DV SSL/TLS Certificate for *.metanet.ch

Certificate is witin its validity period

Issued by Sectigo Limited (Sectigo Public Server Authentication CA DV R36)

About the *.metanet.ch DV SSL/TLS Certificate

This certificate with serial number 4c:9e:87:73:3f:99:73:13:4e:d4:81:2f:1d:c3:4c:7b for *.metanet.ch was issued on by Sectigo Limited.

With 2 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for *.metanet.ch provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Sectigo Limited

Organization: Sectigo Limited
Country: GB

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 4c:9e:87:73:3f:99:73:13:4e:d4:81:2f:1d:c3:4c:7b
Serial Number (int): 101844457839520355919362963210256993403
Serial Number Length: 127 bits, 16 octets

Subject Key Identifier: 75:2f:d2:b8:71:18:9e:16:a9:8f:27:f0:96:54:09:25:c9:04:38:61
Authority Key Identifier: 68:c0:12:16:18:0e:af:ce:f6:87:a6:32:57:a3:46:51:5d:cb:07:27

Fingerprint (SHA-1): fc:65:58:06:4f:18:fe:a2:12:6d:c1:ea:e3:72:52:71:f6:14:ae:89
Fingerprint (SHA-256): fa:f0:d3:91:fd:05:d1:9c:ef:e4:ef:84:ff:35:79:fa:74:1b:c8:ee:88:e1:ce:3d:b3:f5:13:67:3d:68:5c:1e

Issuing Certificate URL: http://crt.sectigo.com/SectigoPublicServerAuthenticationCADVR36.crt

Revocation Information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate *.metanet.ch
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for *.metanet.ch

Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA384 with RSA
Key Usage
Key Encipherment
Digital Signature
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for *.metanet.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 101844457839520355919362963210256993403
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Public Server Authentication CA DV R36'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2026-06-18 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.metanet.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 690796198557804940603095598225286492073167017174021780751726777820477228334014938982599555644744118659873171159008783980559577646391898730694523710620490512581089525296070107939941449446465313703493694616399462376406472816788322855373575916752326936646012962641407907967877107802008759231886011903613773417282420830624254316757696562160788068049877564738155202773463010869989382000531927340017426209604049421639910042083662640706313949788060344551996199677728856179980175860094935101953669459186430219054943456611255773947910523792302270128514244292589270988958034259800357836378981607295357144336357355440192806391381071383468032223606615506733052981303694600418080859833579791861221571735635414039671775383359802095928550236847148878419115216517783457053532669027304910452406040768052427994876149621960918273136938551197154819143217623350880587784508395457443214643248630587159940684684352062771151234000486417730665700517047810415626275545815013559197125158242282789542671821515020619688723831936631233312427415091877076175732898849759124142576303765834417109328187182477084996513210090339252100096464974572540111300041256903686578139418865120907180067719042120951410987105134470577171003934262095051248693340092936236828457580667
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 68c01216180eafcef687a63257a346515dcb0727
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							752fd2b871189e16a98f27f096540925c9043861
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoPublicServerAuthenticationCADVR36.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.metanet.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metanet.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (3072 bits)
		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