q-bw.migros.net

Issued by R3

About this certificate

This digital certificate with serial number 04:b6:30:84:03:19:70:3a:46:50:ae:33:4b:d4:02:21:41:e9 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=q-bw.migros.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:b6:30:84:03:19:70:3a:46:50:ae:33:4b:d4:02:21:41:e9
Serial Number (int): 410445022896497455140639219121723319337449
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 39:43:8c:8a:7d:0c:9a:82:1b:5a:3e:3a:a9:5e:27:29:96:10:07:87
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 26:2f:e4:e8:b1:a0:ea:86:56:47:1e:c3:0e:4f:8c:d4:4d:8e:5a:d8
Fingerprint (sha256): 02:ea:25:0e:16:e7:14:67:85:f0:50:75:f4:f1:75:19:7d:60:c7:a3:4f:55:2a:b6:f7:a7:27:5b:7b:78:37:72

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate q-bw.migros.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for q-bw.migros.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

q-bw.migros.net

Other certificates including the domain name migros.net

(limited to 100 certificates)
ts.mobile.migros.net
ukasolutions-migrosindustrie.migros.net
live.dev.image-upload.mdb.migros.net
idm-qual.migros.net
parkcontrol.migros.net
ext-pi.migros.net
sfd.migros.net
kuva-test.migros.net
staging.prod.pema-coupons.mdb.migros.net
awds.migros.net
qim-appl-supp.migros.net
wsdwh.migros.net
qual.sfd.migros.net
svn.cwi.migros.net
jira.migros.net
artikelstamm.migros.net
d21.mindustry-test.migros.net
q-bw.migros.net
sts.migros.net
m-packaging-bw06.migros.net
wp2.migros.net
test-bivrost.migros.net
staging.qual.mam.mdb.migros.net
neops.migros.net
pim-supp-qual.migros.net
m-packaging-bw04.migros.net
zeugnis.migros.net
zeugnis-sts.migros.net
streaming.migros.net
mcds.migros.net
mlsplus-s.migros.net
mlsplus-t.migros.net
dsapbemignept.migros.net
ltopex-supplier-test.migros.net
sim-report.migros.net
owa.migros.net
intranet.migros.net
smslogin.migros.net
accountant-mpay.migros.net
d-onemindsolman.migros.net
api.idm.migros.net
sso-maps.migros.net
industry-test.migros.net
qual.ts.mobile.migros.net
assets.migros.net
image-upload.mdb.migros.net
finanzarchiv-test.migros.net
epass.migros.net
p99.migros.ch
sapp22.migros.net
sfd.migros.net
p58.mindustry.migros.net
mls-connect.migros.net
ra-sense-test.migros.net
outlook.migros.net
mobilemaps-q.migros.net
ewf.migros.net
d-hr-portal-d30.migros.net
lb-service-url.migros.net
pim.migros.net
hr-portal-p30.migros.net
q-mepcis.migros.net
voucher.migros.net
staging.dev.pema-coupons.mdb.migros.net
login-corp.migros.net
api.commit.migros.net
tagetik.migros.net
parkcontrol.migros.net
octane-uboot.migros.net
cumulus.migros.net
assets.migros.net
helpline.prod.migros.net
obsonis.migros.net
pos-upload-test.migros.net
staging.prod.kms-portal.mdb.migros.net
srm.migros.net
pim-q.migros.net
ctx.migros.net
mura.migros.net
boe.q-bw.migros.net
oas-con.migros.net
login-azure.migros.net
dataintegrationhub.migros.net
d-hr-portal-d30.migros.net
qim-q.migros.net
migros.net
transfer.migros.net
pmls.migros.net
group.m-mobile.migros.net
test-mlsplus-help.migros.net
d-rechnungswesen.migros.net
idm.migros.net
sim.migros.net
ltopex-supplier.migros.net
login-schadenportal.migros.net
ra-sense-test.migros.net
suppliernet.migros.net
migrosticino.migros.net
integ.migros.net
login-schadenportal.migros.net

Certificate

The complete raw certificate details for q-bw.migros.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIE7TCCA9WgAwIBAgISBLYwhAMZcDpGUK4zS9QCIUHpMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzA2MjYwMzI1MzFaFw0yMzA5MjQwMzI1MzBaMBoxGDAWBgNVBAMT
D3EtYncubWlncm9zLm5ldDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AL1UCFvtEk/S+NKYTRH1857Uqclxm0zTTyuTxx/SVHdF/g1cBe1nkJ+BIqCZXef1
t937huBREHrksGLEUuRth89EhaK5/2UFUNwNB/uagfsPruqvzjK4k2wxNgzGhSgT
o/Q0LTG1xpQDqeGB+sl8CU+mTQWnhpb6h2+FJNj75w46I/RL1mkh00lKDOza3k9p
Ty0ghfQcUQUJshQi1IGzgouoiLflkhr/8K5Z2zfMrfyq5ueZIYltO9H8kZJ/7bHL
lRXSzalZVCb74RK77YFzJfL/u+8w7EP2Ec7aWePym/kBHtD00iBBbOY1Z+DDHfMP
xKeGwquKfWRd8gIh6uBoOwsCAwEAAaOCAhMwggIPMA4GA1UdDwEB/wQEAwIFoDAd
BgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNV
HQ4EFgQUOUOMin0MmoIbWj46qV4nKZYQB4cwHwYDVR0jBBgwFoAUFC6zF7dYVsuu
UAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8v
cjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9y
Zy8wGgYDVR0RBBMwEYIPcS1idy5taWdyb3MubmV0MBMGA1UdIAQMMAowCAYGZ4EM
AQIBMIIBBgYKKwYBBAHWeQIEAgSB9wSB9ADyAHcAtz77JN+cTbp18jnFulj0bF38
Qs96nzXEnh0JgSXttJkAAAGI9fMgRgAABAMASDBGAiEAiqdWNDe9+5KOE3XQ2Rmw
UFEo2iWYDT4TOTIj6o86OskCIQCe3e0qZC2SYgECl380s0zMh0tA0kWpSUDJA4Jh
UjIOfAB3AOg+0No+9QY1MudXKLyJa8kD08vREWvs62nhd31tBr1uAAABiPXzIFsA
AAQDAEgwRgIhAOxSUKOwR+erZK2oOj+o3EB342xWOiTC+59tiHypofVyAiEAqxZc
zfODUqjpUffwkOc6n2rnOH0NLslygbrolhHG3SgwDQYJKoZIhvcNAQELBQADggEB
AK6NwlY9D9AUmMZeOwHb42zyGlWwnFXrR7uEQH6J1gEpWtgt2NLIfzD0pDrNWHpq
ySyJELLuRFRvpTLVSTxso9zRqrouhN7GPC9HeL1+pzTLiDozO5Z+Q9EcA++jEwuJ
X+dT81hNauv99ypnCR7dm42V+9zHZlDsPD6lc95blwgqvLFx/kAeWMJQ/AYz9rqL
YAN2BHGq73BZ3E3SnMhAotSwXsPVdp4pIx3MRTDr5BrUJjy28mz4fUBYNvdb31de
b7juITji9+K51wyiTVwfOgeQdmq0dHUyzQwlI2Y/eGutxRXqQCSoGSfJImHDUomD
z51D1Fd6SyVMpaPbzU2uXlI=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVQIW+0ST9L40phNEfXz
ntSpyXGbTNNPK5PHH9JUd0X+DVwF7WeQn4EioJld5/W33fuG4FEQeuSwYsRS5G2H
z0SForn/ZQVQ3A0H+5qB+w+u6q/OMriTbDE2DMaFKBOj9DQtMbXGlAOp4YH6yXwJ
T6ZNBaeGlvqHb4Uk2PvnDjoj9EvWaSHTSUoM7NreT2lPLSCF9BxRBQmyFCLUgbOC
i6iIt+WSGv/wrlnbN8yt/Krm55khiW070fyRkn/tscuVFdLNqVlUJvvhErvtgXMl
8v+77zDsQ/YRztpZ4/Kb+QEe0PTSIEFs5jVn4MMd8w/Ep4bCq4p9ZF3yAiHq4Gg7
CwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 410445022896497455140639219121723319337449
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-26 03:25:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-24 03:25:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'q-bw.migros.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23900477684038873795050580204351430193907069857010213439000859811581235872497982294473231987121299718538733827297038769954688006219469002959216072896053862523829818953302095274190092819138723654037588321164529530741432559192696673925132879773380378788294133554055222209828619128597727725658605491219110246363804211846999267981200670998980359357276579111418382366865600750147272685446249256607807823175579416892440908272168572376352728017474868588527847636103513812960350858550072097337683377505701456383301333336100107730853951115163363866034208559310800747077143170689713943469151784504042856025870469504379438775051
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							39438c8a7d0c9a821b5a3e3aa95e272996100787
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'q-bw.migros.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000188f5f3204600000403004830460221008aa7563437bdfb928e1375d0d919b0505128da25980d3e13393223ea8f3a3ac90221009edded2a642d92620102977f34b34ccc874b40d245a94940c903826152320e7c007700e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000188f5f3205b0000040300483046022100ec5250a3b047e7ab64ada83a3fa8dc4077e36c563a24c2fb9f6d887ca9a1f572022100ab165ccdf38352a8e951f7f090e73a9f6ae7387d0d2ec97281bae89611c6dd28
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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