securemail.dfhk.fi

Issued by Sectigo RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number 89:e8:79:14:a4:ae:b3:0d:ba:34:3a:1c:4c:50:2e:c8 was issued on by Sectigo Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=securemail.dfhk.fi,OU=Domain Control Validated+OU=EssentialSSL

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 89:e8:79:14:a4:ae:b3:0d:ba:34:3a:1c:4c:50:2e:c8
Serial Number (int): 183311304100805586995187748350108643016
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: d2:53:c8:17:97:77:97:ee:04:a0:1b:2a:1b:ad:7a:28:70:7a:82:53
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1

Fingerprint (sha1): b7:fd:c7:38:1c:60:a4:1c:77:02:c4:09:c2:31:26:6c:5d:6b:20:fc
Fingerprint (sha256): c4:8f:61:8e:93:c9:12:31:c8:3a:1d:36:8d:b1:a5:7b:3b:3d:33:3f:d1:eb:14:ac:6b:b9:08:50:b6:45:08:22

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate securemail.dfhk.fi

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for securemail.dfhk.fi

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

securemail.dfhk.fi
www.securemail.dfhk.fi

Other certificates including the domain name dfhk.fi

(limited to 100 certificates)
www.dfhk.fi
dfhk.fi
dfhk.fi
dfhk.fi
dfhk.fi
dfhk.fi
dfhk.fi
dfhk.fi
dfhk.fi
dfhk.fi
dfhk.fi
dfhk.fi
dfhk.fi
securemail.dfhk.fi
dfhk.fi
dfhk.fi
dfhk.fi
dfhk.fi
dfhk.fi
www.finnland.ahk.de
dfhk.fi
dfhk.fi
www.usa.newyork.ahk.de
securemail.dfhk.fi
dfhk.fi
dfhk.fi
dfhk.fi
dfhk.fi
dfhk.fi
dfhk.fi
securemail.dfhk.fi
dfhk.fi
dfhk.fi
dfhk.fi
www.dfhk.fi
dfhk.fi
dfhk.fi
dfhk.fi

Certificate

The complete raw certificate details for securemail.dfhk.fi in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 183311304100805586995187748350108643016
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-10 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'EssentialSSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'securemail.dfhk.fi'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 753272017707064699762009586112257397316803424406909733485690374280743428972360438687117123236971805817715732411657784501080919458438393864064429938183839753978030244414919381919154064353988881261417009551740549179038435918836209049009214704486851908658652530391176313040404087974429891302989032331866730398998008619438204865955906988943014203932108656732907832010948408581452445511939914757401676983056813885848176220053038999167758476167564527656998795001955359362100264949239232905926055970390919651713603644570914916802396174583923126350193092242306767462275886869060562395109635045884656175163410746677988287538560456783978257194682517917122328890927150319718401477371412149373739629200605261081299655109043351120509144636966050654761624821868345173689919616292876304462931220456582764656248692258546666816528414226059939306739519580799008745108088529180027001654171313315238149963778738325611331083994839512794061599350099288052582967577696169393978734961628947700406237151808349103130124380680864836551379766791841633024685646877730644317859050274097933836819712618969822968327651351816058428850297237541450995948308531954538110501215527321565483330532703322802093596682791660591680639511384044332411298805505253740831054477571
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d253c817977797ee04a01b2a1bad7a28707a8253
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securemail.dfhk.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.securemail.dfhk.fi'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016e595d30bc0000040300473045022033c94c84268f651acfef90c84e93d0913ace9cfd17afe55bd58a9bca24046dee022100c12d3fa639426e8b9d5f60f0338e157afbfaa444d3b078b6edd30cb286c4eec50077005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016e595d30ad0000040300483046022100ce1e492cb0621a970e9cf4022770bada8c05d78e7b27629d1b7594117df9f4e40221009ca6c3d7272a933f6196d01ba7e2dbe933449bb835aa290b9ad9584b639b68da
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00359e399f818f0a0944854c19c809133b2ee8fe0c602004ef9f7433329d2a3bae409d2bc0612d12738c6a046fa63881e8920f709255baef865d78c3d535a3c1afd8e7a20360364e815f9558d89e763a30dfe413a2db566c7b174ee613fb90d4d7fdd5cb5604602924227d225d776828e4c03cb2b28f5507af57e587bb6b648386f87419ecaaaa3dc0c4f19060052d5ff2f9348897fa22ba723495992eb02e5dcf24cfa851c9812cf2021017e871fa01c9bbc4d76edb27de6b56a682833fc2b3e42d6e1a3180f549cca08a1d8eeaf21fc1a04e84defb8e4a60400b988ff66d00e6121fc0c10c15913b8bbce7768f9d2181e2f1dc99e2013277af518b5bdc7183fe