millitalli.fi

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:e1:ae:db:80:04:4c:d9:ce:71:16:aa:9f:37:8b:de:aa:ba was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=millitalli.fi

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e1:ae:db:80:04:4c:d9:ce:71:16:aa:9f:37:8b:de:aa:ba
Serial Number (int): 338132815733259614798280656846658935368378
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ef:5d:dc:25:a1:f0:49:14:2c:b4:61:c8:0f:10:a2:db:d3:e0:2b:7b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): fc:88:20:bb:f0:46:d1:b5:45:07:81:17:a8:39:bd:72:da:4f:ae:5d
Fingerprint (sha256): a5:02:eb:1a:9b:3f:eb:4c:c0:1d:03:37:e6:79:18:60:45:a1:e8:56:d2:64:31:c9:12:0f:cd:f2:d2:4c:b6:2d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate millitalli.fi

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for millitalli.fi

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

millitalli.fi
www.millitalli.fi

Other certificates including the domain name millitalli.fi

(limited to 100 certificates)

Certificate

The complete raw certificate details for millitalli.fi in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 338132815733259614798280656846658935368378
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-01 21:38:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-12-30 21:38:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'millitalli.fi'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 881411988931861644730024441497147243871529107313713316782718636462202454821095156259732659640420074144235170643766578994430565218501443211290300006481390837079401858632508812351979507687235969273113524482531883995025660497781154008583448169854008378535703023296628376960547734106484642748338779184857619390300205148188154660362717842068778275278809410014919513529015703768957702506031046740913671074861011530149871503362929979570704992888194502415466879251850743569560406651220782984425299468992424999449063628408884148343305057619694906911112384585452357011460594074624668519695010331958968634107890075198839082908214658235590700472857452601837498398993821303638663906072085880652067615574775913516060480239290144003602341217598982887359017240020753981833650722856663932758545837663411919210705440178501844422677295608021087302458522763931693905206642795856735585857202058091419171047501701865675622794199480979275615562943423072977735276975148772339252715995196411348759476419401523388728892867134137660111005045167390935190552431395761332109588089795564453993887312137446080675597090702668958784466649751753306458829874266132100428704384614420815415917103229753454500949909199824262206690039180546115819076189426233475317513534477
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ef5ddc25a1f049142cb461c80f10a2dbd3e02b7b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'millitalli.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.millitalli.fi'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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