pv.mailing.railaway.ch

Issued by R3

About this certificate

This digital certificate with serial number 03:9b:1c:b0:db:85:b8:0f:b9:51:71:fa:62:c0:e5:6d:96:ea was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=pv.mailing.railaway.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:9b:1c:b0:db:85:b8:0f:b9:51:71:fa:62:c0:e5:6d:96:ea
Serial Number (int): 314118761348597294615746290667342133040874
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a0:c7:c4:77:6e:b2:79:75:f9:38:4a:fb:d1:27:7f:2c:2f:6d:45:d4
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): d8:8f:2a:4a:b8:43:31:62:f6:3a:ce:3c:e0:5b:60:08:cc:1c:8b:70
Fingerprint (sha256): 02:f5:bc:90:ee:e7:57:4f:3f:ab:49:cd:47:d7:e5:ff:4a:a9:5e:77:a0:eb:ea:02:97:c2:6a:7c:06:73:ae:8f

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate pv.mailing.railaway.ch

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pv.mailing.railaway.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

pv.mailing.railaway.ch
pv.mailing.sbb.ch
pv.mailing.sbbpolice.ch

Other certificates including the domain name railaway.ch

(limited to 100 certificates)

Certificate

The complete raw certificate details for pv.mailing.railaway.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 314118761348597294615746290667342133040874
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-30 03:46:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-28 03:46:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pv.mailing.railaway.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 803623489375327223308719714089629508989413939610829366232405377326122911439919093024472064759402559817832457305982546608202664828745675138083766580116867709699570489819235028452150717375282201507087070919208857417285413420791403220614709287193008877900966404616703248436348605385811049741839064979594298728735803708018888104261185622118007649662541345852664076156508181893387685445405599054098563886849789337989262629269892829583222218391006467926967747160401199865669140616432637488912949485280745537613253198334450523770146945481169176107446501791906217231896365456648951073323302155166987237329887972037974052791667022258774046838269019709584558643042879023425430321350777646086006599970639951087339820295620921202426305394287865360814440938066081523070257576458515950279659989577377959475697506032569507889332375201170358781193669887963866744572380270787421577755469262969161124393765930551294795073293547929185083768529832570175772886952836483653755537972020617144944258503136990431164327453779412086398454863587778746147612434377198482484906925588702632796515439801052305892582332482251331738542669485290763628004030841071512416666443505400614321789557535742086795711646753986944650865916230281124243671986884750009919356781237
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a0c7c4776eb27975f9384afbd1277f2c2f6d45d4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (70 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pv.mailing.railaway.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pv.mailing.sbb.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pv.mailing.sbbpolice.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018a44c3ec83000004030046304402201d5fdc58a20c3228c29696fa95dc3017e15142b16ced7739c10250e36d530f5902203cc4fdd87d380c5dcde477f62fd281d095d7d3907853e37993e44da0f9fc1a06007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018a44c3ec75000004030047304502207f265f022f4640345a63d3e5ed03da5e12a91b2327887fb47c9cf8e2eca81c10022100fc24d4c3979189ec6b53abdfb76243ae9a2e011ec63404a7b429c49165a0ae30
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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