brigittehirsig.ch

Issued by R3

About this certificate

This digital certificate with serial number 04:69:ef:7c:36:a0:bd:f6:ed:3b:3a:d2:a1:b3:5c:12:ae:a1 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=brigittehirsig.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:69:ef:7c:36:a0:bd:f6:ed:3b:3a:d2:a1:b3:5c:12:ae:a1
Serial Number (int): 384497122697527994244773688752748503412385
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 98:c2:fb:0f:30:9f:51:33:b5:c4:4a:0d:ab:64:0b:13:d9:30:2f:2e
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 43:e3:f9:ec:4b:84:ac:e1:e8:3f:d7:ce:69:cf:34:41:b0:31:58:db
Fingerprint (sha256): 02:e1:dc:ac:04:38:d1:6b:90:96:f3:da:81:2a:8c:20:6b:c1:bb:31:cc:3a:56:43:90:20:17:cf:35:fb:a8:a1

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate brigittehirsig.ch

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for brigittehirsig.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

brigittehirsig.ch
www.brigittehirsig.ch

Other certificates including the domain name brigittehirsig.ch

(limited to 100 certificates)
www.brigittehirsig.ch
brigittehirsig.ch
brigittehirsig.ch
brigittehirsig.ch
www.brigittehirsig.ch
www.brigittehirsig.ch
brigittehirsig.ch
brigittehirsig.ch
www.brigittehirsig.ch
brigittehirsig.ch
brigittehirsig.ch
brigittehirsig.ch
www.brigittehirsig.ch
brigittehirsig.ch
brigittehirsig.ch
www.brigittehirsig.ch
brigittehirsig.ch
www.brigittehirsig.ch
brigittehirsig.ch
www.brigittehirsig.ch
www.brigittehirsig.ch
brigittehirsig.ch
brigittehirsig.ch
brigittehirsig.ch
www.brigittehirsig.ch
www.brigittehirsig.ch
brigittehirsig.ch
brigittehirsig.ch
www.brigittehirsig.ch
www.brigittehirsig.ch
www.brigittehirsig.ch
brigittehirsig.ch

Certificate

The complete raw certificate details for brigittehirsig.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGPzCCBSegAwIBAgISBGnvfDagvfbtOzrSobNcEq6hMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzAxMDQwNDE3NTRaFw0yMzA0MDQwNDE3NTNaMBwxGjAYBgNVBAMT
EWJyaWdpdHRlaGlyc2lnLmNoMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKC
AgEAv5AV1nRDRuc+DwmsYOkPVPbkHuwKkvwmMkE8480XKmThYyCGao2Nwvatx9b4
m9QjmOdPaH/lnnVyj/PtaL7nkJk9xmLpUgDwbq+z1SYMqvnFug315gq9JzjFy20q
GA7fpBZ+U85VrODd+R+mLhSW1XVtxTQpFiTljcbmweLwJ0gjESu2zTXO7OnLE3LQ
k47wkuPwQvSKOvfRLr5Md1goULKadAYSspFLIA7APXHrBiGvQtD9xVAPsCAiTsZQ
J38noy3HUbPRFxXWm5Xz7NECsS34DpVclBlu0b0Y2SJ5UtnvxwdPtrrYx8s3JFs5
suI9QobQdlBFZypw09lFASwzkYuM6SmpL/Vr3wFzdnrwlgJLktEci4IZsLTIGUWi
olLfpVZtStMdo2sEwUUq7aUIE8eM06uY4bfbJ5fh3so8hL3vv5MPe3qxkHWjh6Qa
/oUDmsd3jWaFVtseg6AsGbocFxm0SIxSkpK8dqp+Y3jG6K5PnNQ622RVfrv453xH
LqokKMJii4Fj9kr9dY41Lc3UTEnacXfIlWV9hZBfmDk3dqHa6s/BKcq6JNMUz7VC
VHK5RMidqJEjBk2tvdxcsXngDqHrn8b49fu9Yjxvmz0/SPQXGCyzxP14JTKQRMRv
5Cd0MCDT0CD9Nm5fyQtPiE0XfgDq5FXheSfPzWmKNKCfzi0CAwEAAaOCAmMwggJf
MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIw
DAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUmML7DzCfUTO1xEoNq2QLE9kwLy4wHwYD
VR0jBBgwFoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEG
CCsGAQUFBzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0
dHA6Ly9yMy5pLmxlbmNyLm9yZy8wMwYDVR0RBCwwKoIRYnJpZ2l0dGVoaXJzaWcu
Y2iCFXd3dy5icmlnaXR0ZWhpcnNpZy5jaDBMBgNVHSAERTBDMAgGBmeBDAECATA3
BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNy
eXB0Lm9yZzCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB3AHoyjFTYty22IOo44FIe
6YQWcDIThU070ivBOlejUutSAAABhXs264UAAAQDAEgwRgIhAJEMg1dXfAHO9Yyx
H304q3BP/Za8lJAcuVC22ScJuQu+AiEAv5Cw4u5Ea1pAkU++s44TlHsdg/0k5AIU
jpht0HpPqJ4AdQDoPtDaPvUGNTLnVyi8iWvJA9PL0RFr7Otp4Xd9bQa9bgAAAYV7
Nu1hAAAEAwBGMEQCIEMbjImSQUl6SrWUTiBx3PmIgauqSBjQWpGBKz/YRl59AiB7
GB7zs19zcFhV/A2vPJutfA3RqGYfHhtTgUA8YRLq9jANBgkqhkiG9w0BAQsFAAOC
AQEAisrYNYoybzx8YwgpS5FSTrHa1MRqK1HyRxPeZKxFLbpP7SJ/uD9+f4+4+1ZO
2u9fwXmbZaCmxZ3DLOsV0rnGdON06IMIxWs2A++IgH4TTSYkECwKnUZ7b2KPatld
jUl/VBoe/NCe/A6bpQeQhlpc+I4Xp25D2jtdRKQE8laKzTThAyG77Z6SeaVQNvW5
+oOMusUwiPzuvgSEjh+VYbEgho6dWGdUYK1r6Wpyyu10kOWytNmBCa0yN+7+4G/e
NTZrPb1zZFfi+R5WYdKFppaAqUoKKulmIffC2om5GLMiew5GV7pwWIIzJuM1rV84
td33aP/hvC9ENTCRksAKzwmr0Q==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 384497122697527994244773688752748503412385
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-04 04:17:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-04 04:17:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'brigittehirsig.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 781508176187001031421849773946422835711318459305521533073809459003346826053823536102341043577065134245837837135113096149030104053421507971848992702297026985449543401466983552672709953825762095473347600040910772812349766303981145780650988569548254317908336173728743406773280597607685504148985899120330675765195938468506462621402404046288860313497921930669447911686074223731366834702013938553485172077203593618605907915127477742008391579204243745325450668429450195953933447194308031182642385803203216972173761214086680478919948681651306885935155117884688385465515189771679812473326823841010778031100350625863119045860358728900596694693669352516174555184560840920040824880360198042528762404542609145959833397583634195968495489994957130619471985274633440054221613894958079280329533371171380569297123055722989000373906297273612498373543152920111147499944894942681519785700496508630588817816931565270393284291880995706281632046193302681239539623982598732401105987383390529596094408401077634565147496279573202574873123275800510382232749717873948667684895999161622532878455759156858552726070098956040330707317531856231545775004274909521559445364185565841721504885347555975378434302277762395151389039108495706245915797214113709206221059247661
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							98c2fb0f309f5133b5c44a0dab640b13d9302f2e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brigittehirsig.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brigittehirsig.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001857b36eb850000040300483046022100910c8357577c01cef58cb11f7d38ab704ffd96bc94901cb950b6d92709b90bbe022100bf90b0e2ee446b5a40914fbeb38e13947b1d83fd24e402148e986dd07a4fa89e007500e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e000001857b36ed6100000403004630440220431b8c899241497a4ab5944e2071dcf98881abaa4818d05a91812b3fd8465e7d02207b181ef3b35f73705855fc0daf3c9bad7c0dd1a8661f1e1b5381403c6112eaf6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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