www.grosswind.ch

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:72:74:3f:3e:bb:f0:19:14:39:f1:7d:e1:53:3c:d2:0d:9e was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.grosswind.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:72:74:3f:3e:bb:f0:19:14:39:f1:7d:e1:53:3c:d2:0d:9e
Serial Number (int): 300283566458880231247683648773903634009502
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e4:46:f6:6e:d1:e6:af:d3:db:8b:dd:4d:48:76:c0:48:a6:cd:54:73
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 18:e1:d7:c8:84:98:32:71:c7:2e:a0:45:41:75:01:1a:79:33:f0:72
Fingerprint (sha256): 00:00:fe:9f:7f:f7:39:1a:52:19:1e:c4:a1:39:a7:64:b2:c1:03:ec:62:76:9e:63:8f:ef:eb:4d:ef:27:f6:de

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate www.grosswind.ch

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.grosswind.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

grosswind.ch
www.grosswind.ch

Other certificates including the domain name grosswind.ch

(limited to 100 certificates)
www.grosswind.ch
grosswind.ch
grosswind.ch

Certificate

The complete raw certificate details for www.grosswind.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGEjCCBPqgAwIBAgISA3J0Pz678BkUOfF94VM80g2eMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xNjA3MDQxMDU1MDBaFw0x
NjEwMDIxMDU1MDBaMBsxGTAXBgNVBAMTEHd3dy5ncm9zc3dpbmQuY2gwggIiMA0G
CSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDKwfHjejZymJXG/L6rS1FN7GZo8H72
InjBWtXE7eAqgNe1mARiTIq9klbxsvoMu2kzTnd1iXJOMSwPcC5bT7QkcGf/KBHe
zB0CRLKZDDR2KSUqL7eKkVNjflNgYiOB3BpXu8ro0hzEw8mPJG6AN2VRrlGd3xsz
IH2PH6I9XnkXWSmu4aIxmgiyXYigUdtZhcOZitLjpBvDFj5wBe7Cy3L8pzTxT3x4
uhtvvFWvy5Z3c3l5pWJ1uASIemAZlbNHJ8POauhUPM19vOo+ay4yeVhzbzhz7S+U
ZnnLW1vAMUlXQkOTsz546C02gwlFuWEDAFTaGwL71kO2MEVJaY+2CUGU5DsI5xSa
nT5UHGjc/iVh/W8jBg9QMsPz7b0WHkRZrrd5mY8d890F95tMLq+UozCmLWkqjOb+
0VMX7OQnP5efyq+Yhj0ZRAjfIxRu3qQ1G3N7t+lpBsLVepuopzdd5HwqpOPPaXCT
7/wxNgda0S9z6IJYkbvXB/aqBD/C1R3aC/GE69lHCrCHZiKAKi50O0djjAm09Vdq
y98YomIBkq2mTAcob01iH6HKWQ20c17EI7OD0bzfmqid3vulyQdTAz+/YuECHkVY
vPkjoi8onbMSBRpMN66q2CGKo7ElTNs4An/wGuLE76k9M/uffXg9INGemzIRIRdb
8a1b+4KntJziOQIDAQABo4ICHzCCAhswDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQW
MBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBTk
RvZu0eav09uL3U1IdsBIps1UczAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv
86jsoTBwBggrBgEFBQcBAQRkMGIwLwYIKwYBBQUHMAGGI2h0dHA6Ly9vY3NwLmlu
dC14My5sZXRzZW5jcnlwdC5vcmcvMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5p
bnQteDMubGV0c2VuY3J5cHQub3JnLzApBgNVHREEIjAgggxncm9zc3dpbmQuY2iC
EHd3dy5ncm9zc3dpbmQuY2gwgf4GA1UdIASB9jCB8zAIBgZngQwBAgEwgeYGCysG
AQQBgt8TAQEBMIHWMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0
Lm9yZzCBqwYIKwYBBQUHAgIwgZ4MgZtUaGlzIENlcnRpZmljYXRlIG1heSBvbmx5
IGJlIHJlbGllZCB1cG9uIGJ5IFJlbHlpbmcgUGFydGllcyBhbmQgb25seSBpbiBh
Y2NvcmRhbmNlIHdpdGggdGhlIENlcnRpZmljYXRlIFBvbGljeSBmb3VuZCBhdCBo
dHRwczovL2xldHNlbmNyeXB0Lm9yZy9yZXBvc2l0b3J5LzANBgkqhkiG9w0BAQsF
AAOCAQEAm8ALsSTHeAgv/fHbRlO8+D6byEv3c60t7hwjU/ldk1z5kcMzQ48YWul3
vJtRwvWviWeVim6q6QISNtQ+oY1CgQR+N6sdmlh2pAXNLnRs6IizzgSuStLQqgEm
4wPpLR0gqTghMKcave84LOrP5J11IEQGr79Yo8JYAPCyOFMSpjHwysm+F+/K5LlR
hd7Nla2XaxlO7QAwZ/1MpLf1zHhNJX82sFGszo+tZMkkVyn6sl1Pf2LQ5n/ydn0h
VKX+qKrHQm2NnhmdDP64GHuPaVWwwz4ZeeeKCG6csLn6wP62JFrk1EO7zDLcsGob
MBj8fbuiqwol6deL2wKH5zpaAQS+Lw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 300283566458880231247683648773903634009502
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-07-04 10:55:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-10-02 10:55:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.grosswind.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 827178828568645541403485529339234428382403452597916546416845775526983978203726639309484475912453106721936914287083128614296803868465044958663411025274431869153484741371384952895072859575979404923178856459347178398785121293756178346755143455203866157783617383630608663018709304810597903801510822067474881650450372615350980432564978988162733739070995013972991669806818752427504035672009795406358897237411710566808001518687318574642162117312575341243284640151478824879907472160039511826403639967830210411009245283853992288616968897602514794889786829455528557881408291631486962479903608160934110862794397609330433128135831766315035639745161185326657186470500015541668187171350632262322509438772090665996912901067090822621181056857202810423165633989187922253038345421718951895279172596657503734402120622846353661460711557525124826674812788251834387092452987878741860545355552340165387496831395234561469235012728574304968033471828135368093506764412245509784087232971827812593646505451241040606895529928194568634584986471653176260719881687606482977612129055727953893968064616611651500722545551342694726458664898236927860266854943006771010550257612279488079461003626846393642353456844640662874980869703853786272621018507464559130577760739897
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e446f66ed1e6afd3db8bdd4d4876c048a6cd5473
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grosswind.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grosswind.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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