Issued by Let's Encrypt Authority X3
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
RSA
4096
SHA256 with RSA
Digital Signature
Key Encipherment
Server Authentication
Client Authentication
8 extensions
No
unhandled critical extensions
This is not a CA certificate
-----BEGIN CERTIFICATE----- MIIGEjCCBPqgAwIBAgISA3J0Pz678BkUOfF94VM80g2eMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xNjA3MDQxMDU1MDBaFw0x NjEwMDIxMDU1MDBaMBsxGTAXBgNVBAMTEHd3dy5ncm9zc3dpbmQuY2gwggIiMA0G CSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDKwfHjejZymJXG/L6rS1FN7GZo8H72 InjBWtXE7eAqgNe1mARiTIq9klbxsvoMu2kzTnd1iXJOMSwPcC5bT7QkcGf/KBHe zB0CRLKZDDR2KSUqL7eKkVNjflNgYiOB3BpXu8ro0hzEw8mPJG6AN2VRrlGd3xsz IH2PH6I9XnkXWSmu4aIxmgiyXYigUdtZhcOZitLjpBvDFj5wBe7Cy3L8pzTxT3x4 uhtvvFWvy5Z3c3l5pWJ1uASIemAZlbNHJ8POauhUPM19vOo+ay4yeVhzbzhz7S+U ZnnLW1vAMUlXQkOTsz546C02gwlFuWEDAFTaGwL71kO2MEVJaY+2CUGU5DsI5xSa nT5UHGjc/iVh/W8jBg9QMsPz7b0WHkRZrrd5mY8d890F95tMLq+UozCmLWkqjOb+ 0VMX7OQnP5efyq+Yhj0ZRAjfIxRu3qQ1G3N7t+lpBsLVepuopzdd5HwqpOPPaXCT 7/wxNgda0S9z6IJYkbvXB/aqBD/C1R3aC/GE69lHCrCHZiKAKi50O0djjAm09Vdq y98YomIBkq2mTAcob01iH6HKWQ20c17EI7OD0bzfmqid3vulyQdTAz+/YuECHkVY vPkjoi8onbMSBRpMN66q2CGKo7ElTNs4An/wGuLE76k9M/uffXg9INGemzIRIRdb 8a1b+4KntJziOQIDAQABo4ICHzCCAhswDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQW MBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBTk RvZu0eav09uL3U1IdsBIps1UczAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv 86jsoTBwBggrBgEFBQcBAQRkMGIwLwYIKwYBBQUHMAGGI2h0dHA6Ly9vY3NwLmlu dC14My5sZXRzZW5jcnlwdC5vcmcvMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5p bnQteDMubGV0c2VuY3J5cHQub3JnLzApBgNVHREEIjAgggxncm9zc3dpbmQuY2iC EHd3dy5ncm9zc3dpbmQuY2gwgf4GA1UdIASB9jCB8zAIBgZngQwBAgEwgeYGCysG AQQBgt8TAQEBMIHWMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0 Lm9yZzCBqwYIKwYBBQUHAgIwgZ4MgZtUaGlzIENlcnRpZmljYXRlIG1heSBvbmx5 IGJlIHJlbGllZCB1cG9uIGJ5IFJlbHlpbmcgUGFydGllcyBhbmQgb25seSBpbiBh Y2NvcmRhbmNlIHdpdGggdGhlIENlcnRpZmljYXRlIFBvbGljeSBmb3VuZCBhdCBo dHRwczovL2xldHNlbmNyeXB0Lm9yZy9yZXBvc2l0b3J5LzANBgkqhkiG9w0BAQsF AAOCAQEAm8ALsSTHeAgv/fHbRlO8+D6byEv3c60t7hwjU/ldk1z5kcMzQ48YWul3 vJtRwvWviWeVim6q6QISNtQ+oY1CgQR+N6sdmlh2pAXNLnRs6IizzgSuStLQqgEm 4wPpLR0gqTghMKcave84LOrP5J11IEQGr79Yo8JYAPCyOFMSpjHwysm+F+/K5LlR hd7Nla2XaxlO7QAwZ/1MpLf1zHhNJX82sFGszo+tZMkkVyn6sl1Pf2LQ5n/ydn0h VKX+qKrHQm2NnhmdDP64GHuPaVWwwz4ZeeeKCG6csLn6wP62JFrk1EO7zDLcsGob MBj8fbuiqwol6deL2wKH5zpaAQS+Lw== -----END CERTIFICATE-----
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAysHx43o2cpiVxvy+q0tR TexmaPB+9iJ4wVrVxO3gKoDXtZgEYkyKvZJW8bL6DLtpM053dYlyTjEsD3AuW0+0 JHBn/ygR3swdAkSymQw0diklKi+3ipFTY35TYGIjgdwaV7vK6NIcxMPJjyRugDdl Ua5Rnd8bMyB9jx+iPV55F1kpruGiMZoIsl2IoFHbWYXDmYrS46QbwxY+cAXuwsty /Kc08U98eLobb7xVr8uWd3N5eaVidbgEiHpgGZWzRyfDzmroVDzNfbzqPmsuMnlY c284c+0vlGZ5y1tbwDFJV0JDk7M+eOgtNoMJRblhAwBU2hsC+9ZDtjBFSWmPtglB lOQ7COcUmp0+VBxo3P4lYf1vIwYPUDLD8+29Fh5EWa63eZmPHfPdBfebTC6vlKMw pi1pKozm/tFTF+zkJz+Xn8qvmIY9GUQI3yMUbt6kNRtze7fpaQbC1XqbqKc3XeR8 KqTjz2lwk+/8MTYHWtEvc+iCWJG71wf2qgQ/wtUd2gvxhOvZRwqwh2YigCoudDtH Y4wJtPVXasvfGKJiAZKtpkwHKG9NYh+hylkNtHNexCOzg9G835qond77pckHUwM/ v2LhAh5FWLz5I6IvKJ2zEgUaTDeuqtghiqOxJUzbOAJ/8BrixO+pPTP7n314PSDR npsyESEXW/GtW/uCp7Sc4jkCAwEAAQ== -----END PUBLIC KEY-----
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 300283566458880231247683648773903634009502 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-07-04 10:55:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-10-02 10:55:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.grosswind.ch' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 827178828568645541403485529339234428382403452597916546416845775526983978203726639309484475912453106721936914287083128614296803868465044958663411025274431869153484741371384952895072859575979404923178856459347178398785121293756178346755143455203866157783617383630608663018709304810597903801510822067474881650450372615350980432564978988162733739070995013972991669806818752427504035672009795406358897237411710566808001518687318574642162117312575341243284640151478824879907472160039511826403639967830210411009245283853992288616968897602514794889786829455528557881408291631486962479903608160934110862794397609330433128135831766315035639745161185326657186470500015541668187171350632262322509438772090665996912901067090822621181056857202810423165633989187922253038345421718951895279172596657503734402120622846353661460711557525124826674812788251834387092452987878741860545355552340165387496831395234561469235012728574304968033471828135368093506764412245509784087232971827812593646505451241040606895529928194568634584986471653176260719881687606482977612129055727953893968064616611651500722545551342694726458664898236927860266854943006771010550257612279488079461003626846393642353456844640662874980869703853786272621018507464559130577760739897 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) e446f66ed1e6afd3db8bdd4d4876c048a6cd5473 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grosswind.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grosswind.ch' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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