DV SSL/TLS Certificate for *.joonaspeltonen.fi

Certificate is witin its validity period

Issued by Let's Encrypt (R10)

About the *.joonaspeltonen.fi DV SSL/TLS Certificate

This certificate with serial number 05:bd:17:58:92:39:fe:23:7b:e3:37:2a:23:a9:ef:8d:2b:52 for *.joonaspeltonen.fi was issued on by Let's Encrypt.

With 2 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for *.joonaspeltonen.fi provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Let's Encrypt

Organization: Let's Encrypt
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 05:bd:17:58:92:39:fe:23:7b:e3:37:2a:23:a9:ef:8d:2b:52
Serial Number (int): 499905829138711666444003117188471136791378
Serial Number Length: 139 bits, 18 octets

Subject Key Identifier: d9:bf:a8:27:29:d0:ee:a9:4f:9e:75:be:47:6f:53:0f:8c:6f:c7:44
Authority Key Identifier: bb:bc:c3:47:a5:e4:bc:a9:c6:c3:a4:72:0c:10:8d:a2:35:e1:c8:e8

Fingerprint (SHA-1): 3e:b6:91:cc:c7:80:31:ec:e4:22:a3:c0:ac:72:f6:17:f4:d9:2e:29
Fingerprint (SHA-256): e7:26:36:52:30:8c:d3:41:4a:da:7a:ce:22:23:77:68:9b:3a:f3:24:7c:a1:5b:74:01:55:31:62:8f:81:50:cd

Issuing Certificate URL: http://r10.i.lencr.org/

Revocation Information

CRL Distribution Point: http://r10.c.lencr.org/83.crl

Check the revocation status for certificate *.joonaspeltonen.fi
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for *.joonaspeltonen.fi

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for *.joonaspeltonen.fi in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGD5YkCHoBQgZJcQZCYo
xBfPPBSIBXQhaY2lTDMdWoVjNO1XFojsACsEJnKgQcAzmuRQSJ+/cmUjUFelwt2y
mGHKGynam4AGVBEissESjEW8UKxMrF9OwAxILDXF4fqcRa86hITP9S7+3vnyr6/7
5DlLE9eRqynVJlgd/a5POF7dZY6GHuGu0wYrARMaYlLyr3BqaXZAa7NYRQqfB7oi
RL954B44zlxLNpRVQ2pjanGCWHum6uXq1u1ruhmVMd58p9bPRPrGRRjN7a70UvWw
yXnO6/l6OQ6lD6etn1b9SqFuhPFgpqG9DcAUDgn2iDXkxpHCh3K3mH6MHy5NZsQi
XQIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 499905829138711666444003117188471136791378
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R10'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-27 22:48:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-08-25 22:48:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.joonaspeltonen.fi'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23275667852076985249578113268511066156766892235236446201031928034167276784560941028451443903903669055949571698970745673133101236256982578945621161930145697030302121239967224917012380633098640735438374909597610366008322575996758851729619992664650104581129034110073993825667374037409991102088531667946067757124136960133531186734135191907571515130345439030817275149999278807172830248503836759874088655427580406325282947404793760164914629892246927467782211437067656778908846748523697550563147124557958120538165385595799615999474606574055919024058389609608735030355286985842095355858814074775934235841925156043636110271069
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d9bfa82729d0eea94f9e75be476f530f8c6fc744
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName bbbcc347a5e4bca9c6c3a4720c108da235e1c8e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.joonaspeltonen.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joonaspeltonen.fi'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.c.lencr.org/83.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700ed3c4bd6e806c2a4a20057dbcb24e23801df512fedc486c5700f20ddb73e3fe0000001971424088c0000040300483046022100af951b24920aff2bba825bbccfc16c1ebb109d9b8eb52b1de96bb80f3f89b7a8022100ac70fa9b8fb01c1a35a598c6f1f89a4f1f6b586df3fee6393655712b64248d3000760012f14e34bd53724c840619c38f3f7a13f8e7b56287889c6d300584ebe586263a00000197142408960000040300473045022100a88d34e0fa441dc1ec2ebd92af0de8fad03d4f360c6d9df6064c9fbe8042f6990220065b36b6b58840de2faf2da102177f95765d8c8bd609ec92af60429793fafbb9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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