askwhy.fi
Issued by R3
About this certificate
This digital certificate with serial number 03:d3:84:f5:60:57:49:98:f7:06:ba:6a:2d:6f:16:82:38:aa was issued on by Let's Encrypt.
With 26 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=askwhy.fi
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:d3:84:f5:60:57:49:98:f7:06:ba:6a:2d:6f:16:82:38:aaSerial Number (int): 333313169377799655076927565194523008186538
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 93:15:a5:23:1a:9f:1d:61:74:f6:c4:d8:6b:27:e0:37:8d:03:d3:79
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): b5:a5:40:a2:99:a9:35:79:97:d3:d3:06:b4:94:26:de:32:ee:ff:36
Fingerprint (sha256): f0:c7:d5:bf:79:e1:31:a8:a8:93:57:4d:ab:40:2b:c9:6a:2a:13:49:59:09:f3:64:a5:8e:d8:ed:ff:2e:91:1b
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate askwhy.fi
26
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for askwhy.fi
Public Key Algorithm
ECDSA
Key Size
256
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
askwhy.fi
biometrics.futurice.com
blog.futurice.com
futurice.biz
futurice.co.uk
futurice.com
futurice.de
futurice.fi
futurice.london
futurice.mobi
futurice.net
futurice.org
futurice.se
futurice.uk
saferoute.se
www.futurice.biz
www.futurice.co.uk
www.futurice.com
www.futurice.de
www.futurice.fi
www.futurice.london
www.futurice.mobi
www.futurice.net
www.futurice.org
www.futurice.se
www.futurice.uk
biometrics.futurice.com
blog.futurice.com
futurice.biz
futurice.co.uk
futurice.com
futurice.de
futurice.fi
futurice.london
futurice.mobi
futurice.net
futurice.org
futurice.se
futurice.uk
saferoute.se
www.futurice.biz
www.futurice.co.uk
www.futurice.com
www.futurice.de
www.futurice.fi
www.futurice.london
www.futurice.mobi
www.futurice.net
www.futurice.org
www.futurice.se
www.futurice.uk
Other certificates including the domain name askwhy.fi
(limited to 100 certificates)
Certificate
The complete raw certificate details for askwhy.fi in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFuDCCBKCgAwIBAgISA9OE9WBXSZj3BrpqLW8WgjiqMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzA3MDgyMzQxMzZaFw0yMzEwMDYyMzQxMzVaMBQxEjAQBgNVBAMT CWFza3doeS5maTBZMBMGByqGSM49AgEGCCqGSM49AwEHA0IABPPYXFcE23hemI4a P/Hv9U7BQsCrVVAV1lJTiEOJNFBeUoNyHDSvdOmRq4ZiaB6Jo9fqpqoTXvbU8hez UALD3RCjggOvMIIDqzAOBgNVHQ8BAf8EBAMCB4AwHQYDVR0lBBYwFAYIKwYBBQUH AwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFJMVpSManx1hdPbE 2Gsn4DeNA9N5MB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsG AQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIG CCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5vcmcvMIIBtgYDVR0RBIIBrTCC AamCCWFza3doeS5maYIXYmlvbWV0cmljcy5mdXR1cmljZS5jb22CEWJsb2cuZnV0 dXJpY2UuY29tggxmdXR1cmljZS5iaXqCDmZ1dHVyaWNlLmNvLnVrggxmdXR1cmlj ZS5jb22CC2Z1dHVyaWNlLmRlggtmdXR1cmljZS5maYIPZnV0dXJpY2UubG9uZG9u gg1mdXR1cmljZS5tb2JpggxmdXR1cmljZS5uZXSCDGZ1dHVyaWNlLm9yZ4ILZnV0 dXJpY2Uuc2WCC2Z1dHVyaWNlLnVrggxzYWZlcm91dGUuc2WCEHd3dy5mdXR1cmlj ZS5iaXqCEnd3dy5mdXR1cmljZS5jby51a4IQd3d3LmZ1dHVyaWNlLmNvbYIPd3d3 LmZ1dHVyaWNlLmRlgg93d3cuZnV0dXJpY2UuZmmCE3d3dy5mdXR1cmljZS5sb25k b26CEXd3dy5mdXR1cmljZS5tb2JpghB3d3cuZnV0dXJpY2UubmV0ghB3d3cuZnV0 dXJpY2Uub3Jngg93d3cuZnV0dXJpY2Uuc2WCD3d3dy5mdXR1cmljZS51azATBgNV HSAEDDAKMAgGBmeBDAECATCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB3AHoyjFTY ty22IOo44FIe6YQWcDIThU070ivBOlejUutSAAABiTgYyzwAAAQDAEgwRgIhAJLo kIWNZBAVlEtHu+KH488GzAf+onLU8aT2BjMwfnRSAiEAlr8ezpcam9vPXDa4EHao YLuU7IYjKh3XihJVKV/V1mEAdQCt9776fP8QyIudPZwePhhqtGcpXc+xDCTKhYY0 69yCigAAAYk4GMtJAAAEAwBGMEQCIEq1wGuUa4Dl/SOk/3BUDcfxeffMvx3nAPSi lBEPolHVAiAvGIvbX5Co31W+iljdMA9CA18mb87hc2ht59Yf17oeJDANBgkqhkiG 9w0BAQsFAAOCAQEAVztY3jTf0+1UGCij5M/Qtu275yjfGAYfJJB6MHPfDs9nEeE0 WSF/71KS1SgB7NLcM4igzH7dl+zthh9aGO6qYwyv2Z7uAyANbJfjx3d3+/As/OKJ fQYptB8c8jv2xuot39+LTDiAJJ+N59WeULoSGOGShgH7I+P9Sei0bKfWtmISsqLP pNUGHznbICAPsY+bzKU/7cB4/c7uDdFKMF5TJI/NpPEzbq7414KPvc8KdmaimoN7 kYI/sQwSD0pjYjE+UmwpagJ3jS29Kx+1/0G1nOHFofdZR78BCSipGTMUpeRorBDp czD0Gkx3M3MLLR60Iy0bUB/qGBd7KCCPrQoJjw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE89hcVwTbeF6Yjho/8e/1TsFCwKtV UBXWUlOIQ4k0UF5Sg3IcNK906ZGrhmJoHomj1+qmqhNe9tTyF7NQAsPdEA== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 333313169377799655076927565194523008186538 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-08 23:41:36 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-06 23:41:35 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'askwhy.fi' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey) . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1) . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits) 0004f3d85c5704db785e988e1a3ff1eff54ec142c0ab555015d6525388438934505e5283721c34af74e991ab8662681e89a3d7eaa6aa135ef6d4f217b35002c3dd10 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits) 0780 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 9315a5231a9f1d6174f6c4d86b27e0378d03d379 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (429 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'askwhy.fi' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biometrics.futurice.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.futurice.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'futurice.biz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'futurice.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'futurice.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'futurice.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'futurice.fi' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'futurice.london' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'futurice.mobi' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'futurice.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'futurice.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'futurice.se' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'futurice.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saferoute.se' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.futurice.biz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.futurice.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.futurice.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.futurice.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.futurice.fi' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.futurice.london' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.futurice.mobi' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.futurice.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.futurice.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.futurice.se' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.futurice.uk' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001893818cb3c000004030048304602210092e890858d641015944b47bbe287e3cf06cc07fea272d4f1a4f60633307e745202210096bf1ece971a9bdbcf5c36b81076a860bb94ec86232a1dd78a1255295fd5d661007500adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a000001893818cb49000004030046304402204ab5c06b946b80e5fd23a4ff70540dc7f179f7ccbf1de700f4a294110fa251d502202f188bdb5f90a8df55be8a58dd300f42035f266fcee173686de7d61fd7ba1e24 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00573b58de34dfd3ed541828a3e4cfd0b6edbbe728df18061f24907a3073df0ecf6711e13459217fef5292d52801ecd2dc3388a0cc7edd97eced861f5a18eeaa630cafd99eee03200d6c97e3c77777fbf02cfce2897d0629b41f1cf23bf6c6ea2ddfdf8b4c3880249f8de7d59e50ba1218e1928601fb23e3fd49e8b46ca7d6b66212b2a2cfa4d5061f39db20200fb18f9bcca53fedc078fdceee0dd14a305e53248fcda4f1336eaef8d7828fbdcf0a7666a29a837b91823fb10c120f4a6362313e526c296a02778d2dbd2b1fb5ff41b59ce1c5a1f75947bf010928a9193314a5e468ac10e97330f41a4c7733730b2d1eb4232d1b501fea18177b28208fad0a098f