daskostetdiewelt.tagesanzeiger.ch

Issued by R3

About this certificate

This digital certificate with serial number 03:2f:c4:b0:3d:e4:ea:e0:d0:7d:d5:59:aa:a3:37:85:03:15 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=daskostetdiewelt.tagesanzeiger.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:2f:c4:b0:3d:e4:ea:e0:d0:7d:d5:59:aa:a3:37:85:03:15
Serial Number (int): 277591572827349491515661470815707956839189
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: be:0c:02:a4:3d:c6:4b:ca:d0:87:90:86:b6:50:45:14:ed:bf:4a:14
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): d3:c1:d8:30:fe:01:fe:d2:21:c9:74:ff:57:b9:4b:ba:de:3a:ec:73
Fingerprint (sha256): 06:43:98:15:9d:e2:26:1c:c7:64:db:c1:56:ff:da:69:e5:5a:20:3b:a7:02:42:20:01:53:90:49:8c:2a:0a:fb

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate daskostetdiewelt.tagesanzeiger.ch

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for daskostetdiewelt.tagesanzeiger.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

daskostetdiewelt.tagesanzeiger.ch

Other certificates including the domain name tagesanzeiger.ch

(limited to 100 certificates)
digitallight.tagesanzeiger.ch
blog.tagesanzeiger.ch
profitieren.tagesanzeiger.ch
dev-disco.tamedia.ch
webspecial.tagesanzeiger.ch
*.gateway-dev.tamedia.ch
dev-disco.tamedia.ch
tagesdeal.tagesanzeiger.ch
dev-disco.tamedia.ch
dev-disco.tamedia.ch
tagesanzeiger.ch
karten.tagesanzeiger.ch
i2.shared.global.fastly.net
bestellen.tagesanzeiger.ch
vielfalt.tagesanzeiger.ch
dev-disco.tamedia.ch
dev.tamedia.ch
lebeninzuerich.tagesanzeiger.ch
dein.tagesanzeiger.ch
lebeninzuerich.tagesanzeiger.ch
blog2.tagesanzeiger.ch
dev-disco.tamedia.ch
dev-disco.tamedia.ch
daskostetdiewelt.tagesanzeiger.ch
dev-disco.tamedia.ch
dev-disco.tamedia.ch
webspecial.tagesanzeiger.ch
dev-disco.tamedia.ch
webspecial-old.tagesanzeiger.ch
leoonline.tamedia.ch
xn--3fr2-1ra.tagesanzeiger.ch
unternehmen.tagesanzeiger.ch
agenda.tagesanzeiger.ch
blog.tagesanzeiger.ch
dev-disco.tamedia.ch
leidenschaft.tagesanzeiger.ch
summerta2018.tagesanzeiger.ch
dev-disco.tamedia.ch
zuerich.tagesanzeiger.ch
*.disco.tagesanzeiger.ch
i2.shared.global.fastly.net
5734616174428160-fe1.pantheonsite.io
essrechner.tagesanzeiger.ch
blog.tagesanzeiger.ch
epaperabo.tagesanzeiger.ch
dev-disco.tamedia.ch
dev-disco.tamedia.ch
5734616174428160-fe1.pantheonsite.io
dev-disco.tamedia.ch
dev-disco.tamedia.ch
dev-disco.tamedia.ch
auslanddigital.tagesanzeiger.ch
youthlab.tagesanzeiger.ch
*.gateway.tamedia.ch
epapertest.20minuten.ch
tda.tagesanzeiger.ch
vielfalt.tagesanzeiger.ch
digitallight.tagesanzeiger.ch
interaktiv.tagesanzeiger.ch
t.tamedia.click
blog2.tagesanzeiger.ch
blog.tagesanzeiger.ch
blackbeard.dev.tda.link
unternehmen.tagesanzeiger.ch
blog2.tagesanzeiger.ch
digital-lesen.tagesanzeiger.ch
webspecial.tagesanzeiger.ch
publishing.tamedia.ch
i2.shared.global.fastly.net
blog.tagesanzeiger.ch
dev-disco.tamedia.ch
sommer.tagesanzeiger.ch
students.tagesanzeiger.ch
blog.tagesanzeiger.ch
webspecial.tagesanzeiger.ch
publishing.tamedia.ch
vote-backend.tagesanzeiger.ch
dev-disco.tamedia.ch
survey.tagesanzeiger.ch
125jahre.tagesanzeiger.ch
events.tagesanzeiger.ch
promo.tagesanzeiger.ch
meintagi.tagesanzeiger.ch
dein.tagesanzeiger.ch
webspecial.tagesanzeiger.ch
webspecial-igr.tagesanzeiger.ch.arkham.enterprises
agenda2.tagesanzeiger.ch
epapertest.20minuten.ch
unternehmen.tagesanzeiger.ch
rec.tda.tagesanzeiger.ch
schenken.tagesanzeiger.ch
5734616174428160-fe1.pantheonsite.io
agenda.tagesanzeiger.ch
i2.shared.global.fastly.net
essrechner.tagesanzeiger.ch
students.tagesanzeiger.ch
blog.tagesanzeiger.ch
blackbeard.prod.tda.link
agenda.tagesanzeiger.ch
dev-disco.tamedia.ch

Certificate

The complete raw certificate details for daskostetdiewelt.tagesanzeiger.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvf4Uk224mg8IWZ+RcS1A
4xSPUpVQukWhWarUcdfXCVtlpvjro/UK/48EmJd11kldnGSfdw/SFYRH0z29YP5K
1Yhs5r6B6dzb1pKHVGrxFqbeOIndKgCQFxectY5rLPi2fTNz6D4tsBbe/MPge74n
ze3wUeTizyViMN8wk+YmUE5Tr0JNDiNlqjSx7MKRDOP99N2X6VgLDpwHgIryj1hm
YnkDMBbK/4pHSsPw0ofbGLizN+vF7nr2RfNObk7PIsdrq7abvURconzZUunUi1N/
asVuVbZbfHSr1EBCnPO2yneNf7onioWFG/NCvFn0m6LvI1GvXfXB7Mo0kYBy8j53
kQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 277591572827349491515661470815707956839189
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-12-21 08:16:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-21 08:16:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'daskostetdiewelt.tagesanzeiger.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23984331340977101889921971536392069296963612434006145667246035161684361154084310017859717657848808941172989506848433401407488260794391458342867466325391575538901903447961968294884938155397956053868887454990673032762949768282595733865466173204445513223465534846187244887770358128563747684804693609999444032648475046812760101072721477631165659968389019061948971248545540503303812083484005145704269851701171569376188613305024329248677005789403708754982659419156906610129732798760888088031078574607719929011445065104427105022191112011810447653309050395735850926852923921013976288211272110808291498814221515093214393956241
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							be0c02a43dc64bcad0879086b6504514edbf4a14
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (37 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daskostetdiewelt.tagesanzeiger.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076009420bc1e8ed58d6c88731f828b222c0dd1da4d5e6c4f943d61db4e2f584da2c20000017684959f230000040300473045022100d5bf15a68e8f024d80d182d0c8f654b795e4e92547cb470495224312ef27b2bc02202b0bec8eb59ee674515ea8bb9ea32ae069fe9c9120920edd386d8dcf6fec73680077007d3ef2f88fff88556824c2c0ca9e5289792bc50e78097f2e6a9768997e22f0d70000017684959f6d0000040300483046022100e07af10693fdaa2104d611d3251cb275f911c37a46e47453b7ed2a143a51d1bd022100bd7a54d576a006efc579a4245d6ddc389e67bddc43cf69d8d9a8fa0849f3f8bd
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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