media-news.axa.ch

Issued by R3

About this certificate

This digital certificate with serial number 03:ed:9e:0a:17:03:d4:ae:85:6e:a3:3d:c1:b1:68:09:fa:33 was issued on by Let's Encrypt.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=media-news.axa.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:ed:9e:0a:17:03:d4:ae:85:6e:a3:3d:c1:b1:68:09:fa:33
Serial Number (int): 342193849168644685013708164993568427604531
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 24:b6:c8:26:bd:2a:15:7e:cc:fc:ef:b5:ac:6c:9f:07:7e:bf:8d:92
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ee:b8:70:6d:fe:6e:87:7d:bb:cf:b8:be:bf:ca:6b:ff:ce:95:41:0b
Fingerprint (sha256): 05:f3:d7:a4:d9:07:17:1e:f3:be:47:fd:dd:7c:b5:15:48:9f:64:a6:90:d5:86:df:e1:f1:5c:72:92:e9:59:d6

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate media-news.axa.ch

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for media-news.axa.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

media-news.axa.ch

Other certificates including the domain name axa.ch

(limited to 100 certificates)
max-der-dachs.ch
newsroom-fr.axa.ch
newsroom-it.axa.ch
axa.ch
blues-and-jazz23.events.axa.ch
axasure.axa.ch
www.culture.axa.ch
error.axa.ch
acc-api.axa.ch
aw.acc.axa.ch
blog.axa.ch
salesmagazine.axa.ch
applications.acc.axa.ch
newsroom-fr.axa.ch
media-news.axa.ch
newsroom-it.axa.ch
api.axa.ch
myaxa.axa.ch
panel.axa.ch
collab.axa.ch
patterns.axa.ch
myaxaforms.axa.ch
aw.axa.ch
silenccioapp.axa.ch
newsroom-it.axa.ch
www.allez-allez.app
protectionshop.axa.ch
axa.ch
*.axa.ch
roadsafety.axa.ch
insurance-check.axa.ch
ask.axa.ch
cyber-check.axa.ch
campaigns.axa.ch
oos.axa.ch
design.axa.com
silenccio.axa.ch
patterns.axa.ch
salesmagazine.axa.ch
acc-api.axa.ch
www.acc.axa.ch
roadsafety.axa.ch
axasure.axa.ch
mobiledesktop.axa.ch
myaxaforms.axa.ch
flexwork.axa.ch
aw.axa.ch
max-der-dachs.ch
sdc.axa.ch
silber24.events.axa.ch
campaigns.axa.ch
insurance-check.axa.ch
ebanking.axa.ch
mydriverecorder.axa.ch
newsroom.axa.ch
mobiledesktop.acc.axa.ch
www.postmeta.com
sdc.axa.ch
accentry.winterthur.com
brokermagazine.axa.ch
design.axa.com
cyber-check.axa.ch
blog.axa.ch
esg.services.axa.ch
newsroom-it.axa.ch
upto.axa.ch
construction.axa.ch
newsroom-fr.axa.ch
myaxaforms.axa.ch
design.axa.com
mw-myaxa.axa.ch
assertionsigner.sso.services.axa.ch
construction.axa.ch
www.axa.ch
panel.axa.ch
jobs.axa.ch
brandcenter.axa.ch
myaxa.axa.ch
mobiledesktop.axa.ch
roadsafety.axa.ch
crash.axa.ch
carainduction.com
jobs.axa.ch
gettheoutfit.honk.international
axa.ch
work.axa.ch
mw-myaxa.axa.ch
catch-game.axa.ch
events.axa.ch
myaxa.axa.ch
health.axa.ch
acc-api.axa.ch
partners.axa.ch
flexwork.axa.ch
hail.axa.ch
axa.ch
brandcenter.axa.ch
axahome.axa.ch
design.axa.com
design.axa.com

Certificate

The complete raw certificate details for media-news.axa.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1L+u20dEIOAqcPE0ppxS
RKX2eC09w3ClDschHSBqJ84wD+PnUSKt2Lczezxz3gWsAZU3z9DbSrkJNtGUjGYF
btjBwMamy8H/I+bZ8i7i+yx1CEni+d1zXbk/gOAQP9m34iMV28OWSmLecmrZd5mV
3xCm/NLRCQCXLeo4F6oJjiYkjnGp8fogsApwXdaeiunfeYG2FEanfhqyGAZUbrCb
wlc9qHvmVExCsGxkFXIDZkjvSJAIuidVRhwM3cs4ETBMC7Zo5FKNjGYRtYcTzcGS
SJBBeu4m1mp0zwPx3MDVtd439mB0x7Q9RjVm/iVy6fI/NKsrtKQdktfErlQcAz69
zwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 342193849168644685013708164993568427604531
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-06 21:20:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-04 21:20:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'media-news.axa.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26857043079484197408675796530882024867162325465308470604525275610852042661571405520614140607184204997361137937502401876589705041788617953461938583036583099261984291049875777690221539744067174794024739623064860906517600639016295590111455880327070864153854388725578656287673583120136804477363849760228632814600870219123754022497123162648431496367158727739540313675892577209553765847571460747103403408022207949667899091666474896262471114592885598239009512586475266680851721185618716342488923708063389625880133030883678952111726313220487414991916535512365233486501652931729922132801968367494292349348698674351923370311119
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							24b6c826bd2a157eccfcefb5ac6c9f077ebf8d92
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media-news.axa.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018f4ffe2fa0000004030046304402207fb8230bfd8b51f0c8fa5ec35f4d8f4bc27e9f013a1ecbc7d8750836a4827fca022063a116c4168a2b3b20eabedf517b3c2ebcad12a2fc48fcef0888d428cad35621007500dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018f4ffe3065000004030046304402205246d3a6682ea9c39d2660f73424785610845f0def3538476acadcd442eda9ee02204e1b2911e2c6836a47ae7f3af757f7b7edf64d53e4bd778106fa061f6be168a6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0034857430d605808f7bbdf18d1054d5a704242f144585362b494fac387ce3c4e417bfd2d8180ba7b115692dfda4a463db1b677eebafe006b538aca2c73aff03cd570c42992003b091e698b37c7a0284905615eff2b760c822fcc65823ce5f60f58a9391ecdc38ba77b41c771b22aeca92b7b0905886f9f4717d53f5cb64af51807a4c0e89acd372fffaef141c5c4cf2b42435c726178021a9476975e1d6f0d6d647121c5f26278b31087ac33177151b45e5c48d3e727df916c657593a4575450107994997d49d1f3961a7b36d0b5baa418ce55eaa8f263c4e96393896f905598a88991f808f36ac2a2ad66755cc88c49e98204fd7fb029092ec64a5d492f943d5