baerenrupperswil.ch

Issued by R3

About this certificate

This digital certificate with serial number 03:a7:d3:43:0b:30:ab:80:1b:c3:9f:fb:95:0c:97:4e:b2:2d was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=baerenrupperswil.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a7:d3:43:0b:30:ab:80:1b:c3:9f:fb:95:0c:97:4e:b2:2d
Serial Number (int): 318444828289040136672039034432278940791341
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 91:f2:23:89:f1:f4:23:66:2a:28:a0:e5:76:6c:af:9b:d2:43:7c:f4
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 8f:c6:68:76:b0:53:b6:9b:aa:a3:47:c0:dc:60:7a:21:85:1f:27:e0
Fingerprint (sha256): 07:25:70:8c:2d:73:91:8b:89:0b:88:41:c1:22:12:d1:0e:3d:f9:b3:7c:05:e8:c1:8a:35:63:cd:f5:c8:5d:2f

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate baerenrupperswil.ch

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for baerenrupperswil.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

baerenrupperswil.ch
www.baerenrupperswil.ch

Other certificates including the domain name baerenrupperswil.ch

(limited to 100 certificates)
baerenrupperswil.ch
baerenrupperswil.ch
baerenrupperswil.ch
baerenrupperswil.ch
www.baerenrupperswil.ch
www.baerenrupperswil.ch
baerenrupperswil.ch
www.baerenrupperswil.ch
baerenrupperswil.ch
www.baerenrupperswil.ch
www.baerenrupperswil.ch
www.baerenrupperswil.ch
www.baerenrupperswil.ch
baerenrupperswil.ch
www.baerenrupperswil.ch
baerenrupperswil.ch
baerenrupperswil.ch
www.baerenrupperswil.ch
baerenrupperswil.ch
baerenrupperswil.ch
www.baerenrupperswil.ch
www.baerenrupperswil.ch
baerenrupperswil.ch
baerenrupperswil.ch
baerenrupperswil.ch
www.baerenrupperswil.ch

Certificate

The complete raw certificate details for baerenrupperswil.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1HyWmKpZ8yB6bMV4ZsB
bR0RGQibnsHFs+IuunLpP3VQoaezRH75qCfSDx0TXaNfT5L5YvdeyquqGocub+41
6qx2OEO1/p73TYNXu155Cr++6sHcin2ShgYJUMLuzd5NRpb/rfuA4KuWWE30v4G+
kR7C1yO6PWM3mf/5ZWsw7WXoV7aHBu4wA11pztPNLFpX70Mpdc3gOPXKTB/Iwp8f
beNA/8Nn0esDl/VyKULL92oH6cGmhbIMAfr6pGVaNepgJ1UYpGWUmM0XSMp9+qoD
HB9PtMFkFoDo0dx7lXJmBbl1FdoPrPS6q2osq0CAlaYnm0Q+RCV7DnHQPgJmh/Bt
kQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 318444828289040136672039034432278940791341
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-28 01:09:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-29 01:09:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'baerenrupperswil.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23142019228531748801774791992434415519140459516750913851192185391430233306926330011107214170724069480760651467619295817563409833075889593735392513671591808771342770412417124649696712161635920197867336211880509432576081166207148597798572126242092117634705308108027892033957129490218656119998113537667018851955545859709480902011896275756274273100248438954430761218918513513071250657049686753482394723093444373491342901790723405415923445868189745531442875786044982344559581979637407858516188713674902637766555144490640919858844033861880222262491125364263190786159616712306509664753355219882439296030029673010354310901137
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							91f22389f1f423662a28a0e5766caf9bd2437cf4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baerenrupperswil.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baerenrupperswil.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018695c86fcf000004030046304402200f9c064252385a20967d2153b86925cb43a5e0db873cca742d40beb3b4be028102203dd721561a787fb60542751b70689467f742459b08506ea13f82770b21e72164007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018695c86fd40000040300473045022100c4c29a0e233f31a22bd63522361088d878a9922a285e01a7a2a29f1c20e576f40220413e5b302f9c6e95cdb352afe5dd86ab9e358e953acf09cde699b8819faa3270
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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