digi.paivamies.fi
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:3e:0e:ab:39:2d:cd:09:a5:2b:71:d2:46:b4:b0:05:65:60 was issued on by Let's Encrypt.
With 11 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=digi.paivamies.fi
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:3e:0e:ab:39:2d:cd:09:a5:2b:71:d2:46:b4:b0:05:65:60Serial Number (int): 282453862778808793760970799173812017784160
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: d9:f2:8e:f7:16:ac:78:73:a6:e4:cd:5f:2e:29:fc:34:af:64:ca:87
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 26:04:d0:4a:38:73:2a:09:89:bd:1a:9d:6e:48:3b:c4:00:86:c8:1f
Fingerprint (sha256): f6:fc:3f:45:41:df:47:26:15:88:e9:c4:7e:02:0d:62:63:fd:dd:92:be:7f:4b:e4:ed:ca:17:8e:9d:b2:7b:20
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate digi.paivamies.fi
11
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for digi.paivamies.fi
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
digi.paivamies.fi
digi.xn--pivmies-5wac.fi
digilehdet.sanomapaino.fi
magg.io
pbmagazine.fi
sanomapaino.ap.richiefi.net
testilaari.ap.richiefi.net
uusityolehti.dna.fi
varmalehti.fi
www.pbmagazine.fi
www.varmalehti.fi
digi.xn--pivmies-5wac.fi
digilehdet.sanomapaino.fi
magg.io
pbmagazine.fi
sanomapaino.ap.richiefi.net
testilaari.ap.richiefi.net
uusityolehti.dna.fi
varmalehti.fi
www.pbmagazine.fi
www.varmalehti.fi
Other certificates including the domain name paivamies.fi
(limited to 100 certificates)
digi.paivamies.fi
www.paivamies.fi
www.paivamies.fi
digi.paivamies.fi
alasatakunta.ap.richiefi.net
digi.paivamies.fi
digi.paivamies.fi
alasatakunta.ap.richiefi.net
digi.paivamies.fi
www.paivamies.fi
testi.paivamies.fi
www.paivamies.fi
testi.paivamies.fi
testi.paivamies.fi
aller.ap.richiefi.net
aller.ap.richiefi.net
testi.paivamies.fi
alasatakunta.ap.richiefi.net
testi.paivamies.fi
www.paivamies.fi
testi.paivamies.fi
alasatakunta.ap.richiefi.net
digi.paivamies.fi
www.paivamies.fi
alasatakunta.ap.richiefi.net
aller.ap.richiefi.net
testi.paivamies.fi
alasatakunta.ap.richiefi.net
digi.paivamies.fi
www.paivamies.fi
www.paivamies.fi
digi.paivamies.fi
testi.paivamies.fi
aller.ap.richiefi.net
testi.paivamies.fi
almatalent.ap.richiefi.net
alasatakunta.ap.richiefi.net
www.paivamies.fi
aller.ap.richiefi.net
aller.ap.richiefi.net
aller.ap.richiefi.net
digi.paivamies.fi
digi.paivamies.fi
aller.ap.richiefi.net
www.paivamies.fi
testi.paivamies.fi
aller.ap.richiefi.net
aller.ap.richiefi.net
aller.ap.richiefi.net
alasatakunta.ap.richiefi.net
testi.paivamies.fi
alasatakunta.ap.richiefi.net
testi.paivamies.fi
testi.paivamies.fi
alasatakunta.ap.richiefi.net
www.paivamies.fi
alasatakunta.ap.richiefi.net
alasatakunta.ap.richiefi.net
alasatakunta.ap.richiefi.net
www.paivamies.fi
www.paivamies.fi
digi.paivamies.fi
www.paivamies.fi
digi.paivamies.fi
www.paivamies.fi
alasatakunta.ap.richiefi.net
alasatakunta.ap.richiefi.net
aller.ap.richiefi.net
www.paivamies.fi
www.paivamies.fi
digi.paivamies.fi
alasatakunta.ap.richiefi.net
digi.paivamies.fi
digi.paivamies.fi
alasatakunta.ap.richiefi.net
digi.paivamies.fi
www.paivamies.fi
testi.paivamies.fi
www.paivamies.fi
testi.paivamies.fi
testi.paivamies.fi
aller.ap.richiefi.net
aller.ap.richiefi.net
testi.paivamies.fi
alasatakunta.ap.richiefi.net
testi.paivamies.fi
www.paivamies.fi
testi.paivamies.fi
alasatakunta.ap.richiefi.net
digi.paivamies.fi
www.paivamies.fi
alasatakunta.ap.richiefi.net
aller.ap.richiefi.net
testi.paivamies.fi
alasatakunta.ap.richiefi.net
digi.paivamies.fi
www.paivamies.fi
www.paivamies.fi
digi.paivamies.fi
testi.paivamies.fi
aller.ap.richiefi.net
testi.paivamies.fi
almatalent.ap.richiefi.net
alasatakunta.ap.richiefi.net
www.paivamies.fi
aller.ap.richiefi.net
aller.ap.richiefi.net
aller.ap.richiefi.net
digi.paivamies.fi
digi.paivamies.fi
aller.ap.richiefi.net
www.paivamies.fi
testi.paivamies.fi
aller.ap.richiefi.net
aller.ap.richiefi.net
aller.ap.richiefi.net
alasatakunta.ap.richiefi.net
testi.paivamies.fi
alasatakunta.ap.richiefi.net
testi.paivamies.fi
testi.paivamies.fi
alasatakunta.ap.richiefi.net
www.paivamies.fi
alasatakunta.ap.richiefi.net
alasatakunta.ap.richiefi.net
alasatakunta.ap.richiefi.net
www.paivamies.fi
www.paivamies.fi
digi.paivamies.fi
www.paivamies.fi
digi.paivamies.fi
www.paivamies.fi
alasatakunta.ap.richiefi.net
alasatakunta.ap.richiefi.net
aller.ap.richiefi.net
Certificate
The complete raw certificate details for digi.paivamies.fi in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIG3zCCBcegAwIBAgISAz4OqzktzQmlK3HSRrSwBWVgMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODA4MTYyMDM5NDJaFw0x ODExMTQyMDM5NDJaMBwxGjAYBgNVBAMTEWRpZ2kucGFpdmFtaWVzLmZpMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8HV5z5x73wCl1ExCpQz6C1Rg7W2y bBdGKx2V4hrlN3IBKC1K0JQwW/9pUI5yFVyjh5Im1Jeoyn5W4J/GRNgWET6oMLL+ 4hklDwNc7vpEs1IKjHhqHuhsAsjUX6oWx3+VSA7zMymoPNNQY4LME4TW5ccWz1hT 2DgxEinnQ646o3piKO2vBDTm80+QXuQCEFfUcO4TtRuTOvtrcYZQ/J3OdW7+tfW2 c7Gkda/JMZ2i/yluC7y2woDRm2/f1iRl4avkW6MaMMqMit37vaBd5Vngow0YDjql AEroAsCvLAiylG9nTWNivmjSRPYaxJC59Fc2TWFvjiDNq5lFMl2IZK9jHQIDAQAB o4ID6zCCA+cwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggr BgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBTZ8o73Fqx4c6bkzV8uKfw0 r2TKhzAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBvBggrBgEFBQcB AQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5sZXRzZW5jcnlw dC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRzZW5jcnlw dC5vcmcvMIHuBgNVHREEgeYwgeOCEWRpZ2kucGFpdmFtaWVzLmZpghhkaWdpLnhu LS1waXZtaWVzLTV3YWMuZmmCGWRpZ2lsZWhkZXQuc2Fub21hcGFpbm8uZmmCB21h Z2cuaW+CDXBibWFnYXppbmUuZmmCG3Nhbm9tYXBhaW5vLmFwLnJpY2hpZWZpLm5l dIIadGVzdGlsYWFyaS5hcC5yaWNoaWVmaS5uZXSCE3V1c2l0eW9sZWh0aS5kbmEu ZmmCDXZhcm1hbGVodGkuZmmCEXd3dy5wYm1hZ2F6aW5lLmZpghF3d3cudmFybWFs ZWh0aS5maTCB/gYDVR0gBIH2MIHzMAgGBmeBDAECATCB5gYLKwYBBAGC3xMBAQEw gdYwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIGrBggr BgEFBQcCAjCBngyBm1RoaXMgQ2VydGlmaWNhdGUgbWF5IG9ubHkgYmUgcmVsaWVk IHVwb24gYnkgUmVseWluZyBQYXJ0aWVzIGFuZCBvbmx5IGluIGFjY29yZGFuY2Ug d2l0aCB0aGUgQ2VydGlmaWNhdGUgUG9saWN5IGZvdW5kIGF0IGh0dHBzOi8vbGV0 c2VuY3J5cHQub3JnL3JlcG9zaXRvcnkvMIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDv AHUAVYHUwhaQNgFK6gubVzxT8MDkOHhwJQgXL6OqHQcT0wwAAAFlRK4QNQAABAMA RjBEAiACswK5oY+atoav8DJEeMQl6J830Kg7fQOHgKl9FTYAwAIgEr7QJwfAY5ta tD0XiTGYFov9h+j6xhFwy32VsKFwHrUAdgApPFGWVMg5ZbqqUPxYB9S3b79Yeily 3KTDDPTlRUf0eAAAAWVErhAjAAAEAwBHMEUCIEnuE4NNMR1gzwxzL3AA+W04Dy0M 51oulj+UdhuSwp8RAiEA4sC3WjUtdX/HhWWtcCxFimfIc7+HHejiGVl//AjURX4w DQYJKoZIhvcNAQELBQADggEBAElSfaINb45IY1f6E7R38sJiHhoAZdGprym+DEa5 23qbrUMSnSI+epbikJ2g2GcPL/7SZ4nI3jPmzwnsTvN/6tGTr1lHosHsBiSytsW4 u1w+mDi7luaEqXQ6q/ZXBRxsrSLeWLBYHcFpMspxWV/sgEuq80TU1Q9ax4ZQCCWc SFEpE1eTbpJ3zoUEDKZScH7fPLjAio8fvEvtQhuv0m9zPfAJKLXqnnRuZGVd9UVH xirSfHo4VzjwyP+aEEME2AUyszZoy6uZV2pa5WT9J88+s4p+9JPPz1RiEhmbBmg+ IzAavdKU8YyCrbeGYioL9Sjyy/mpW8PBYUZNSNfLiEpDP7Y= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8HV5z5x73wCl1ExCpQz6 C1Rg7W2ybBdGKx2V4hrlN3IBKC1K0JQwW/9pUI5yFVyjh5Im1Jeoyn5W4J/GRNgW ET6oMLL+4hklDwNc7vpEs1IKjHhqHuhsAsjUX6oWx3+VSA7zMymoPNNQY4LME4TW 5ccWz1hT2DgxEinnQ646o3piKO2vBDTm80+QXuQCEFfUcO4TtRuTOvtrcYZQ/J3O dW7+tfW2c7Gkda/JMZ2i/yluC7y2woDRm2/f1iRl4avkW6MaMMqMit37vaBd5Vng ow0YDjqlAEroAsCvLAiylG9nTWNivmjSRPYaxJC59Fc2TWFvjiDNq5lFMl2IZK9j HQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 282453862778808793760970799173812017784160 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-16 20:39:42 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-14 20:39:42 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'digi.paivamies.fi' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30355122679802292512929879027586218055738080756583623137773535683060347413667603314624783309773926674130451595883743314282086818547777011342841206597156942991365377516211277331376181308078424702719896932348597583684936957403602075397288120831923447261022009735523868483951146533918549740040257719945653200785748882221535024511993396573324350377342870053905264435122650053414315080058872717278292205193308930262269424988394626090236820947031980431941706512743804918007413164841810420120756769168332255300431279608111939638574122277356065903286021703126929529243626646584002128187464095958007393703094132331629947872029 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) d9f28ef716ac7873a6e4cd5f2e29fc34af64ca87 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (230 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digi.paivamies.fi' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digi.xn--pivmies-5wac.fi' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digilehdet.sanomapaino.fi' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magg.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pbmagazine.fi' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanomapaino.ap.richiefi.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testilaari.ap.richiefi.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uusityolehti.dna.fi' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'varmalehti.fi' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pbmagazine.fi' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.varmalehti.fi' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef0075005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c0000016544ae10350000040300463044022002b302b9a18f9ab686aff0324478c425e89f37d0a83b7d038780a97d153600c0022012bed02707c0639b5ab43d17893198168bfd87e8fac61170cb7d95b0a1701eb5007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016544ae10230000040300473045022049ee13834d311d60cf0c732f7000f96d380f2d0ce75a2e963f94761b92c29f11022100e2c0b75a352d757fc78565ad702c458a67c873bf871de8e219597ffc08d4457e . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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