ar.epv.fi

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:60:b8:5c:ac:27:72:3d:e1:9f:4c:8e:3a:13:a9:d1:a9:d8 was issued on by Let's Encrypt.

With 24 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ar.epv.fi

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:60:b8:5c:ac:27:72:3d:e1:9f:4c:8e:3a:13:a9:d1:a9:d8
Serial Number (int): 294249024153925948424321045404931018828248
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 0b:3e:b5:ae:c2:ea:7a:84:1a:49:59:de:19:e4:12:ef:28:35:ff:b6
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 79:ea:ec:70:ce:35:a2:5e:ea:2c:c3:ea:33:e3:ed:a1:c4:98:8d:e9
Fingerprint (sha256): c4:c6:9e:1c:4c:92:e1:61:89:1f:7a:c8:0a:66:c9:38:89:b0:4a:11:73:15:90:31:3b:dd:5f:e9:80:a2:8c:87

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate ar.epv.fi

24

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ar.epv.fi

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ar.epv.fi
ar2016.epv.fi
ar2017.epv.fi
epa.fi
epv.fi
epvbioturve.fi
epvtuulivoima.fi
mu.epv.fi
rajakiiri.fi
sev.fi
suomenmerituuli.fi
tovo.fi
voimapihaoy.fi
vv.fi
www.epa.fi
www.epv.fi
www.epvbioturve.fi
www.epvtuulivoima.fi
www.rajakiiri.fi
www.sev.fi
www.suomenmerituuli.fi
www.tovo.fi
www.voimapihaoy.fi
www.vv.fi

Other certificates including the domain name epv.fi

(limited to 100 certificates)
www.epv.fi
portal.epv.fi
ar.epv.fi
webmail.epv.fi
www.epv.fi
auth.epv.fi
auth.epv.fi
extra.epv.fi
www.epv.fi
www.epv.fi
tornionvoima.fi
generis1.epv.fi
webmail.epv.fi
www.epv.fi
ar.epv.fi
secure.epv.fi
www.epv.fi
webmail.epv.fi
sts.epv.fi
sts.epv.fi
webmail.epv.fi
auth.epv.fi
www.epv.fi
secure.epv.fi
award-life-power.epv04.wphost.fi
visitor.epv.fi
auth.epv.fi
ar.epv.fi
auth.epv.fi
portal.epv.fi
coresight.epv.fi
coresight.epv.fi
generis1.epv.fi
www.epv.fi
webmail.epv.fi
tovo.fi
ar.epv.fi
award-life-power.epv04.wphost.fi
portal.epv.fi
www.epv.fi
www.epv.fi
citrix.epv.fi
auth.epv.fi
portal.epv.fi
www.epv.fi
visitor.epv.fi
www.rajakiiri.fi
www.epv.fi
secure.epv.fi
verkkokoulutus.epv.fi
www.sevo.fi
award-life-power.epv04.wphost.fi
www.rajakiiri.fi
www.epv.fi
www.epv.fi
citrix.epv.fi
secure.epv.fi
citrix.epv.fi
visitor.epv.fi
webmail.epv.fi
auth.epv.fi
www.epv.fi
webmail.epv.fi
portal.epv.fi
www.epv.fi
ar.epv.fi
sts.epv.fi
www.epv.fi
www.epv.fi
www.xn--seinjoenvoima-efb.fi
ar.epv.fi
extranet.epv.fi
generis1.epv.fi
ar.epv.fi
coresight.epv.fi
webmail.epv.fi
www.epv.fi
ar.epv.fi
www.epv.fi

Certificate

The complete raw certificate details for ar.epv.fi in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 294249024153925948424321045404931018828248
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-07-26 13:52:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-24 13:52:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ar.epv.fi'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 826412390341252010222774946821049614121061232919715383921926361903128454569413047494587283113050766067163032304263600767520883179110181975532170262930286383354719761617661161401653825804688868717360030018566966311934012043260968160722571314177892763838835314417024906087782725777603350853398820937237866993764146298915604368907568705331116525691211760870593941671053539311163046784040039344301258717265950682170176118093004623086802661820442190053614666525140816007941445752830023010308251520200768454964393148151140533207565841161769792317581882994499538325912608922690883968810763781155430892583995362007307323418207194331993976003800706302968223414445196797491830299780762546650423628725361797263429200305296942388760648789699763213558992694739017711002611468334569671778368564657419152098561379166917253187357596258984688165535780475624418398454022621526378834857458925540560912769918139706459644338501398169077208971099648775627550505304169567006812132791423453508260135221655551141792781474233735277832146407273644869296476443144337186007707401214777328011010629298796742078311615924360818174698448629649421742652715368970449194048039522221037780186688442829473252816618710827774976123912446731639394013293994703204440610226841
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0b3eb5aec2ea7a841a4959de19e412ef2835ffb6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (344 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ar.epv.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ar2016.epv.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ar2017.epv.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epa.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epv.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epvbioturve.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epvtuulivoima.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mu.epv.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rajakiiri.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sev.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suomenmerituuli.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tovo.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'voimapihaoy.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vv.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.epa.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.epv.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.epvbioturve.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.epvtuulivoima.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rajakiiri.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sev.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.suomenmerituuli.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tovo.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.voimapihaoy.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vv.fi'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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