arratreeni.fi

Issued by R3

About this certificate

This digital certificate with serial number 04:1e:9a:4b:d2:b7:55:93:be:23:b0:f9:74:b6:68:c4:86:a9 was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=arratreeni.fi

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:1e:9a:4b:d2:b7:55:93:be:23:b0:f9:74:b6:68:c4:86:a9
Serial Number (int): 358862709542115662989695642937422252377769
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: a0:bc:0f:6b:67:2c:39:e4:08:8a:ba:4d:21:5f:fc:99:8a:6f:47:11
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 20:34:33:23:dd:76:e3:2f:fe:a7:7a:6a:ae:f2:b3:1e:a8:2e:a1:cd
Fingerprint (sha256): cc:f0:26:bc:18:96:b1:dd:1c:31:69:f8:15:07:1a:8e:be:dd:b2:b3:77:ef:85:35:09:7c:d8:42:b1:17:9e:3a

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate arratreeni.fi

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for arratreeni.fi

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.arratreeni.com
*.arratreeni.fi
arratreeni.com
arratreeni.fi

Other certificates including the domain name arratreeni.fi

(limited to 100 certificates)

Certificate

The complete raw certificate details for arratreeni.fi in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3elz2oJmEuOByjMFEo6
H8iNIMMI+ebMVlKM63/RI0PHR4N8qzCLiqFRhLF+c15836ukd2hD+4W0MQjDMv1w
nXKBmxrt65qRthMRwyfLA/Coo3X3oVUs18YGehl3Rs3/aUQWo+KxuWAijgIGYmsT
pefaJKzCjlmmpm50kf1bwXFpoqxre4Tr0HtkNWZRYU2kQY8SPKZAsELTISyEoc8S
fWbgdWaRrhgKTBHkgnm+h5U8UN1q1bzn0vpVhgINI6t5ok16ZxwUE2a5I8/Vg1/V
tlzaTyEiUFuKq/CK50MNkhJeiSsVF7a8aJluoqIGSkWVGvbWTMYCJ5FxC/0svw16
fQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 358862709542115662989695642937422252377769
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-29 01:12:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-28 01:12:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'arratreeni.fi'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24675469946325825876431913951082118895215947413326469556145605040368582810918320485663702249087780099097204772920760331978625962381585630692285624613732096221465649601876324769981132978626314893233226879533560005672176683167533232949564674045232499888485745970917845125164073262846308085331361978107433517085308616782840617163726262286855652973897444602506746096737421833451694224531562758178861870465685146883451624524652100158342711066548532551190923422964280401986154000448607691067972767098354731070579111424639295394801121168095125822730694634784693628617066900352695532760525516814541874509479012611181287144061
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a0bc0f6b672c39e4088aba4d215ffc998a6f4711
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.arratreeni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.arratreeni.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arratreeni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arratreeni.fi'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018cb358267c0000040300483046022100fe8c603c5d491cb7b780de89cae19a09685ff80845363ad97f63f38fc8f30b05022100a5fb2d30a0ab8c26b0454d0f3f219cbd7d097898729020fbce7d1c5df0450829007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018cb358268600000403004730450221009cd2da7cad9c36cbb73f20f66af0501388bc340955c5cfe373941ad8a72e7caf02203dbd55cff9a3ba11395e6745a64e51947742f321d649a8f4af4489e95aa50a05
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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