andersinnovations.fi

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:31:31:6f:a7:1c:52:d7:14:d7:85:dc:b4:5e:51:65:36:30 was issued on by Let's Encrypt.

With 64 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=andersinnovations.fi

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:31:31:6f:a7:1c:52:d7:14:d7:85:dc:b4:5e:51:65:36:30
Serial Number (int): 278076405680557913041724062811578662467120
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 72:16:04:9b:d5:5f:ca:67:f0:d1:dc:03:17:fb:10:2c:c4:18:91:a4
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c3:af:28:4b:a1:d5:01:42:d2:7a:4f:25:6b:59:4e:66:f0:25:45:1d
Fingerprint (sha256): ba:a8:c0:4d:73:58:4d:e9:46:ad:3c:d2:82:98:fe:2f:19:1f:68:c2:29:53:8d:fc:c2:fd:30:03:55:e3:b6:8d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate andersinnovations.fi

64

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for andersinnovations.fi

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

anders.fi
andersfinland.fi
andersholdings.fi
andersinno.com
andersinno.fi
andersinno.net
andersinnovations.com
andersinnovations.fi
andersvisual.fi
aurinkolaiva.turkuamk.fi
blogi.turkuamk.fi
chancellorofjustice.fi
digidim.com
helvar.cn
helvar.co.uk
helvar.com
helvar.de
helvar.eu
helvar.fi
helvar.fr
helvar.ie
helvar.it
helvar.net
helvar.org
helvar.se
itspure.com
justitiekanslern.fi
oikeuskansleri.fi
okv.fi
punavuorenpeikko.fi
respecta.fi
tuas.fi
turkuamk.fi
www.anders.fi
www.andersfinland.fi
www.andersholdings.fi
www.andersinno.com
www.andersinno.fi
www.andersinno.net
www.andersinnovations.com
www.andersinnovations.fi
www.andersvisual.fi
www.chancellorofjustice.fi
www.digidim.com
www.helvar.cn
www.helvar.co.uk
www.helvar.com
www.helvar.de
www.helvar.eu
www.helvar.fi
www.helvar.fr
www.helvar.ie
www.helvar.it
www.helvar.net
www.helvar.org
www.helvar.se
www.itspure.com
www.justitiekanslern.fi
www.oikeuskansleri.fi
www.okv.fi
www.punavuorenpeikko.fi
www.respecta.fi
www.tuas.fi
www.turkuamk.fi

Other certificates including the domain name andersinnovations.fi

(limited to 100 certificates)
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
web.anders.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
web.anders.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
web.anders.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
web.anders.fi
web.anders.fi
web.anders.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
web.anders.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
web.anders.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
web.anders.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
web.anders.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi

Certificate

The complete raw certificate details for andersinnovations.fi in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 278076405680557913041724062811578662467120
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-03-01 12:45:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-05-30 12:45:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'andersinnovations.fi'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 721211337273462205299126443654473399951456262637181749095500586134403461618199689203912608570886183410603024606049847549068962061261928485122067812562075678201699255042434829280850189991594192775955615364382162447426449568150665571441229494040796639904177078164327045766515020833035038602365485756083937280720931317140807330178097505130431124910527445428125583231345367220236194401550052763500141329634508080789984776586231654676172344472950400732689403933672778676025249375182845928305405255727502394321605892752894089090823024218276813651884986073058782455314074147542562056132688621622855955205600871787645962596926318183469319776501479842997902137469115273292209892711865139739798324423796783328744840489750903841233952151444377187813336588353660232801739552292387070793143413578054215675648128190721497794508300158826953790156404783485434796739406328311881058599569135260551995027348381526641947906162283640885115203234830929056682833443137631247386330466828387166369172493912195030811505851999266404087544099025859261921281536634339891450331514000868805875939579299523277370827718277611752781190047459211919676089432832386311564566589214001542190435290026634681451627107932887028914770766141257762458761346006323686471759172831
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7216049bd55fca67f0d1dc0317fb102cc41891a4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1071 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anders.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andersfinland.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andersholdings.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andersinno.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andersinno.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andersinno.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andersinnovations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andersinnovations.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andersvisual.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aurinkolaiva.turkuamk.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blogi.turkuamk.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chancellorofjustice.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digidim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helvar.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helvar.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helvar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helvar.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helvar.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helvar.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helvar.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helvar.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helvar.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helvar.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helvar.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helvar.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itspure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'justitiekanslern.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oikeuskansleri.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'okv.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'punavuorenpeikko.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'respecta.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tuas.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'turkuamk.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.anders.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.andersfinland.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.andersholdings.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.andersinno.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.andersinno.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.andersinno.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.andersinnovations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.andersinnovations.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.andersvisual.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chancellorofjustice.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.digidim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.helvar.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.helvar.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.helvar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.helvar.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.helvar.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.helvar.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.helvar.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.helvar.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.helvar.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.helvar.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.helvar.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.helvar.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.itspure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.justitiekanslern.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oikeuskansleri.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.okv.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.punavuorenpeikko.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.respecta.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tuas.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.turkuamk.fi'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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