andersinnovations.fi

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:6d:d0:ee:0f:4b:5c:d0:b2:9b:e4:4e:9d:74:06:2c:4c:53 was issued on by Let's Encrypt.

With 62 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=andersinnovations.fi

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:6d:d0:ee:0f:4b:5c:d0:b2:9b:e4:4e:9d:74:06:2c:4c:53
Serial Number (int): 298705351289645607412194968654073276681299
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b3:ee:7e:51:79:68:b0:95:0b:1b:89:ea:d0:2f:9f:38:d6:e9:e8:c0
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): e3:c7:e2:55:34:92:a7:06:1e:c0:51:c1:8c:79:96:37:9a:ce:e8:a0
Fingerprint (sha256): b5:95:b0:44:1e:04:2b:19:04:60:be:d5:62:10:63:cf:c9:d4:a0:e1:c6:9e:7b:98:6a:44:7a:a6:79:30:37:9e

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate andersinnovations.fi

62

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for andersinnovations.fi

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

anders.fi
andersfinland.fi
andersholdings.fi
andersinno.com
andersinno.fi
andersinno.net
andersinnovations.com
andersinnovations.fi
andersvisual.fi
aurinkolaiva.turkuamk.fi
blogi.turkuamk.fi
chancellorofjustice.fi
digidim.com
helvar.cn
helvar.co.uk
helvar.com
helvar.de
helvar.eu
helvar.fi
helvar.fr
helvar.ie
helvar.it
helvar.net
helvar.org
helvar.se
justitiekanslern.fi
oikeuskansleri.fi
okv.fi
punavuorenpeikko.fi
respecta.fi
tuas.fi
turkuamk.fi
www.anders.fi
www.andersfinland.fi
www.andersholdings.fi
www.andersinno.com
www.andersinno.fi
www.andersinno.net
www.andersinnovations.com
www.andersinnovations.fi
www.andersvisual.fi
www.chancellorofjustice.fi
www.digidim.com
www.helvar.cn
www.helvar.co.uk
www.helvar.com
www.helvar.de
www.helvar.eu
www.helvar.fi
www.helvar.fr
www.helvar.ie
www.helvar.it
www.helvar.net
www.helvar.org
www.helvar.se
www.justitiekanslern.fi
www.oikeuskansleri.fi
www.okv.fi
www.punavuorenpeikko.fi
www.respecta.fi
www.tuas.fi
www.turkuamk.fi

Other certificates including the domain name andersinnovations.fi

(limited to 100 certificates)
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
web.anders.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
web.anders.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
web.anders.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
web.anders.fi
web.anders.fi
web.anders.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
web.anders.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
web.anders.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
web.anders.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
web.anders.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi

Certificate

The complete raw certificate details for andersinnovations.fi in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 298705351289645607412194968654073276681299
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-02-08 06:36:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-05-09 06:36:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'andersinnovations.fi'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 886693142545745321048579539989866662563119689893860095782198690554395216467826744980778553722393304078721831991836222988191283848509210550693290409033975174430682773891376145608386417156322229374061198258975850963501628212367857995153969001451025160962664045341021469588927950271511704193126939371218495197523259027295153159986084334079271791058690902990890190403372629974938563713303336386240325958624705055115948016612351746218620481859890341049019671443078355294993636127320867021519490836544766697378814781765958273422125351985362761268902208227298441862777486190428898667343008792741449614069416512549619614849663961967319665900313046546833500976350317793624321165268591667287589353055146659791381626524141496194836647204343771900809705093874233699062321069380798654635493773456534005699689099527276292132290624914386675840758751243428921082148318692103058860224502908055302198578305110185719379218838728433240332443209052252898086781978286625827282469545914971873468115042341394175368518570764378737959380404247641103356896360900095624866788236593884660340536061456930806980337118457778427544383249318615880362171120932893336372944407712935338537829375146334258194712541641733395114553942732527564204427891057402039497130460417
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b3ee7e517968b0950b1b89ead02f9f38d6e9e8c0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1041 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anders.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andersfinland.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andersholdings.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andersinno.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andersinno.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andersinno.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andersinnovations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andersinnovations.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andersvisual.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aurinkolaiva.turkuamk.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blogi.turkuamk.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chancellorofjustice.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digidim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helvar.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helvar.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helvar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helvar.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helvar.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helvar.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helvar.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helvar.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helvar.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helvar.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helvar.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helvar.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'justitiekanslern.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oikeuskansleri.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'okv.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'punavuorenpeikko.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'respecta.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tuas.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'turkuamk.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.anders.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.andersfinland.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.andersholdings.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.andersinno.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.andersinno.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.andersinno.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.andersinnovations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.andersinnovations.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.andersvisual.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chancellorofjustice.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.digidim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.helvar.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.helvar.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.helvar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.helvar.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.helvar.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.helvar.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.helvar.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.helvar.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.helvar.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.helvar.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.helvar.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.helvar.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.justitiekanslern.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oikeuskansleri.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.okv.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.punavuorenpeikko.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.respecta.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tuas.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.turkuamk.fi'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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