com.ricardo.ch

Issued by R3

About this certificate

This digital certificate with serial number 03:8f:2b:b8:2a:38:dd:23:f6:a7:6a:25:b6:1f:06:79:26:87 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=com.ricardo.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:8f:2b:b8:2a:38:dd:23:f6:a7:6a:25:b6:1f:06:79:26:87
Serial Number (int): 310055349307782082124486354934518523700871
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 41:e7:96:1e:76:4e:93:24:07:18:04:8c:84:5f:7c:5b:2d:5c:73:3d
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): a5:b3:7c:66:7d:22:4f:5f:c4:26:14:07:bf:24:23:1a:3f:c3:c8:a3
Fingerprint (sha256): 04:c3:d2:d9:92:48:07:19:99:0f:0e:1b:0d:8b:9b:66:fe:51:fc:eb:6c:20:b9:e7:77:d1:8b:eb:59:b5:89:77

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate com.ricardo.ch

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for com.ricardo.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

com.ricardo.ch

Other certificates including the domain name ricardo.ch

(limited to 100 certificates)
winterthur.fr.ricardo.ch
kafka-proxy.ricardo.ch
kafka-proxy.ricardo.ch
elk-legacy.internal.ricardo.ch
status.proxsis.co.id
cdn.ricardo.ch
ricardo.ch
careers.ricardo.ch
website-status.ametek.com
status.melodydns.com
status.procertified.health
status.potsportal.com
status.brytecall.com
status.trizettoconnect.com
communication.ricardo.ch
com.ricardo.ch
news.ricardo.ch
careers.ricardo.ch
status.hykucommons.org
networkstatus.infogrosp.co.za
careers.ricardo.ch
website-status.ametek.com
com.ricardo.ch
help.ricardo.ch
trust.ricardo.ch
blogue.ricardo.ch
status.hykucommons.org
irpstatus.streamlineit.ca
irpstatus.streamlineit.ca
status.placepay.com
info.ricardo.ch
monitoring.sicktech.online
info.ricardo.ch
irpstatus.streamlineit.ca
login.ricardo.ch
status.verisma.com
communication.ricardo.ch
status.uk.deptagency.com
images.ricardo.ch
o.ricardo.ch
status.constantedge.com
cdn.ricardo.ch
haendler.auto.ricardo.ch
info.ricardo.ch
status.apec.psiexams.com
help.ricardo.ch
status.trizettoconnect.com
vv.ricardo.ch
status.tapmango.com
status.savantx.io
info.ricardo.ch
kafka-proxy.ricardo.ch
news.ricardo.ch
my.ricardo.ch
info.ricardo.ch
auto.ricardo.ch
login.ricardo.ch
monitor.yourcolo.com
o.ricardo.ch
o.ricardo.ch
status.hykucommons.org
info.ricardo.ch
irpstatus.streamlineit.ca
kafka-proxy.ricardo.ch
com.ricardo.ch
elk-legacy.internal.ricardo.ch
status.verisma.com
careers.ricardo.ch
universify-status.mehulbaid.in
cdn.ricardo.ch
status.microtronix-tech.com
info.ricardo.ch
status.hykucommons.org
com.ricardo.ch
info.ricardo.ch
status.tapmango.com
cdn.ricardo.ch
status.freeformfuture.com
communication.ricardo.ch
communication.ricardo.ch
cdn.ricardo.ch
careers.ricardo.ch
universify-status.mehulbaid.in
info.ricardo.ch
info.ricardo.ch
help.ricardo.ch
status.popsmash.com
vv.ricardo.ch
communication.ricardo.ch
status.sclqld.org.au
www.ricardo.ch
cdn.ricardo.ch
o.ricardo.ch
winterthur.ricardo.ch
communication.ricardo.ch
o.ricardo.ch
status.taggun.io
status.sohwatt.com.sg
wesure-wp.noc.cloudi.cloud
com.ricardo.ch

Certificate

The complete raw certificate details for com.ricardo.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIE5zCCA8+gAwIBAgISA48ruCo43SP2p2olth8GeSaHMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzEwMTkyMjE3NTVaFw0yNDAxMTcyMjE3NTRaMBkxFzAVBgNVBAMT
DmNvbS5yaWNhcmRvLmNoMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA
uHLUy7PnQZtMm05PP5T7dbKILi0g9SyAbs0sWRaPF9hJ6h4qk1e7MCzvr0Oll2X+
EcUrGOmY6TVTIhYJzMAjXybd7UUyYS3fKI3rsJ+xjDfhxfoEk7SX+CadH3u7+hkU
Ov9DKXmQ0JfcIA/ZZqmasFDLLCANzcF86L0KblUELIJH7tBHsYzpSmSooKetj2is
TrLZq03Q31vU4sX10ZuHoBDdXP/7Fr2WpgH+3s7UqJHVPNN776oITH2ktdx6Ylsw
GuKf+sGFUyVS8AwmRWIoBqGdOwZhwNBYgVdgZL6eOMYGuFYDoIhYZaEnPvjImcP6
7YXQQgsISQGPPwm0MWjP0wIDAQABo4ICDjCCAgowDgYDVR0PAQH/BAQDAgWgMB0G
A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1Ud
DgQWBBRB55Yedk6TJAcYBIyEX3xbLVxzPTAfBgNVHSMEGDAWgBQULrMXt1hWy65Q
CUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0dHA6Ly9y
My5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVuY3Iub3Jn
LzAZBgNVHREEEjAQgg5jb20ucmljYXJkby5jaDATBgNVHSAEDDAKMAgGBmeBDAEC
ATCCAQIGCisGAQQB1nkCBAIEgfMEgfAA7gB2ANq2v2s/tbYin5vCu1xr6HCRcWy7
UYSFNL2kPTBI1/urAAABi0o7NLUAAAQDAEcwRQIgRlQiKqxl7qty6JDtyY7zk0XV
M09WfHApQGm2wqXHDvMCIQC55kzemqE+21AAQ6z4sRvvVx5DP7TEVLNEUleYMRE7
TQB0ADtTd3U+LbmAToswWwb+QDtn2E/D9Me9AA0tcm/h+tQXAAABi0o7NKgAAAQD
AEUwQwIfFPI5r+aSKE/6Qf9XokKdyFDDeuxfNAr2JEG0x758fQIgBsMbUgluD5cR
Ekyl1AOsSO1vpQL0gDJr9OVaMvo5z+8wDQYJKoZIhvcNAQELBQADggEBABa1Bcrm
RwHsrgve7/oIYDm4L5OVilYcDMNCtwVSj+qFG5AbRYq+FCE+nUlNsgQ7mkL/d9R1
GexK03HJlFcgYm5YkQzBAl8Mv945ZLs8qKM3udz8h0GsI1u/vW6mit3ZOD081rUL
+6NIxPqWpjV+jBo0lJEIelxDb2l+BpaKwrpaMHP5jB5FURImfdifP8zCutyOWQVd
P4f57vtK7YI8SNw/nyma3FMth24zEJ2eurdqYSLcmnXYAVlmmceEhRJhuZRt4MMy
v6DNDkxFHU8NvP+LjeZX9NGjXoqlib/pWBTyCHFiWX4+th1LVVUIJTavPkUyRZS2
5RJDe4Js/JLOUy8=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHLUy7PnQZtMm05PP5T7
dbKILi0g9SyAbs0sWRaPF9hJ6h4qk1e7MCzvr0Oll2X+EcUrGOmY6TVTIhYJzMAj
Xybd7UUyYS3fKI3rsJ+xjDfhxfoEk7SX+CadH3u7+hkUOv9DKXmQ0JfcIA/ZZqma
sFDLLCANzcF86L0KblUELIJH7tBHsYzpSmSooKetj2isTrLZq03Q31vU4sX10ZuH
oBDdXP/7Fr2WpgH+3s7UqJHVPNN776oITH2ktdx6YlswGuKf+sGFUyVS8AwmRWIo
BqGdOwZhwNBYgVdgZL6eOMYGuFYDoIhYZaEnPvjImcP67YXQQgsISQGPPwm0MWjP
0wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 310055349307782082124486354934518523700871
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-19 22:17:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-17 22:17:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'com.ricardo.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23284473505331184644612953535924349263298198121038354725735733721256611450897571146172862185042185580106918798942706705732314190908916322002626107156334250274014456513042043969088387210792729418457724786949402537211349137033359632288592523589695852339055109569053865022664040602246214575432590036621954827056849923407876262174145542104990085889037389510179564193366569420935959886615173201332075418115704433562435270133365538864902266252942067078599249853403107595770603128660272764457353556708981286897139497841230442786903305303795954876392723898569059767946329861449943199796388199757534779064999898919269950869459
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							41e7961e764e93240718048c845f7c5b2d5c733d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'com.ricardo.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b4a3b34b5000004030047304502204654222aac65eeab72e890edc98ef39345d5334f567c70294069b6c2a5c70ef3022100b9e64cde9aa13edb500043acf8b11bef571e433fb4c454b34452579831113b4d0074003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018b4a3b34a80000040300453043021f14f239afe692284ffa41ff57a2429dc850c37aec5f340af62441b4c7be7c7d022006c31b52096e0f9711124ca5d403ac48ed6fa502f480326bf4e55a32fa39cfef
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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