fs2.gbc.fi

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ec:0d:dc:ea:39:e1:2c:d3:41:27:f7:cd:5e:5a:b8:6f:a5 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=fs2.gbc.fi

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ec:0d:dc:ea:39:e1:2c:d3:41:27:f7:cd:5e:5a:b8:6f:a5
Serial Number (int): 341661923408545839721025190439685046431653
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 12:e5:8b:70:1d:4c:dc:6b:19:97:b8:d5:08:c9:09:b2:d0:cc:f1:64
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ed:25:06:58:95:ad:b8:36:ac:21:56:d6:9d:d7:25:e5:28:12:10:16
Fingerprint (sha256): b5:0a:d6:f8:05:d2:d2:1c:77:0e:fa:8a:e2:57:75:17:eb:82:06:74:fb:cb:bd:9d:fd:de:b8:92:b8:95:6a:44

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate fs2.gbc.fi

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fs2.gbc.fi

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fs2.gbc.fi

Other certificates including the domain name gbc.fi

(limited to 100 certificates)
fs2.gbc.fi
gbc.fi
*.gbc.fi
git.gbc.fi
portal.gbc.fi
proxy.gbc.fi
gbc.fi
gbc.fi
gbc.fi
proxy.gbc.fi
gbc.fi
fs1.gbc.fi
git.gbc.fi
gbc.fi
puhelut.fi
gbc.fi
puhelut.fi
proxy.gbc.fi
puhelut.fi
fs2.gbc.fi
puhelut.fi
gbc.fi
extra.gbc.fi
gbc.fi
puhelut.fi
fax.gbc.fi
fs2.gbc.fi
portal.gbc.fi
fs1.gbc.fi
proxy.gbc.fi
gbc.fi
git.gbc.fi
extra.gbc.fi
extra.gbc.fi
fax.gbc.fi
*.gbc.fi
git.gbc.fi
git.gbc.fi
proxy.gbc.fi
portal.gbc.fi
proxy.gbc.fi
puhelut.fi
puhelut.fi
gbc.fi
fs2.gbc.fi
puhelut.fi
gbc.fi
puhelut.fi
proxy.gbc.fi
git.gbc.fi
puhelut.fi
puhelut.fi
gbc.fi
git.gbc.fi
*.gbc.fi
extra.gbc.fi
puhelut.fi
mail.gbc.fi
msg.gbc.fi
gbc.fi
gbc.fi

Certificate

The complete raw certificate details for fs2.gbc.fi in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 341661923408545839721025190439685046431653
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-09 09:14:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-07 09:14:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fs2.gbc.fi'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 864137834519490521625936617888689713584548943679181264733872788022764197751448172551304325666037806087018576449352333338679917614725561816318083984320564723322411450245616269421325704632093110063081162919551828855888115168284580948978418665809000860047757920132139043621584826331347111741543746570430563196255588791324803164136383806822488104874506490332947805193638661982313352357427313056432382958383245047099982679216849529250815888141355688653854246331825099378987320727727021965535646063146414506478014007418427709265157879877434667554204802786146599527109420456787137280110248843925976825134981807382404016513346541620138895259915943805607150139037456195287185232602557800156057924807428366899514580028196519589595299629573029253068474885915381791967062714006548153632359936071960128268598521718260632073521792501952514781715839862524273876587352891177625455195816046380214571530051437696138736098318669752998354669263139519003572968510531097985758944390027715786335642132495753922067392611858067537187436762219456452725305804738724220177063768602345827116222701536576299760903656517383582745838985595941862069746880807115470833614822980279189218076452388975599288407015817307944745118508293648353665435492429991021125854617721
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							12e58b701d4cdc6b1997b8d508c909b2d0ccf164
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fs2.gbc.fi'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016c75dfc8e4000004030046304402203bdff289551ebf51a69cc7933c0ff75fe9d5b04ef98e7b44c2c15b83a17b899102204b54c0f8ed086f2e2ecadab4138925166795a0755ad2927a7ebf8d93b7c761a0007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c75dfc8fa0000040300483046022100d9d581dcdaaf567ffe38f52ff64e66c78b33f6f037695658f0a8225b6c247cb9022100c5b3e39ac0f99f7644bd1b523b4dcd52a27094703f9f497a93d3dae5339018a4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0020a2c180805abc3ed38a3e6ab39354bb61d9be13b2a9afed2864564b835adf3c3628c0453b082baeea3e6422df98705d1ae1cb3daccf5422ef1fbab4d07a1a9d47274007f5d5ecf65fee274903acf7fdb0d8c0f3a80fc91238f6d66664f5124bcb0d7db3973c7569bc50840a69fe3758327d549214e12aa86bfb78345a41de3c52e81c17cc3f7b44bfc7e5b4b5bdacc3cf1e6eaae8eb2a7b2d1ae36fc05ee843f87cf14c8dbd783a1aa65f343ebfd0756c6925fbd16561ff635b6fc3fdf96edd861bb0ccc588c4a2d3642f8233b282c4adfc3a476a3c29e3a9eb1593103e48d64bed38a15c823051a6e4f3e18a817b3047c440ea7a11f9b12adfc2d8a2f1405f