJmdfgTQfknva+M/ahPSvENYwozwR/8EnMPTu//qmWE4DD1cMvtwRmCMIlFahyD
VXbqH4RDgNFgAg7biEI8f2ljJNAfZXvtcYcIvd0fxeTWpLRnH9/eMoLY2jlXjId+
CdKY5mXJtBCDc+yUabxgH3VRXD9wGOwK4mCtrIjAqUGZRjEpx7WxQkruBkcVOUzJ
PB+IOO/8YFGYGMIk2hJkM1dxkk6T9AgMYvvIi2NTZoJVcx9rV1U/YJ6IXGBtf3ll
F9lqxw14yGTFtpZxg+rW6Ih7GcpKA7l73kRB2Bx+OldZmGRfJ4rVTPYXTkEYFAsD
3cKda7WPf8YyqMaIb2FWDfklywnDWJQI9QPdUrqs+n4mv8ZMYDCmQ3XkJ9ZBTTvP
WzoD62bji6HpLKChaEPowkugp47xhjAo7dJjCWaWofN64+FDdCljyjtMpZCwIq94
jrNpea2qCQIDAQABo4ICdTCCAnEwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG
CCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBSB90y1
aQ5GAL/bmIbZs6OtpKV7vzAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86js
oTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14
My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14
My5sZXRzZW5jcnlwdC5vcmcvMCsGA1UdEQQkMCKCDW1pbGxpdGFsbGkuZmmCEXd3
dy5taWxsaXRhbGxpLmZpMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8T
AQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIB
BAYKKwYBBAHWeQIEAgSB9QSB8gDwAHYAXqdz+d9WwOe1Nkh90EngMnqRmgyEoRIS
hBh1loFxRVgAAAFuESykcgAABAMARzBFAiEAuEdJw6TqYRAyoR5yLK29NklP4aZG
yYA3L14GUqnbQX4CIHcoVs9LNkF3MwYJysQ5ziTYikCo7AANp2RJM3MLGVJ7AHYA
B7dcG+V9aP/xsMYdIxXHuuZXfFeUt2ruvGE6GmnTohwAAAFuESykkwAABAMARzBF
AiEAwmHAwKt6quYkYB6K3GyG1vBdx8hS5LE2bxtQCZzCT0ECIGMFZpOuRMIEKNRp
5bxCuemg1YpjzxngdAWwkQBiGC/4MA0GCSqGSIb3DQEBCwUAA4IBAQBtjhu2/+cQ
93E1MTklfNwr7Wgx+vgzV15Np3o0X7TCPkBfT8fBGDthn7RhlO0motFYyk67NeYs
BUZ79Uw4vnD0fIVDwd3KLR8N6AOcLYUT6H8yR6un3Zk88RJrcUjifBnhog/hXmtJ
+WW3zO5TaRb/Imbxy2Pd0sUfAHGoJ4Fhl5myWFmLrHubkpVX44pCDkm/5FfKo5ao
yHcA3rrsLYbDay9Jn0usovP1OulnB/7f5210xvwdMLiX8XWIq8Q+dz9LoYO+Il2N
Vh7JEoIo8vL49i8Lu0mUd3Som2Ox4rcdyyJwfUa+NWnXd3MuK0BcpFOwkJ38y33a
Yyum6b1OgNMN
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 339361381914804446897448886718974732259355
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-28 06:02:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-26 06:02:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'millitalli.fi'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 936986864816091342011917188432236381567303861857458501292058667125928355668153623475334083771089789981896612106832862619938073240848803224495380220125816417134645915819518136618488285447931794511340353195851584870922123402509593140227023892614207277485778128192976722830077448550955594644904346758768269036295585701898008893432155755889356442118236490127413614925156819762370108399617811334928748965789857100000743549601248529438624776014059007226987252304773124197785722673937069571984755890822635155442451711910942097579763698829885758592011564129313278565389816212296985715293034372949394860061427762787499565465463232639153690195580227050456429439707153460973573503285121059244125986537278565180204689581581078018728965045765961447722190855103919158907739576399553233248947859491881274229309642881876970475560519991820440036934181872473689133833325171383677457672944464923640363703303613406405881242736751906409860554308041533374984289478946359322058730175396003365134347290660717313956052212139509060542124588334942123493699839295198158920634100028837016697965783337699417902990289772801809040092618829976494786180868295278172719777320197988747603653966861030881634563832712135469346984304592982171231815838221440706583800424969
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							81f74cb5690e4600bfdb9886d9b3a3ada4a57bbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'millitalli.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.millitalli.fi'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016e112ca4720000040300473045022100b84749c3a4ea611032a11e722cadbd36494fe1a646c980372f5e0652a9db417e0220772856cf4b364177330609cac439ce24d88a40a8ec000da7644933730b19527b00760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016e112ca4930000040300473045022100c261c0c0ab7aaae624601e8adc6c86d6f05dc7c852e4b1366f1b50099cc24f41022063056693ae44c20428d469e5bc42b9e9a0d58a63cf19e07405b0910062182ff8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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