apu.vaihde.fi

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:18:25:db:5f:dc:78:94:c7:ac:19:0d:72:67:1c:d0:36:8a was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=apu.vaihde.fi

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:18:25:db:5f:dc:78:94:c7:ac:19:0d:72:67:1c:d0:36:8a
Serial Number (int): 269553955094535750242713062341370543355530
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 23:70:2c:a4:97:26:1a:66:a6:d9:0d:08:ee:99:6d:f0:c2:0c:73:b1
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 16:5c:44:f5:06:11:41:38:f9:7f:3c:3e:7a:6e:14:ad:0a:51:0d:a1
Fingerprint (sha256): ff:1d:11:32:e0:18:b7:f8:30:2c:5a:2c:cb:81:d2:af:7d:5d:74:bc:73:d2:a1:86:97:cb:34:bc:6b:e0:b9:74

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate apu.vaihde.fi

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for apu.vaihde.fi

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

apu.vaihde.fi
hel1-188-117-24-168.ext.nebulacloud.fi

Other certificates including the domain name vaihde.fi

(limited to 100 certificates)

Certificate

The complete raw certificate details for apu.vaihde.fi in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 269553955094535750242713062341370543355530
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-03-15 15:32:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-06-13 15:32:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'apu.vaihde.fi'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 733431332708907011276172611536044950947709833585139230631423754782349242355700808228633039185159245457599204925702809351635611460875308555548336094192272825155024176584109136890045040875708379043827488687658572271713769987859169705578246869009242149957470455009217621446393045892880391951731444436627492647480764576576420419810448607968425662078473745456051737821055373367693352789632377403986613493892438752562605956589279473013929558155144909646292621429268188607307680941987164907507025082155446578619460589344816215553886623960507159601609191292124863390620209258629813294214549661233517249046805886639007152532920698410993178470433174731762509231401151729599025565751957097197688222349790341003099085863719685048790123533373663158492140346120761490743122820219653002312566991293885326922253427323214092286279987575654276875668161227779224175081664692872238549584190216023199946064917255820829317326729442171948500460759151339431615565361808416940456454775788531562789143552433710851917911819771899873017017852720126626991060818167407475725752052600824448901332963052249132975679309213455650220845668412914780127723371499730530023117951605940968153784478781609971900455519112739342611301417297399145861228586746260451331579075453
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							23702ca497261a66a6d90d08ee996df0c20c73b1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (57 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apu.vaihde.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hel1-188-117-24-168.ext.nebulacloud.fi'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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