piwik.maenjuel.ch

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:18:1b:fb:86:8a:87:39:a4:c4:2c:cc:75:55:f7:67:27:d0 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=piwik.maenjuel.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:18:1b:fb:86:8a:87:39:a4:c4:2c:cc:75:55:f7:67:27:d0
Serial Number (int): 356653115684359418159396560661794718689232
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 1a:98:0d:c6:aa:cd:c9:9e:96:95:26:93:51:aa:33:50:0d:31:e3:84
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): e3:e6:f5:6d:6f:49:17:e1:9a:5f:72:23:08:4d:9a:53:f8:16:91:9d
Fingerprint (sha256): 00:0c:93:6a:af:b3:de:48:43:0a:0a:ea:52:ec:b8:7b:ae:4c:04:dc:b9:3c:4d:06:79:59:f7:de:f2:6b:0f:90

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate piwik.maenjuel.ch

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for piwik.maenjuel.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

piwik.maenjuel.ch
www.piwik.maenjuel.ch

Other certificates including the domain name maenjuel.ch

(limited to 100 certificates)
piwik.maenjuel.ch
maenjuel.ch
piwik.maenjuel.ch
maenjuel.ch
maenjuel.ch
maenjuel.ch
maenjuel.ch
kimai.maenjuel.ch
matomo.maenjuel.ch
maenjuel.ch
maenjuel.ch
matomo.maenjuel.ch
dl.maenjuel.ch
matomo.maenjuel.ch
piwik.maenjuel.ch
maenjuel.ch
piwik.maenjuel.ch
maenjuel.ch
l4m.maenjuel.ch
maenjuel.ch
matomo.maenjuel.ch
matomo.maenjuel.ch
maenjuel.ch
piwik.maenjuel.ch
maenjuel.ch
piwik.maenjuel.ch
matomo.maenjuel.ch
piwik.maenjuel.ch
maenjuel.ch
matomo.maenjuel.ch
l4m.maenjuel.ch
maenjuel.ch
maenjuel.ch
wp.maenjuel.ch
matomo.maenjuel.ch
matomo.maenjuel.ch
maenjuel.ch
maenjuel.ch
maenjuel.ch
piwik.maenjuel.ch
maenjuel.ch
wp.maenjuel.ch
l4m.maenjuel.ch
matomo.maenjuel.ch
myt.maenjuel.ch
wp.maenjuel.ch
matomo.maenjuel.ch

Certificate

The complete raw certificate details for piwik.maenjuel.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGHDCCBQSgAwIBAgISBBgb+4aKhzmkxCzMdVX3ZyfQMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODAzMTQwNTI1NDRaFw0x
ODA2MTIwNTI1NDRaMBwxGjAYBgNVBAMTEXBpd2lrLm1hZW5qdWVsLmNoMIICIjAN
BgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAp6yfsdC+xX9moExdvpx+P90Kbz4S
Vy+7xMBbngjsjem5UMVCbpVUniN5Y3B/en2icDPCqmaC6SV1AteCIBYe06oEE1uz
xM+wh8/iq6Q7J09L0OgK3cpeqMFgiEeZdxCl6OZopV1lM329J8anxwPC33Z6Td9U
Z1dBk6oriGJtRTxsEMkXYK8i2+EKjzoryvUdUScSj667ciHtGo7OyJCOSvUMZ7vr
TXWmL2cmvkCKN1XBaKATOEJ7FBWv2QWql97+gV+qKow7iz6HoZDCIFlyoEPvpmIM
k7kFaOa3CJMYusabiN19ukfgEmFDcisf3VoQmfJ8hbpGE7/Jjtptc07d17Z/0Tqb
8zoCC756ph28T8elRP3yoCtygBY9qkudiG8Zxd1VTzMfuFDNlHfEfIem2YTkS0J9
t1x4x/HIER+x8oPa7lw5OROWIKhtKsXmSbb/3q0O98che+8P3VVC8rAnq5EyfpuO
zT0YH6nLpLWMhDVYMuaBYRMRthaOyDdqQ6BZPmrAB7XXMmd8skEerF/vMvvol9Jl
RjoWICQIOenjY5Epk0YrRbHas2JWHqmPw05nnXlS2qngaDOV+1g/InhkqPitEOJz
i/zeQQdXiQaDcI6g5Y1OyDSq/6hYl7e60Ec9ybH6qt9hX4L3awz663zHUQ+/kyWP
5MXPd4NCcT3kUakCAwEAAaOCAigwggIkMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUE
FjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU
GpgNxqrNyZ6WlSaTUaozUA0x44QwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl
7/Oo7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5p
bnQteDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5p
bnQteDMubGV0c2VuY3J5cHQub3JnLzAzBgNVHREELDAqghFwaXdpay5tYWVuanVl
bC5jaIIVd3d3LnBpd2lrLm1hZW5qdWVsLmNoMIH+BgNVHSAEgfYwgfMwCAYGZ4EM
AQIBMIHmBgsrBgEEAYLfEwEBATCB1jAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5s
ZXRzZW5jcnlwdC5vcmcwgasGCCsGAQUFBwICMIGeDIGbVGhpcyBDZXJ0aWZpY2F0
ZSBtYXkgb25seSBiZSByZWxpZWQgdXBvbiBieSBSZWx5aW5nIFBhcnRpZXMgYW5k
IG9ubHkgaW4gYWNjb3JkYW5jZSB3aXRoIHRoZSBDZXJ0aWZpY2F0ZSBQb2xpY3kg
Zm91bmQgYXQgaHR0cHM6Ly9sZXRzZW5jcnlwdC5vcmcvcmVwb3NpdG9yeS8wDQYJ
KoZIhvcNAQELBQADggEBAHL1s2XrgNI5BCeDSzHduCcGeWlfEeXKtdMMIKTr5wcl
8H2BIXldMPN0fUpVyJLFn4z3DI9JUX/VPWC2ThbajNzw+TGtSRtBYT0TxV16mP9C
8NGj0sNcBzlM14A/lVZ6pW0IAAeXL9oSh7aqlSCg1Jpy9Jhvpkj3oAVp0tnTdwx/
bL1lRGyAm7/8fe92p68m4nq8d8iYSihWK1MKLgxHR98BNUgwvUhKICkq60S6vA6s
ssenHetWvzou0NxMGgtTmYRZyhSf3ssRs14w3Cw7E9FhDsny9m/nF4va5m8PZHPL
r8kNu66NcuIHx+doBncC6kganUftGeLgt/dMPvQC7Bc=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 356653115684359418159396560661794718689232
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-14 05:25:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-12 05:25:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'piwik.maenjuel.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 684051511274274566209772166251384884150041070211376606722699824731297526945382962577002037564680092651797930616841295390194121086389757293662731824043046407411157959494366472973279948395157744789196888766790890515566905761566198488528841521072508034159541006010281792800228849673343681065983050833416077714842034255846142740183879906665641559119912453894149640568413184581851171576425529288426146522719660358795381077728145131577477563690388521123875136647717422386980156341326520529383857483258919479703832434233749457809252028555953395625787479564048338239763309535769682814212423600792310136087516109234356347992559291103234906698247529365140274553500199135012821496861917419161535053574695330269797677129773606104305735533138654954174043330521783522005126027108900139391032831530061368418632261112547729977726630281913215214532314523451711854967691971543282779886977716355679040083250145068473053481631025780611030029859587706186529074582943078438342690262256685191812719504007793506415694279448077983641292525293419007167509540562814494492492972351433841690332397982489194296525809461403251112384781790260123760291788117956810200643971307425812314024562732820723709218303362203718670087399352826915432379373008321359670958903721
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1a980dc6aacdc99e9695269351aa33500d31e384
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'piwik.maenjuel.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.piwik.maenjuel.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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