tcs.etappi.com

Issued by RapidSSL RSA CA 2018

About this certificate

This digital certificate with serial number 02:47:6e:4b:d2:44:de:63:4e:28:6c:79:ae:62:de:61 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tcs.etappi.com

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:47:6e:4b:d2:44:de:63:4e:28:6c:79:ae:62:de:61
Serial Number (int): 3029346140769503976440223251839508065
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: d9:cd:b1:9d:61:27:fb:9c:3b:51:2c:12:b3:bd:f8:64:62:40:5e:e5
AuthorityKeyId: 53:ca:17:59:fc:6b:c0:03:21:2f:1a:ae:e4:aa:a8:1c:82:56:da:75

Fingerprint (sha1): 41:0a:63:fe:79:ac:c1:0d:a0:ef:6f:2f:b1:0e:e6:6a:6a:61:cf:27
Fingerprint (sha256): cd:ca:77:ba:e5:a6:be:c1:8d:3b:f4:05:66:13:62:c9:e4:17:15:43:f6:7b:be:b1:22:6a:a1:28:e0:ae:c6:70

Issuing Certificate URL: http://cacerts.rapidssl.com/RapidSSLRSACA2018.crt

Revocation information

OCSP Server: http://status.rapidssl.com
CRL Distribution Point: http://cdp.rapidssl.com/RapidSSLRSACA2018.crl

Check the revocation status for certificate tcs.etappi.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tcs.etappi.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

tcs.etappi.com

Other certificates including the domain name etappi.com

(limited to 100 certificates)
wm.etappi.com
startti.etappi.com
www.etappi.com
6932f524-b04a-4aff-9453-6a7e2b4e16d4.lak01.wphosting.fi
julkaisut.etappi.com
fw.etappi.com
used-pursue-hole.lak01.wphost.fi
www.etappi.com
www.etappi.com
uutiskirje.etappi.com
used-pursue-hole.lak01.wphost.fi
remote.etappi.com
mail.etappi.com
uutiskirje.etappi.com
used-pursue-hole.lak01.wphost.fi
jhlrap.etappi.com
www.etappi.com
www.etappi.com
uutiskirje.etappi.com
uutiskirje.etappi.com
www.etappi.com
tcs.etappi.com
remote.etappi.com
used-pursue-hole.lak01.wphost.fi
julkaisut.etappi.com
used-pursue-hole.lak01.wphost.fi
julkaisut.etappi.com
uutiskirje.etappi.com
remote.etappi.com
mail.etappi.com
tcs.etappi.com
www.etappi.com
julkaisut.etappi.com
www.etappi.com
uutiskirje.etappi.com
uutiskirje.etappi.com
remote.etappi.com
uutiskirje.etappi.com
julkaisut.etappi.com
uutiskirje.etappi.com
used-pursue-hole.lak01.wphost.fi
used-pursue-hole.lak01.wphost.fi
wm.etappi.com
remote.etappi.com
tcs.etappi.com
uutiskirje.etappi.com
www.etappi.com
julkaisut.etappi.com
jhlrap.etappi.com
wm.etappi.com
jhlrap.etappi.com
uutiskirje.etappi.com

Certificate

The complete raw certificate details for tcs.etappi.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvKAh7+T97wfWaIDyEc2
RjGHgnprb+DNOZIeJuQtWAkpCtn+xf7uWm1otKOH+U6Kl2FO/pnW8gZlBVH52b/D
n04qZWjjIWvge0EPucDdqvwx6UIQFRAy+gEp0EFJ+CH/uaYhpRyt+bua49n/pF2f
W2NtTzCz3ghZg5bw/jPfpt88BnCsaPiFeNllLr5qDiSH1iKzyzkfF7o5iRi0jUc5
Char2GRUeN1epJkZ5rD8nwuWGmqCRtUV0aYYNlbX90eIUvyV0mxN3/0hh2OXMbPu
m04//saUWOk1HHp7YjyRoh4MY5vDcU8Dtg6+DCKpN+SdPSaiokAeysDGAaJzNqMg
KQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3029346140769503976440223251839508065
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-15 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tcs.etappi.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23094953732098730666703965339166688186316236579572665906762187055759501923199859480101681687627015574270579892006894129922832296512624354448947420156769294947434305152454223373530391670485540152532328165051711575548394157037557577884837353898397505296898432968424656665078010729349162367098422301608977384040121008109100398607008508917570269977347351721711067669126458874239459482049276855913759082762868214723328894367187826122608035859489863614619629467308988962056353226048439071804224404530164248792138429815482884866814492210496223894323427242581103755209745419205897413501592955262326183268297057218481713520681
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 53ca1759fc6bc003212f1aaee4aaa81c8256da75
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d9cdb19d6127fb9c3b512c12b3bdf86462405ee5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tcs.etappi.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.rapidssl.com/RapidSSLRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.rapidssl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.rapidssl.com/RapidSSLRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							0168007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016541b0bd9400000403004730450220065a6972ce9f04cd9197af33edbea7b42c0a1b83f9d3b935e5397dfaf132f5220221008050042a5a983ca842225ee29ef632b620535848599f9fa55c207abaee33e70e0076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016541b0be5200000403004730450221008bd6ddfc61c585284b995d0e6797f656f034f7fc58c7bbcdc0d7bcb59cdbc48c02203acfcd28dc9cb483087c52535b08322292ebe894954720d38481fc07ed4b9a46007600bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed1850000016541b0bdb1000004030047304502201d5c80581611e18bc14ab1add68698be7132fdf7ac9c39bdc53e118ef287f4bd022100e035a05ba62ffe41500efdf95432a5fd5d90b0cd0af30b04b23645859a18d4f7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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