logging.appuio.ch

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:75:3d:b0:fc:d7:f1:b5:d0:bb:be:a7:54:8e:9f:ed:17:e6 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=logging.appuio.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:75:3d:b0:fc:d7:f1:b5:d0:bb:be:a7:54:8e:9f:ed:17:e6
Serial Number (int): 301231896605296602912439862622738231138278
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 1e:c4:ee:66:34:ae:82:90:16:1d:62:e0:15:52:9d:78:b0:0b:9a:79
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): f2:83:69:9f:e9:56:dd:dc:a0:78:92:2e:16:d1:85:17:3c:53:27:e0
Fingerprint (sha256): 03:da:bc:82:2e:01:a9:3d:40:85:94:be:3d:a0:d1:3b:35:e3:8c:58:3e:9f:61:b5:84:30:11:c7:04:dc:40:74

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate logging.appuio.ch

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for logging.appuio.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

logging.appuio.ch

Other certificates including the domain name appuio.ch

(limited to 100 certificates)
register.appuio.ch
logging.appuio.ch
logging.appuio.ch
letsencrypt.appuio.ch
console.lab.appuio.ch
logging.appuio.ch
charts.appuio.ch
logging.appuio.ch
console.appuio.ch
metrics.appuio.ch
register.appuio.ch
registry.appuio.ch
metrics.appuio.ch
console.appuio.ch
console.appuio.ch
console.appuio.ch
registry.appuio.ch
test.appuio.ch
community.appuio.ch
status.appuio.ch
community.appuio.ch
charts.appuio.ch
registry.appuio.ch
registry.appuio.ch
docs.appuio.ch
forum.appuio.ch
logging.appuio.ch
logging.appuio.ch
registry.appuio.ch
appuio.ch
registry.appuio.ch
console.appuio.ch
console.lab.appuio.ch
register.appuio.ch
letsencrypt.appuio.ch
letsencrypt.lab.appuio.ch
console.appuio.ch
docs.appuio.ch
appuio.ch
registry.appuio.ch
console.lab.appuio.ch
console-lab-aws-eu-central-1.appuio.ch
registry.appuio.ch
registry.appuio.ch
metrics.appuio.ch
registry.appuio.ch
metrics.appuio.ch
metrics.appuio.ch
appuio.ch
appuio.ch
console.appuio.ch
status.appuio.ch
console.appuio.ch
console.lab.appuio.ch
control.vshn.net
console.lab.appuio.ch
register.appuio.ch
registry.appuio.ch
console.appuio.ch
console.appuio.ch
metrics.appuio.ch
logging.appuio.ch
community.appuio.ch
logging.appuio.ch
console.lab.appuio.ch
test.appuio.ch
metrics.appuio.ch
registry.appuio.ch
console.appuio.ch
registry.appuio.ch
console-dcs1.appuio.ch
appuio.ch
metrics.appuio.ch
console.appuio.ch
registry.appuio.ch
docs.appuio.ch
community.appuio.ch
logging.appuio.ch
logging.appuio.ch
console.appdirect-prod.appuio.ch
appuio.ch
status.appuio.ch
console.appuio.ch
console.appuio.ch
console.appuio.ch
appuio.ch
console.appdirect-prod.appuio.ch
logging.appuio.ch
metrics.appuio.ch
appuio.ch
status.appuio.ch
appuio.ch
logging.appuio.ch
status.appuio.ch
console.lab.appuio.ch
console.appuio.ch
status.appuio.ch
console-dcs1.appuio.ch
status.appuio.ch
forum.appuio.ch

Certificate

The complete raw certificate details for logging.appuio.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 301231896605296602912439862622738231138278
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-25 09:02:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-25 09:02:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'logging.appuio.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 930619673629224622671426953893560166998298999474361993896108231214649475207751979875181344360128539693919691306477220459962748346527421601161477702867493972001881033804362275052650821019571177977406388834978464041081499000598407780152064012557370802857830498255558415027096298766410099448604738803283006359954429637488944877701779489493731447310340181893520723611960215863224985194614659208206345054126522175915892552474408587434436769386595238671335480219742392871545182254101540283828713883535321415601315296284575526178085002514773830298092071677155392947748287159438660445246923445842351435621707389743077627170491389871879647134039711457688183905498118637886888801188912882110776897364303659122247592206075793319903222459853476822232368687162117654241224183721318593249804956072016585622233453429724132557388993471043476906808977721974714164712221750925518407850782817502523590668238777082318302058963896761966513568262187636881316498949441135103898026146404212287922879343576051145830180889669661462163124862919537987512280777680375899605485341100281175521855947083977978712254525668539213028578754297182401269070534056175542547231801716045436556019594193070531417737019802475274108673585619182644024203250149911140793533444591
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1ec4ee6634ae8290161d62e015529d78b00b9a79
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'logging.appuio.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe000001688475b0a40000040300463044022065e311d71bfc12b8b49c4fcf1fa2730a325db10182ffa0a83b25f94fb66fb31c02207e95b5ef477649dc4334f85893d5514ae5a512cb3f82f37e8529fa3c55ec6a1600750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d000001688475aeae000004030046304402201f0331b862b954b12633c42cf89fe86eb1c4d04fe00c8d9a00d1ae72a8095a9b02206d62b209841ba4105657cabb233ec44863170016186f6a1e9d56d671eecda32b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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