help.ricardo.ch

Issued by R3

About this certificate

This digital certificate with serial number 03:42:52:02:51:0f:a3:2b:3f:95:01:eb:22:3e:19:75:10:76 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=help.ricardo.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:42:52:02:51:0f:a3:2b:3f:95:01:eb:22:3e:19:75:10:76
Serial Number (int): 283904502736424857373855975446551547154550
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b3:bd:b5:01:a1:5c:0e:84:6a:7a:16:03:ff:05:e0:e2:7f:29:68:7f
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): c3:82:18:3b:a1:05:57:5a:db:0a:ab:f6:07:dd:0d:73:fb:d2:04:04
Fingerprint (sha256): 06:72:1d:0f:f3:76:aa:ba:9b:cf:65:06:e2:54:13:19:99:fc:da:04:7b:bf:6d:f2:12:ab:1b:50:8c:97:6a:45

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate help.ricardo.ch

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for help.ricardo.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

help.ricardo.ch

Other certificates including the domain name ricardo.ch

(limited to 100 certificates)
winterthur.fr.ricardo.ch
kafka-proxy.ricardo.ch
kafka-proxy.ricardo.ch
elk-legacy.internal.ricardo.ch
status.proxsis.co.id
cdn.ricardo.ch
ricardo.ch
careers.ricardo.ch
website-status.ametek.com
status.melodydns.com
status.procertified.health
status.potsportal.com
status.brytecall.com
status.trizettoconnect.com
communication.ricardo.ch
com.ricardo.ch
news.ricardo.ch
careers.ricardo.ch
status.hykucommons.org
networkstatus.infogrosp.co.za
careers.ricardo.ch
website-status.ametek.com
com.ricardo.ch
help.ricardo.ch
trust.ricardo.ch
blogue.ricardo.ch
status.hykucommons.org
irpstatus.streamlineit.ca
irpstatus.streamlineit.ca
status.placepay.com
info.ricardo.ch
monitoring.sicktech.online
info.ricardo.ch
irpstatus.streamlineit.ca
login.ricardo.ch
status.verisma.com
communication.ricardo.ch
status.uk.deptagency.com
images.ricardo.ch
o.ricardo.ch
status.constantedge.com
cdn.ricardo.ch
haendler.auto.ricardo.ch
info.ricardo.ch
status.apec.psiexams.com
help.ricardo.ch
status.trizettoconnect.com
vv.ricardo.ch
status.tapmango.com
status.savantx.io
info.ricardo.ch
kafka-proxy.ricardo.ch
news.ricardo.ch
my.ricardo.ch
info.ricardo.ch
auto.ricardo.ch
login.ricardo.ch
monitor.yourcolo.com
o.ricardo.ch
o.ricardo.ch
status.hykucommons.org
info.ricardo.ch
irpstatus.streamlineit.ca
kafka-proxy.ricardo.ch
com.ricardo.ch
elk-legacy.internal.ricardo.ch
status.verisma.com
careers.ricardo.ch
universify-status.mehulbaid.in
cdn.ricardo.ch
status.microtronix-tech.com
info.ricardo.ch
status.hykucommons.org
com.ricardo.ch
info.ricardo.ch
status.tapmango.com
cdn.ricardo.ch
status.freeformfuture.com
communication.ricardo.ch
communication.ricardo.ch
cdn.ricardo.ch
careers.ricardo.ch
universify-status.mehulbaid.in
info.ricardo.ch
info.ricardo.ch
help.ricardo.ch
status.popsmash.com
vv.ricardo.ch
communication.ricardo.ch
status.sclqld.org.au
www.ricardo.ch
cdn.ricardo.ch
o.ricardo.ch
winterthur.ricardo.ch
communication.ricardo.ch
o.ricardo.ch
status.taggun.io
status.sohwatt.com.sg
wesure-wp.noc.cloudi.cloud
com.ricardo.ch

Certificate

The complete raw certificate details for help.ricardo.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 283904502736424857373855975446551547154550
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-11 23:38:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-09 23:38:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'help.ricardo.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 912513802666985721492084022964302689171658448921326451917810294853749239032383265163214757130287399695284445167501161851610199360014068269703105445976715755413892348765439616020577782380288255300022044695771078321714803677601656049647395086323921596370250688428497904695462951778216660958890869098186806358522964253753868606597329229087312081333777640833543374936362614861150387059456002892135818143117404148917176919455345713621908330893155331793492826287043157309303699039783252373858785309920252606447957018196048037159794521551360365911695405033130048951188787783824395149860202685238382233028152172429019735451098800072216133086360577990382352541262285617682182947490813171606145514368757820540192620304515234604164786059104023032723399675620971513007883944777452431140014727178423832387979408470024376907927571516929801069458714897365260051435062815185592027224686421745411579403000765102946921384487882169912443421934136987235526433341126953639904755600450110859264304329487398506349736090674967602049938087309073531734492361718872136971747288061061176022227794086227345625346898058914837293853872661983760644163140323813012928462638754565260791026545102562255505078114329767547341986792312360849047143639545674118223387399837
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b3bdb501a15c0e846a7a1603ff05e0e27f29687f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.ricardo.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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