DV SSL/TLS Certificate for spitexsense.ch

Certificate is witin its validity period

Issued by Let's Encrypt (R10)

About the spitexsense.ch DV SSL/TLS Certificate

This certificate with serial number 06:6a:04:0e:d9:dd:27:e1:51:b2:37:58:d5:78:37:61:27:55 for spitexsense.ch was issued on by Let's Encrypt.

This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for spitexsense.ch provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Let's Encrypt

Organization: Let's Encrypt
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 06:6a:04:0e:d9:dd:27:e1:51:b2:37:58:d5:78:37:61:27:55
Serial Number (int): 558749040507124766375496060141868352087893
Serial Number Length: 139 bits, 18 octets

Subject Key Identifier: 53:e5:6d:4d:69:6f:73:95:b0:bb:c0:8f:93:2f:2a:60:5c:96:1e:23
Authority Key Identifier: bb:bc:c3:47:a5:e4:bc:a9:c6:c3:a4:72:0c:10:8d:a2:35:e1:c8:e8

Fingerprint (SHA-1): 77:ba:e3:71:64:a6:f4:ff:29:ed:14:57:3b:b3:54:4f:5a:5d:5c:9d
Fingerprint (SHA-256): a5:29:ed:52:71:d9:77:63:84:0b:b6:c0:6d:94:47:cc:69:8b:5d:f6:9d:7e:2a:df:0d:8a:3b:29:3a:11:a7:cd

Issuing Certificate URL: http://r10.i.lencr.org/

Revocation Information

CRL Distribution Point: http://r10.c.lencr.org/86.crl

Check the revocation status for certificate spitexsense.ch
1
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for spitexsense.ch

Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

spitexsense.ch

X.509 Certificate

The complete raw X.509 certificate details for spitexsense.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 558749040507124766375496060141868352087893
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R10'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-07-01 02:42:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-09-29 02:42:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'spitexsense.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 730000435032326778164234866707258171828735209933526296993440515156591025744389689404889691156731190575902449681985179386815115344903092425386947860981574002849250769523182012641178445743762628426582603616210271779693929607800283328002226653214439020853798944753113989987740359185876851903969324738545076621098700533748474051998351067772499150825309017125033369437774936498955054508690438878652790654440425612089680275898255871753274896384599915697687895900974643604635277680803076951850411812822227314949779527351884544521242296271958483040336594408249411703651179237726072909749582620194165345148955762369284199825388973414004620732048469298427131868852277193884733748007190592888746251261583200032898194282285517036097448889857309371248547628508942260694897074126393058300186635610831216133088266456942970536795944314860696995888704352349799752402961201096434677227069367219459551182499625519915526794255003005887713441827638651354760143411394096808187631758219727240040085178361209773714478508211920969773787432443145614905901864813163191788199072927520309871031412072966350941260271451002101486851717876035943767318709435295905519297155311766211750295031839818235374861159944069600633402868082443256216388151949827681903904349847
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							53e56d4d696f7395b0bbc08f932f2a605c961e23
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName bbbcc347a5e4bca9c6c3a4720c108da235e1c8e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spitexsense.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.c.lencr.org/86.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700ed3c4bd6e806c2a4a20057dbcb24e23801df512fedc486c5700f20ddb73e3fe000000197c413432400000403004830460221008424e92255bf48d78712769f5c7e0257d1afc5a2e6a34d381d1deeb6d71ea8e1022100ec68b542a3b1b60e341c4fe01d6689679a0f859d2f4b2e59e4ddce38046b8e3d0076001a04ff49d0541d40aff6a0c3bff1d8c4672f4eecee234068986b17402edc897d00000197c4134319000004030047304502205343da020ee7574ae192815bbc03c7d950f82821d520650ac060b0dc6a2dc3b0022100820309d82b8a863c1508d53781f4043b5297a4a3fafd1ab012eb48fd66571696
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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