akuankka.fi

Issued by Amazon

About this certificate

This digital certificate with serial number 0c:e9:3c:ef:17:ac:f8:3b:c4:84:31:90:55:2c:db:30 was issued on by Amazon.

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=akuankka.fi

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:e9:3c:ef:17:ac:f8:3b:c4:84:31:90:55:2c:db:30
Serial Number (int): 17161777004891928037966214504083413808
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 3d:a8:d4:7f:5b:ab:fa:80:c3:b2:c3:d5:5c:38:15:f1:9c:8c:fb:cc
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): e9:c0:83:41:da:38:06:20:23:ae:28:52:47:c4:6d:90:0a:7e:84:bf
Fingerprint (sha256): e2:0d:c4:b8:64:be:38:80:47:e7:b7:76:a1:59:79:ae:6e:46:74:b7:68:f2:81:56:e7:57:60:e9:30:1d:ae:96

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate akuankka.fi

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for akuankka.fi

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

akuankka.fi
*.satukirjasto.fi
*.akuankkajuniori.fi
prinsessat.fi
akuankkajuniori.fi
*.prinsessat.fi
prinsessa.fi
*.prinsessa.fi
*.akuankka.fi
satukirjasto.fi

Other certificates including the domain name akuankka.fi

(limited to 100 certificates)
akuankka.fi
*.akuankka.fi
www.lastenomakauppa.fi
lataamo.akuankka.fi
amonas.10kysymysta.fi
api.akuankka.fi
juniori.akuankka.fi
smftest.kauppa.akuankka.fi
kauppa.akuankka.fi
kauppa.akuankka.fi
*.akuankka.fi
www.lastenomakauppa.fi
akuankka.fi
akuankka.fi
kauppa.akuankka.fi
www.lataamo.akuankka.fi
akuankka.fi
*.akuankka.fi
*.juniori.akuankka.fi
www.lastenomakauppa.fi
akuankka.fi
akuankka.fi
kauppa.akuankka.fi
amonas.10kysymysta.fi
smftest.kauppa.akuankka.fi
amonas.10kysymysta.fi
akuankka.fi
api.juniori.akuankka.fi
beta.lastenomakauppa.fi
smftest.kauppa.akuankka.fi
akuankka.fi
message000.sp-prod.net
smftest.kauppa.akuankka.fi
www.lastenomakauppa.fi
akuankka.fi
akuankka.fi
akuankka.fi
*.juniori.akuankka.fi
akuankka.fi
amonas.10kysymysta.fi
amonas.10kysymysta.fi
www.lataamo.akuankka.fi
smftest.kauppa.akuankka.fi
www.akuankka.fi
kauppa.akuankka.fi
*.akuankka.fi
akuankka.fi
akuankka.fi
www.akuankka.fi
www.lastenomakauppa.fi
*.akuankka.fi
www.lastenomakauppa.fi
*.akuankka.fi
kauppa.akuankka.fi
amonas.10kysymysta.fi

Certificate

The complete raw certificate details for akuankka.fi in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3yR7NaVEj99MyBxjwCq3
NTPJb5gy4Y0xXfENfo6O3evwKMxpDCZZyy4kj3jbWVMM/pnwCmQDC+hQxzF9jGKM
fNAiVL0l3d6RrKpOayPDjmZRla5HBnil2a0sLAuPCMpAeQEvlJEewcQRNcz/IlyE
m1VLejMQiRzuC5yhxTRU4XZkAEy4Ru9gR+T/KtAJwYt0CtOthnvXtDyX4NfE/9z4
I2f1/kHks3YEZeY4QzmvtK9apms8juW4Ys6aWphTeHtA3Yn3RUERQlF6GIu9obp3
78Nxf3xyS6K9/nRoqghQIFXuX4UQ0CXpB+DJ4XfnGumh8Tfl5ZUtpzF3pytbbcqw
XwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17161777004891928037966214504083413808
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-14 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'akuankka.fi'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28169131600688186241432698539430790450901996287438970845714902140423525660223507127425516364752870437238233321465610818670467987493941918669308864796434941396438741001295348251817026629475507193014774754497774837585229089391642566630843337482254323023824105098375077262975133513234941709483275818803248864277919083033126372645298641877368198065148752789937998456543692858425206025598879469597471198201196521330814027232306669113399894895782657378641660346644612055627155635263611987689151240011362659207744940745491120361860936180555647504745553199102822801484423731352899629485124709942178875739445799883059948597343
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3da8d47f5babfa80c3b2c3d55c3815f19c8cfbcc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (171 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akuankka.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.satukirjasto.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.akuankkajuniori.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prinsessat.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akuankkajuniori.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prinsessat.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prinsessa.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prinsessa.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.akuankka.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'satukirjasto.fi'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016d2ed012a40000040300473045022100b79ae3c33f4d1ba1dbbc88b7be163bbe7164fcfa36b3cc8b0227bc4e5d45e2eb022035bdb9720e4b816ca58f83cd9cb3ad00b63d1e004cb92a34a955f717555bd6ac0076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016d2ed0131200000403004730450221009ce3b2343165aed02868b8255d3517c64cbdc4d3fe692276a3944cbdd3844cea02207d62f86e934d9cf5521fecbc1b0812c284a604bc3f5c7c33cd44fb33b3a756d9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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