blogi.keuda.fi

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:16:18:d7:d4:ff:69:ad:30:ef:34:96:7e:39:fb:9f:97:97 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=blogi.keuda.fi

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:16:18:d7:d4:ff:69:ad:30:ef:34:96:7e:39:fb:9f:97:97
Serial Number (int): 268856092003371531821531488189772235511703
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d9:60:c2:af:a7:49:c5:97:20:f2:3e:66:37:bc:62:da:aa:f7:4e:3c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 72:5d:7f:4e:d4:1a:44:e9:d9:bd:3e:7e:66:0b:4d:93:76:31:5e:03
Fingerprint (sha256): ae:67:04:a6:24:1f:a8:3a:df:4d:c2:73:58:1a:bb:97:31:ba:f7:2a:ed:42:06:40:ee:a9:06:52:b7:a1:61:38

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate blogi.keuda.fi

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for blogi.keuda.fi

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

blogi.keuda.fi

Other certificates including the domain name keuda.fi

(limited to 100 certificates)
blogi.keuda.fi
opiskelija.keuda.fi
yrityksille.keuda.fi
blogi.keuda.fi
ky-fed.keuda.fi
opiskelija.keuda.fi
webmail.keuda.fi
keuda-sr.keuda.fi
keuda.fi
pinja.keuda.fi
winha.keuda.fi
dynasty.keuda.fi
ky-fed.keuda.fi
opiskelija.keuda.fi
opiskelija.keuda.fi
webmail.keuda.fi
yrityksille.keuda.fi
yrityksille.keuda.fi
keuda.fi
dynasty.keuda.fi
opiskelija.keuda.fi
oppisopimus.keuda.fi
opiskelijaintra.keuda.fi
opiskelijaintra.keuda.fi
wiki.keuda.fi
keuda-adhk.keuda.fi
keuda.fi
opiskelija.keuda.fi
ims.keuda.fi
opiskelijakeuda.focusflow.net
wiki.keuda.fi
yrityksillekeuda.focusflow.net
blogi.keuda.fi
opiskelijaintra.keuda.fi
yrityksille.keuda.fi
yrityksille.keuda.fi
keuda.fi
web.keuda.fi
opiskelija.keuda.fi
yrityksillekeuda.focusflow.net
yrityksille.keuda.fi
winha.keuda.fi
ims.keuda.fi
oppisopimus.keuda.fi
ims.keuda.fi
mfiles.keuda.fi
ky-fed.keuda.fi
www.keuda.fi
opiskelija.keuda.fi
ky-fed.keuda.fi
dynastyweb.keuda.fi
winha.keuda.fi
keuda.fi
yrityksille.keuda.fi
keuda.fi
opiskelija.keuda.fi
opiskelija.keuda.fi
blogi.keuda.fi
blogi.keuda.fi
keuda-dw.keuda.fi
verkkokauppa.keuda.fi
oppisopimus.keuda.fi
verkkokauppa.keuda.fi
wiki.keuda.fi
blogi.keuda.fi
web.keuda.fi
blogi.keuda.fi
dynasty.keuda.fi
yrityksille.keuda.fi
yrityksille.keuda.fi
blogi.keuda.fi
sts.keuda.fi
oppisopimus.keuda.fi
oppisopimus.keuda.fi
yrityksille.keuda.fi
opiskelija.keuda.fi
opiskelijaintra.keuda.fi
yrityksille.keuda.fi
dynastyweb.keuda.fi
keuda.fi
yrityksille.keuda.fi
mfiles.keuda.fi
www.keuda.fi
opiskelija.keuda.fi
opiskelija.keuda.fi
opiskelijakeuda.focusflow.net
winha.keuda.fi
ky-fed.keuda.fi
ims.keuda.fi
ky-fed.keuda.fi
mfiles.keuda.fi
ky-fed.keuda.fi
web.keuda.fi
oppisopimus.keuda.fi
web.keuda.fi
web.keuda.fi
verkkokauppa.keuda.fi
intra.keuda.fi
yrityksille.keuda.fi

Certificate

The complete raw certificate details for blogi.keuda.fi in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAxKhmsjuyZC/9eT4ROw/8
6ZpOGEyWG090Y5Q4p6qiRJPrjmbD79MPFFT+d1kZIuHnv5nd94e+JR9iqC22HUqV
Y136lN/20vXBlsDUe8kRh8aUDvHNN9INxQrPjdgB6UIxFvXM8/ciaPSu5lb59v3R
dFya9bLqtlvH80MVUtOCOu88Exkp7HhD4DUyGdMIDnWsH7Hps537wf2nlC1GZYhc
EhMJvbRG/4GeXgF7dOEUQ0mNbnmGI4Ez2ygPCeEAZpoH7Y1dcU4Q9iC0O5kgC2aw
HQ36ocnpQhqfHI21z7PlcyXHtDgV8RSZUGFF+SuyjSWw21PWkSwCcZc1Dc6kdra2
xb9B/HwRPEltDSnRle1q198JMfXrVaJa1wgjFOQSNtZQNEQVEwj11mMtSLNdAHQt
2WhOGKXLod1n1SDqL4gCceLzIQI9eWvOz7jIH+uBZqgRypg/mVOq09HlI/GvoHyS
ytC2CmWo1rJfhE4gc7ATkrWAklDlK/G+f5by41t9RYon7eWExoHXPMH8dRXxT2wU
Qd9dWFFI7JHBwOPhEk9IU5TpUSDRkc9C+QZIqDUvPgaSJuuP4uZAJH9AUbU4Fz8+
LNfFhAxbOAddhfNkXLHYRV70OJfmpCNoms6jGhRvINgmnfMsEbPvWg7Hk80LV1/v
nhXAj+cxYkHCzM+UvHLFSVMCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 268856092003371531821531488189772235511703
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-29 09:01:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-27 09:01:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'blogi.keuda.fi'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 802293896635472989340772468624718056232710908698158223280230834300808183012728248186923407456012124807172136533143155525350314456537138823643073690672801590512407628091987333555354855194751059237068168627637109913569189253348777469055618945317718075075424054141925940909087604751365554192149476052358041296500656689656814599914869048752246017897283162600366121489946970738740955588885782144305092543444640851780297833350537229327215015691974038364270178100521295335967337759681431313676105158426223028788800239588283067109573522850575732329196297128590396914032375846320113163641723899020763181888968874480824554856383583358605479745959724498621896229108643947918812326004214835736819506447953869185844124364195075027261817067763942176892888674363318125883834165442496741971668583151409256131868124509719877445935327515124621289921241864203102760048081667598240945860323514053377200639130647071935378755174857911669906299748361992955270310624573732044254667739721176460833948949318353898548476418162063698149938035747637789174494969152109372605752171624703277528594266920227253125734258026921140161406267124712330261010282989925566665554360930478456983086827299167679478245009317152286820008819478978736266205119168631178210985724243
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d960c2afa749c59720f23e6637bc62daaaf74e3c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blogi.keuda.fi'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016ba2aea3230000040300473045022100dec2618c51119271642e7a93016749a9bd21d61a453f5cdddd14a0b8c36dd3ee0220558cf483b54eca050e859130439713e1c223502c0e46eba41ab5543f696c49e900760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016ba2aea48000000403004730450221008487f1c13a6eb59c42896da07770c4c1a2da334d32ba6d668530844a9b707971022054ceaa78f5f68c550c575a95ada007f805541e900253f31a6785816a524d1403
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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