DV SSL/TLS Certificate for aziendapedretti.ch

Certificate is witin its validity period

Issued by Let's Encrypt (R11)

About the aziendapedretti.ch DV SSL/TLS Certificate

This certificate with serial number 06:ec:9a:e3:f3:52:d7:16:64:0a:e9:da:56:03:a8:bf:60:87 for aziendapedretti.ch was issued on by Let's Encrypt.

With 2 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for aziendapedretti.ch provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Let's Encrypt

Organization: Let's Encrypt
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 06:ec:9a:e3:f3:52:d7:16:64:0a:e9:da:56:03:a8:bf:60:87
Serial Number (int): 603186238881829531066841843095744607641735
Serial Number Length: 139 bits, 18 octets

Subject Key Identifier: 7f:4b:d6:30:84:34:a9:0b:e2:14:5f:59:eb:15:86:f9:0a:7f:59:ef
Authority Key Identifier: c5:cf:46:a4:ea:f4:c3:c0:7a:6c:95:c4:2d:b0:5e:92:2f:26:e3:b9

Fingerprint (SHA-1): 5d:7a:b7:96:c6:cc:74:a4:29:95:fa:f9:d6:e2:3c:c2:b3:ae:49:4a
Fingerprint (SHA-256): 9f:1d:cc:37:a0:54:2f:00:83:bb:ba:dc:07:69:39:af:13:e2:fa:7b:ff:33:49:ab:4e:59:b6:51:43:13:82:5e

Issuing Certificate URL: http://r11.i.lencr.org/

Revocation Information

CRL Distribution Point: http://r11.c.lencr.org/8.crl

Check the revocation status for certificate aziendapedretti.ch
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for aziendapedretti.ch

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for aziendapedretti.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0G2w5Oa2pxooy6naj2IL
V83iF+rL/W81byxbPGqz9EHXWlwWEWKw1VnEB/SYgvWXeei0yyLdSitj5dy2ycKT
uoyMhOcoRtXuyFMTyylzCvXKoOtnj/GPf5tkVej8Z4yzf0Bz6HByLTb7A/yA05RP
2XmQqI4swY/+QIWFt4EiGNOVEKHYbzYgC8m9j1iTY5dvBlhlvKZj7LIGZESdHJIk
9l/DcvoA1eeWh0jbqd8Z5eFwNnmDssptsnJBY+/YltsHDG0rQOccThUQRbEvMo5N
9KeKvEBk3jouggtJaXKKSPXamXtq9rddgagvteUQohBBoIBzdDffZJCTSGTeB8kM
sQIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 603186238881829531066841843095744607641735
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R11'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-07-10 07:27:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-10-08 07:27:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aziendapedretti.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26311658077453860428406401571558704145038352869339967746419268963176031544306906243220179170415778345131701414709631851884556167784619269607310737284529000495647219203417592316190234093955682444704456796365780622455318934206446754877731215947014648468977690167718690125510129926558470348075868253772077893451178414009968413837647256521821088365632116087677828801610539219543023753612189925253292527122837177144619025023329530082750852918576070068801382711474630686311610065858827880422058353309261798449356284531487221744686666943537315389631141076450895405864137246757818133899676221929267248287749712217704288029873
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7f4bd6308434a90be2145f59eb1586f90a7f59ef
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c5cf46a4eaf4c3c07a6c95c42db05e922f26e3b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aziendapedretti.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aziendapedretti.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.c.lencr.org/8.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600ed3c4bd6e806c2a4a20057dbcb24e23801df512fedc486c5700f20ddb73e3fe000000197f3712e5100000403004730450221008684609d9d5ace03ed29bb3d688bb14f231471fa032ecb3fd3cf3f04b389cbe1022010252ab111b17a3c5c75765fcd465dc8faea23eeab44f9435f32aed617cd0dc3007700dddcca3495d7e11605e79532fac79ff83d1c50dfdb003a1412760a2cacbbc82a00000197f37136620000040300483046022100b602aaaba47ddc3c949c4feadfa72732b6fcc66ca75548eaf016a4932644cca5022100a01dba941da1d2dda950dda5e961a96a8a42619ce7c5952850c2028f36a05d33
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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