liip.ch

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:fc:46:db:ff:6d:5d:38:bc:7f:85:f0:be:74:d5:f3:67:0c was issued on by Let's Encrypt.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=liip.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:fc:46:db:ff:6d:5d:38:bc:7f:85:f0:be:74:d5:f3:67:0c
Serial Number (int): 347182202512753365312143355368454738896652
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 03:57:b1:81:9f:c9:dc:2d:c7:47:ac:9a:46:36:33:2a:33:9c:83:d7
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 36:f1:72:7d:3b:50:ca:46:27:98:4e:d1:e2:b8:9a:6e:57:33:46:66
Fingerprint (sha256): 00:0b:e1:86:df:b7:83:a6:ae:36:27:89:eb:87:73:42:b1:a2:bf:20:cc:f9:c1:df:12:75:8b:3e:88:57:3f:9b

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate liip.ch

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for liip.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

blog.liip.ch
elearning.liip.ch
journal.liip.ch
liip.ch
www.liip.ch

Other certificates including the domain name liip.ch

(limited to 100 certificates)
zebra.liip.ch
liip.ch
beta-zebra.liip.ch
liip.ch
legacy-clients.k8s.liip.ch
prolek.stage01.sb.liip.ch
gitlab.liip.ch
monitoring.elearning.liip.ch
test-wiki.liip.ch
bundstarterkit.demo.liip.ch
crm.svc.clients.liip.ch
baspo.bedev.liip.ch
liip.ch
guess.liip.ch
support.liip.ch
playground.moodle.liip.ch
*.clients.liip.ch
unitar2.stage01.sb.liip.ch
blog.liip.ch
moodle.careum-weiterbildung.ch
liip.ch
techpool.stage01.sb.liip.ch
eduprep.sosaerzte.ch
nagios.liip.ch
account.liip.ch
repair-cafe-stage.clients.liip.ch
stage.bwo.clients.liip.ch
liip-moodle.devel01.sb.liip.ch
order.elearning.liip.ch
meinunterricht2.kvz-weiterbildung.ch
moodle.liip.ch
liip.ch
prolek.stage01.sb.liip.ch
memberplus.rai.clients.liip.ch
vagrantbox-public.liip.ch
blog.liip.ch
ehb.clients.liip.ch
iuffp1.clients.liip.ch
lsca.devel01.sb.liip.ch
mdl-tph-mnet.devel01.sb.liip.ch
preprod.liip.ch
mobi.demo.liip.ch
wks.devel01.sb.liip.ch
preprod.liip.ch
iuffp1.clients.liip.ch
moodle.liip.ch
iuffp1.clients.liip.ch
*.d.clients.liip.ch
download.liip.ch
guidelines.liip.ch
stage.bwo.clients.liip.ch
repair-cafe.clients.liip.ch
*.liip.ch
crm.svc.clients.liip.ch
bzwu.stage01.sb.liip.ch
liip.ch
account.liip.ch
moodle-sob.clients.liip.ch
monitoring.elearning.liip.ch
cpdf.liip.ch
techpool.stage01.sb.liip.ch
liip-moodle.live03.sb.liip.ch
lsca.devel01.sb.liip.ch
moodle.careum-weiterbildung.ch
h5p.devel01.sb.liip.ch
gtm-generator.liip.ch
slides.liip.ch
lhc.stage01.sb.liip.ch
account.liip.ch
slides.liip.ch
blog.liip.ch
moodle-dev.graduateinstitute.ch
bgs.stage01.elearning.liip.ch
projects.liip.ch
lama.liip.ch
baspo.bedev.liip.ch
chbox.clients.liip.ch
kompra.stage01.sb.liip.ch
elearning.liip.ch
futura21.devel01.sb.liip.ch
stage.bwo.clients.liip.ch
shop.stapferhaus.bedev.liip.ch
dev.zb.clients.liip.ch
iuffp1.clients.liip.ch
iuffp1.clients.liip.ch
liip-moodle.stage01.sb.liip.ch
baspo.bedev.liip.ch
liip-moodle.devel01.sb.liip.ch
stage.bwo.clients.liip.ch
hfgz.stage01.sb.liip.ch
bcv.demo.liip.ch
gtm-generator.liip.ch
stage.bwo.clients.liip.ch
sasdb.clients.liip.ch
liip.ch
tourismuskv.stage01.sb.liip.ch
solradmin.live03.sb.liip.ch
php-osx.liip.ch
vagrantbox-public.liip.ch
bzu.stage01.sb.liip.ch

Certificate

The complete raw certificate details for liip.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 347182202512753365312143355368454738896652
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-03 20:37:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-01 20:37:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'liip.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 782470463950411329589345346034749429275630697589799339596993034169395684509416761469936722908992051552572864677980493779506940211101331167609167870552320594826134710513239149711325872895487668372368460733805992749268678327775583751120424523291901266715860433373428440079902392127861272153086852501594589410395216066255556241371130231532565348398663623408570837498264138579355077476342831703095135749621669016266195160840507792482432049553022484991130812110460227508714881761496498253712187511346051285326560491900715947335009585534655104447673279126779455858543004632389713721491382541970737572566219223153288505663132142946643512975793546281308201363840892390140408616521218596141758896564021839212982128768667231821850334289699481285775336009876107657304881032057512416796704679625762302034050063913968806947259886563662424946166196275514686307445072672905030479900795273020491447937496460111585883816888215998744735144908745210388367132525231006834384499984270939561547927982076042683967704339971651422279037190165439859855299462408083304359812558663794985687497509463089529405317596011794591954826127589167906682203991467919832978096916528398219503205193851728166025574251602580563000734209851985161150910495366255766275199341471
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0357b1819fc9dc2dc747ac9a4636332a339c83d7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.liip.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elearning.liip.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'journal.liip.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liip.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liip.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016bb9c5b9dd000004030047304502200a46c2de6d6f067f1fb57abd61e3b81d03bb8d2123772b4f263f5039ae85485802210090b327d4e91eb598c37d61e2d223d5a4fbef61b175b9ce202b5f05802b39a13f007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016bb9c5bbb500000403004730450220587c1cabc0469dbe986ec062fabd59968665dc28446f42939548955d506ca9f7022100e758227f5cbe9525bf3bf564ee29a00fbea9d2a0c56aff8a4bae336f8be5838f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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