*.menestysvoima.fi

Issued by R3

About this certificate

This digital certificate with serial number 04:af:e5:ad:43:ec:8e:64:4c:50:97:ad:0f:69:27:8e:02:9e was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.menestysvoima.fi

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:af:e5:ad:43:ec:8e:64:4c:50:97:ad:0f:69:27:8e:02:9e
Serial Number (int): 408303850794259847875052278075382645523102
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: f9:8b:95:d4:fe:e4:1a:bd:17:7d:c3:57:19:3f:05:b4:70:98:c3:ac
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): e8:8b:6e:be:df:67:5c:e9:f3:a1:37:96:72:5b:73:17:45:c6:c7:1d
Fingerprint (sha256): b1:e2:69:47:0b:6c:a2:8d:a0:6d:26:54:24:3b:b2:cf:fb:3b:ab:f0:48:ba:a5:95:36:e5:ab:4f:c8:cf:0e:1d

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate *.menestysvoima.fi

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.menestysvoima.fi

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.menestysvoima.fi
menestysvoima.fi

Other certificates including the domain name menestysvoima.fi

(limited to 100 certificates)
menestysvoima.fi
menestysvoima.fi
menestysvoima.fi
menestysvoima.fi
menestysvoima.fi
menestysvoima.fi
menestysvoima.fi
menestysvoima.fi
menestysvoima.fi
menestysvoima.fi
menestysvoima.fi
menestysvoima.fi
*.menestysvoima.fi
menestysvoima.fi
menestysvoima.fi
menestysvoima.fi
menestysvoima.fi
menestysvoima.fi
menestysvoima.fi
menestysvoima.fi
*.menestysvoima.fi
menestysvoima.fi
menestysvoima.fi

Certificate

The complete raw certificate details for *.menestysvoima.fi in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfyS/Uf4Ld3ZoQSm21aL
uwsnVzcShnGjSaGH2khfru2ZOWC93HGzwn9Da0VTRMxOrJjpwGHPRtRq07yQCc/Q
rrm7tbHd9gP4UejtQ+1X4FVMmfB8WFSSTvNz/LyppiLz7Don5v7g2Te+sjz8V3FD
G+jbqoISEfHQl5D2MVBHiyO9iD/jHYcxDBOiWeO5eqkBAKwb9QKATkGpCSY6peXu
mMEqoH/GdERbmPg5McJEz4BQLpP4Ohc/Tu+gL9tRx3qlRfEbRz84Zx8ywJ8hjmUr
Bg7aJzakIPbXnrsvqY3I30VaaqKlWBNR1i8P4m7Nb/HtuIyZuzyT1UsA3+Phwa94
bwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 408303850794259847875052278075382645523102
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-17 07:01:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-16 07:01:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.menestysvoima.fi'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21458822508076101150935871652077227167341183888829400119774867359412727040971755710416155728598603884268743058415415624901745539927560504494623739578665209918296521606013365246726841007508146643797934027509782655160050948933115780179215348956654294611589722843983657367829103326198183175851185187106218369387068668138653405624765522076770331175867998338533506560229867437115328553076481700005981339509065458639237340655652687611879809622080151656773719403440556056021602238226334960197835621092801235326535685212369746069159561236517638689653742947869763509167035578773748145119997829325428441325648257893935285762159
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f98b95d4fee41abd177dc357193f05b47098c3ac
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.menestysvoima.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'menestysvoima.fi'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c76cb420d000004030047304502210095fcc7ad4102e3b5bd34aa67650be891f4ce862fe1b77b248edaa544052439300220448fc81091692bc715aedfd55c2183868379957d952a61224d74d97cc25077fa00770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018c76cb425900000403004830460221009ecbd20f08a08c8e9fdc40fd667ceda8c85b1bc032abab4fefb01e6fb6ca36e7022100e286c37698e85cd304631ad240ea1874f550884e590e5f0a0751cafcb2fb44ee
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0057e0443a04493d8d944c6fd0b4882114bd0913960a861d4cc6a80fca9d82fb350140a92cce057debda53dcb1af48a57d87b2568d8f181362457708540465423eb8db0b8ba34458d0e020cdc007b56994f178f69b63b54478fe8d84c81fa29994b1afce9aecbb6cf5595dfea346fd32f405c52725e1e2c5271d90c40fa0fbe0435f88bbd9f84efb2672f131490ff032c547e9c9849eb97feeec8a14dffb9d2d4aff7e9494dc589fd20cb7502adc69e87139b0c0b17264eb7d72e98b43cc7006b9f4d070560026adba8edf4ce19ab608b1e63c72966a7bc3b023a7f1854c5397c968f721ac8cd9e81cfacaf1a8679186417e3b4da7c42767054ac7984381d0d91a