support.migros.ch

Issued by R3

About this certificate

This digital certificate with serial number 04:e9:68:7a:ff:b3:36:51:16:fd:38:55:94:0d:95:83:e8:45 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=support.migros.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:e9:68:7a:ff:b3:36:51:16:fd:38:55:94:0d:95:83:e8:45
Serial Number (int): 427873813577611121316528722338227616475205
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: f7:ba:8b:23:b6:19:7c:d5:c1:86:d1:ee:15:a2:dc:dd:af:d8:54:c7
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): d4:27:2c:ca:fd:5e:ac:36:13:2d:40:58:c4:d2:c3:d9:6a:b2:2b:26
Fingerprint (sha256): 03:28:6d:40:45:2a:69:71:ea:34:4b:9b:70:81:9b:8f:14:0b:3f:ec:8b:d9:54:8a:4e:af:b7:b3:a1:9f:cb:56

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate support.migros.ch

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for support.migros.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

support.migros.ch

Other certificates including the domain name migros.ch

(limited to 100 certificates)
secure03.stage.lithium.com
commentmatch.m-budget.migros.ch
secure06.lithium.com
mitarbeiteranlass.events.migros.ch
rsc.migros.ch
staging.prod.pema-coupons.mdb.migros.net
test-basel.migros.ch
secure06.lithium.com
photoset.widgets.migros.ch
secure03.stage.lithium.com
migusto.migros.ch
aus-der-region.migros.ch
test-mgo-api.migros.ch
secure03.stage.lithium.com
gmaare.elearning.migros.ch
meineidee-ext-s.gmsap.migros.ch
famigros.migros.ch
perimeter-dmz1-meineip.migros.ch
api.migros.ch
cadismobile.migros.ch
test-hybrid-app.migros.ch
pos-coupons-api.migros.ch
storybox.migros.ch
dev-basel.migros.ch
support.migros.ch
test-web-api.migros.ch
inveco-s.gmsap.migros.ch
konsumententagung.migros.ch
test-mom.migros.ch
portal.migroszh.ch
login.migros.ch
m-learning.migros.ch
secure03.stage.lithium.com
ca.status.clio.com
e3mobilege-test.gmge.migros.ch
photoset.widgets.migros.ch
staging.qual.mam.mdb.migros.net
admin.operations.migros.ch
mymigros.ch
m-learning-t.migros.ch
yellowworldtest.migros.ch
test-mobile-app-api.migros.ch
corporate.migros.ch
recipeapi-t.gmsap.migros.ch
mcrm.migros.ch
test-socialmedia.migros.ch
meineidee.gmsap.migros.ch
connect.gmz.migros.ch
mcds.migros.net
ucb10testews.migros.ch
live.qual.kms-portal.mdb.aws.migros.ch
dev-migipedia-backend.migros.ch
bb2status.mambu.com
storybox.migros.ch
test-help.migros.ch
*.gmaare.migros.ch
quiz-adr.migros.ch
secure06.lithium.com
tiptoimania.migros.ch
secure.clubs.migros.ch
terrasuisse.migros.ch
retitest-ews.migros.ch
ins-staging.migros.ch
jobs.migros.ch
test-winwin-vonuns-vonhier.migros.ch
mein.m-budget.migros.ch
sni.cloudflaressl.com
thehost.widgets.migros.ch
allowlist.sterda.com
report-download.migros.ch
proxy-mdb.migros.ch
test-corporate.migros.ch
ca.status.clio.com
test-auth.magnolia.migros.ch
meineidee-ext-t.gmsap.migros.ch
lyncaccess.datacenter-migros.ch
dev-vaud.migros.ch
dev-cdn.migros.ch
api.migros.ch
admin.logistikplattform.migros.ch
live.prod.image-upload.mdb.aws.migros.ch
image-upload.mdb.migros.net
secure03.stage.lithium.com
cert-test.migros.ch
rc-mobile-app.migros.ch
mylogin.migros.ch
test-hybrid-app.migros.ch
p99.migros.ch
proxy-mdb.migros.ch
auth.migros.ch
ca.status.clio.com
wartung.migros.ch
staging.prod.pema-coupons.mdb.aws.migros.ch
natro.gmaare.migros.ch
impuls.migros.ch
allowlist.sterda.com
recipeapi-s.gmsap.migros.ch
m-payment.pos.migros.ch
fragments.migros.ch
ostern.migros.ch

Certificate

The complete raw certificate details for support.migros.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 427873813577611121316528722338227616475205
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-20 23:40:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-18 23:40:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'support.migros.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 861571672945362056583034520820583136685148488847416664578340822037399937134142071028897970257342752782781006483642830616502559209554019946252988460283211510162942811210513368229921766589830029694676642923741858418152095547806055384542417286660848312797517939874152323682543681548088382130198817204906526522813296500271959211307400265787465878024826675616108989954851056241375839866515685375210921863966041006036578679265454271665243673967743374459341520834112181596662291198468926695381146568775771844481052489174840362205473813362810535654714497131542692558076270894207618870070359381550622368406731207334745488333325140649527497695800134103033421052484865313678717527366223182229544868652403553612399108743461706941957647442150833747859150095732822181201921839566561755250280799694606446362655485608205540194610119808000548687053433109704595622371708352969295988599420135059260198302831455442419897921587917368248595262039762195862951860901317699525081528098180755564998549834674765655705423969822527731689430502231798158936185576816751313919474237242520920126467038558579645844924769651544449565655627594178567262991680648583793860702441907362676009858976772165155286585630574025004113957419861605545151093929012453753746084646813
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f7ba8b23b6197cd5c186d1ee15a2dcddafd854c7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.migros.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018bef526f570000040300483046022100e8f993c86709c45b6f2bf98e48eea9ff813a950980cb4fcbf24afc4913e08185022100ac7783bba284afa1759d6499539ee5656a193178df569287d0ea5ac7ea2855500076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018bef526f6500000403004730450220389b8c6112757e4a544333d05ebcdf12458b571943e28d65ebd0531cf419266c0221009abad00de10411377fd5f4546a116db950fa9fb1ff3d13b2b156488e8569c995
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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