DV SSL/TLS Certificate for www.wasser-waerme.ch

Certificate is witin its validity period

Issued by Let's Encrypt (R10)

About the www.wasser-waerme.ch DV SSL/TLS Certificate

This certificate with serial number 05:7f:43:ed:06:48:22:b8:2a:8e:2e:41:56:61:d5:8d:c6:67 for www.wasser-waerme.ch was issued on by Let's Encrypt.

With 2 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for www.wasser-waerme.ch provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Let's Encrypt

Organization: Let's Encrypt
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 05:7f:43:ed:06:48:22:b8:2a:8e:2e:41:56:61:d5:8d:c6:67
Serial Number (int): 478867579235243110667184542110859423237735
Serial Number Length: 139 bits, 18 octets

Subject Key Identifier: 49:f7:9b:c8:9e:93:c1:17:0c:74:a4:a9:2a:7b:5e:1b:23:0d:a3:4c
Authority Key Identifier: bb:bc:c3:47:a5:e4:bc:a9:c6:c3:a4:72:0c:10:8d:a2:35:e1:c8:e8

Fingerprint (SHA-1): b6:bf:fe:42:f1:1b:5e:69:f8:ae:64:62:9a:60:9c:c8:cf:01:b0:51
Fingerprint (SHA-256): d0:cb:bb:e3:28:d4:da:8b:4e:01:f7:20:45:83:be:a4:c6:83:d2:9e:19:88:45:65:20:e3:99:b6:f5:19:28:a0

Issuing Certificate URL: http://r10.i.lencr.org/

Revocation Information

CRL Distribution Point: http://r10.c.lencr.org/104.crl

Check the revocation status for certificate www.wasser-waerme.ch
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for www.wasser-waerme.ch

Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for www.wasser-waerme.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGFzCCBP+gAwIBAgISBX9D7QZIIrgqji5BVmHVjcZnMA0GCSqGSIb3DQEBCwUA
MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD
EwNSMTAwHhcNMjUwNTI3MDI1NDMyWhcNMjUwODI1MDI1NDMxWjAfMR0wGwYDVQQD
ExR3d3cud2Fzc2VyLXdhZXJtZS5jaDCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCC
AgoCggIBAM4q4XhXKPX2u1UhA+mwDFHjV9e82/dzc0kfAbhhnjv2v6U2dF32p1hk
x8chp5BMDEfW8X+leIqFgajehm4lMERpmeXiBQcVCqqFDWzBBDpHL1wbZQ6qw8Z6
IhhSIcM6IyH2cqDUXSRD5RnE9RZVaXoYpxsaX1K7PjV4OmfqjU9KjrbG5t0USYhj
qHCTDT16ZsiEf8+ApPtu7l8GQoKXX8ra2eNYPcFYMbquLZ1o4puKJfx57/64Eold
ouyarva7O3P3o4sSgviyte2V/gjl3fApLtkLM7rKmJbNIJmOEOgZ/cpCZgeKwGEF
kacRxiJUurTEhonnxZnN3a5yDXDxyQi5LSDittD/0xVdwv1uQ8lrVxLr/9kAFM+O
Yto9xMGwKobnr6ts932P/reTzcJlkmbGtcoywJoMHntpsCtibFOVds7qhO7Cb7KW
et34VALknKW9K+096WllZMFzYEGNntRKfi861zd2pVyIoHY477pfKRxKHG3ut3mr
fTb1q6jMy/gnsAMPwX56oWzpFnPI2K/iC8aV+SoR9qWNs9PsSUgbcfjGt/a3vSPg
eqrp/ved7y7uCzLpA4envsV6bKIzziNaQb6ztaQ9r+jgEUbG3zBiLciyQxc7D3Rv
SzVBcukRTHG6ORZjzzZEmlJiRFiEMDNef3zXiRfTxS//b7/fVqlrAgMBAAGjggI3
MIICMzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUF
BwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFEn3m8iek8EXDHSkqSp7XhsjDaNM
MB8GA1UdIwQYMBaAFLu8w0el5LypxsOkcgwQjaI14cjoMDMGCCsGAQUFBwEBBCcw
JTAjBggrBgEFBQcwAoYXaHR0cDovL3IxMC5pLmxlbmNyLm9yZy8wMQYDVR0RBCow
KIIQd2Fzc2VyLXdhZXJtZS5jaIIUd3d3Lndhc3Nlci13YWVybWUuY2gwEwYDVR0g
BAwwCjAIBgZngQwBAgEwLwYDVR0fBCgwJjAkoCKgIIYeaHR0cDovL3IxMC5jLmxl
bmNyLm9yZy8xMDQuY3JsMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHcADeHyMCvT
DcFAYhIJ6lUu/Ed0fLHX6TDvDkIetH5OqjQAAAGXD99OfwAABAMASDBGAiEAwq71
gSOV+1q+jbZYr4vioxecTjRzfWFFeQjYxZdTG5cCIQDVF3DHOuzpe4n3dPROpB6c
pmdtCp/FBp1C+beIrxoEQwB1AN3cyjSV1+EWBeeVMvrHn/g9HFDf2wA6FBJ2Ciys
u8gqAAABlw/fVpAAAAQDAEYwRAIgOPcjUVkEen87R47rERV1YTKUSaZi6HpEj4VG
ts6ZQ80CICovtIWXuTV4izp+sERq3+O8U4o+FATbK1lzSVWoeIqrMA0GCSqGSIb3
DQEBCwUAA4IBAQDBDFcItcQTMjLya3YJyPYUlk4LWgv1W2pRA//+de9QtlcNUd7g
A9aXSMRcrKhRdREKxUCCoo5050ztavLIB7knHmiHMysPHRbqAWoBZ6+QGd89FTIP
nYg7QUOg415Sr+AqWp+a3dheyb7N0bJ7Ftf+ayFQx9XpGZdCsiyWo5XYK+u45K9a
cbDYEISoxOkKPxMvAmdX2S3ppaLMVncIzhf0tIlbunsjS1HJ4ue9iym0BoV8BRbN
HoG8ZkUAxra0+8wEcdEKK/7YQ8EidCn72hEu2eMg5aAmckzV+8ZWBriqO9NwyC0E
kKgRJiS/iJlz3JwizVrzDMwmkjWmCpqAi3Hu
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 478867579235243110667184542110859423237735
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R10'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-27 02:54:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-08-25 02:54:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.wasser-waerme.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 841090030226098204559240473008605230866121943289108230404588419156799154076370073532930484945632946000027598743503997923875199510947209144319918543593474866707999765968974181756199112828864584178732095163910667384232736886530042138593486968130728102292005105994897513239241313718751350121144055428761165707578277665858625167525879193861996552372120887125344617426809895474430607585865465900303131852929307236254266872582915268108986324181670834427176964533150451163237963228820860845652393957916994315301686107321637751598120652437848312000520888395059859388570536669557797553542010442768557168573795452157272671762241417574831569430005684021131722960040111491055196171923775480474695758249494308210068437936575862152787500490334411380239465332433912707092711998255981952350321925355759971967690921082014503531742152794672484035032179000622113295991507075994108461922737360097420873162549260684067753523650598581483810720520069034154585075257237653563788280572006219047364404687721102308842228199513056192282648911175635649428737323034638861892953468608192308300426078756011172881817128158557383556541526738505663665575529705416084879677668205558984262314203899161916933080476998733573626454197550636335451920654809356446259777808747
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							49f79bc89e93c1170c74a4a92a7b5e1b230da34c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName bbbcc347a5e4bca9c6c3a4720c108da235e1c8e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wasser-waerme.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wasser-waerme.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.c.lencr.org/104.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077000de1f2302bd30dc140621209ea552efc47747cb1d7e930ef0e421eb47e4eaa34000001970fdf4e7f0000040300483046022100c2aef5812395fb5abe8db658af8be2a3179c4e34737d61457908d8c597531b97022100d51770c73aece97b89f774f44ea41e9ca6676d0a9fc5069d42f9b788af1a0443007500dddcca3495d7e11605e79532fac79ff83d1c50dfdb003a1412760a2cacbbc82a000001970fdf56900000040300463044022038f7235159047a7f3b478eeb11157561329449a662e87a448f8546b6ce9943cd02202a2fb48597b935788b3a7eb0446adfe3bc538a3e1404db2b59734955a8788aab
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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