branchenloesung.astag.ch

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:c4:d4:4f:66:77:df:fe:cb:67:9c:90:17:b4:34:34:ab:70 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=branchenloesung.astag.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:c4:d4:4f:66:77:df:fe:cb:67:9c:90:17:b4:34:34:ab:70
Serial Number (int): 415426696248406405938323155760393384930160
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: ab:2d:84:1c:40:a1:7b:0a:1e:34:c6:39:82:4b:f8:a3:02:09:be:b2
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 8a:f3:41:f3:28:8d:3b:2e:4d:b1:99:4a:c7:26:63:86:cc:6d:e7:8e
Fingerprint (sha256): 08:29:b5:11:0e:aa:c8:22:2d:cc:91:57:d2:4a:5d:0a:67:a4:06:29:5a:4d:b5:8f:f2:91:87:f3:80:12:98:cd

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate branchenloesung.astag.ch

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for branchenloesung.astag.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

branchenloesung.astag.ch
branchenloesung.bwise.ch

Other certificates including the domain name astag.ch

(limited to 100 certificates)
www.astag.ch
branchenloesung.astag.ch
mail.astag.ch
shop.astag.ch
sh.astag.ch
branchenloesung.astag.ch
astag.be
shop.astag.ch
www.astag.ch
branchenloesung.astag.ch
astagbalancer.ch.trendhosting.cloud
so.astag.ch
shop-service.astag.ch
astag.be
www.astag.ch
astag.be
sh.astag.ch
www.astag.ch
remote.astag.ch
so.astag.ch
www.astag.ch
shop.astag.ch
www.astag.ch
astag.be
mail.astag.ch
astag.be
www.astag.ch
branchenloesung.astag.ch
www.astag.ch
branchenloesung.astag.ch
astagbalancer.ch.trendhosting.cloud
astagbalancer.ch.trendhosting.cloud
astagbalancer.ch.trendhosting.cloud
www.astag.ch
www.astag.ch
www.astag.ch
www.astag.ch
*.intranet.astag.ch
sh.astag.ch
www.astag.ch
branchenloesung.astag.ch
branchenloesung.astag.ch
ag.astag.ch
www.astag.ch
branchenloesung.astag.ch
www.astag.ch
sh.astag.ch
branchenloesung.astag.ch
astag.be
branchenloesung.astag.ch
www.astag.ch
branchenloesung.astag.ch
www.astag.ch
sh.astag.ch
branchenloesung.astag.ch
sh.astag.ch
branchenloesung.astag.ch
www.astag.ch
branchenloesung.astag.ch
shop.astag.ch
sh.astag.ch
*.intranet.astag.ch
branchenloesung.astag.ch
www.astag.ch
www.astag.ch
mail.astag.ch
so.astag.ch
mail.astag.ch
branchenloesung.astag.ch
ssl.astag.ch
shop.astag.ch

Certificate

The complete raw certificate details for branchenloesung.astag.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhOe93SwXv93e3uJpJKy
8WeGkSG/hA10wxAqB87xOrntIW85b+m75neq/w5hHIje7Mu80d0K0R9gMB4yLHlJ
fT8MeweG/pVDSVCBTDxxZ7qTSJzDeW7KA/QxHXGPq8a9BX6WdkvtxxaUQG3BxVMB
2gV6BnhNP6KJlQ+1LjzwBpCRLyp7dHgxiSvvNmWoIlDxsQIq9BEWrD3yS/sRlF/K
pj9qptIrpYgjAWagJJj7tT3+NdLaTS00pJrfyidHDkXXM4PIYVmnTNTgNiWdgPNz
5swlVDhUIt55U2vLRTaXLv9ZRD5BV4OMj5vLFA8Sf9agRjCkrMsv74vSs2iWZ9Wb
nwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 415426696248406405938323155760393384930160
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-26 17:25:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-26 17:25:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'branchenloesung.astag.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24499906621065373537825349110552217237928752440053829035052202658448052554106338460400754908144474218326448617137916932918519172884751789485941473149836580141950488925118117822192628622471259105877172029309730863683718832063959065230990401982773549902312841836034136337109439992211423484443245724696099899641878934606957236638131109656046111026888072100179668172654983029781103677696543693882224581519611560851451482977638196026053975323346611582438075858928927101796461647815429889958915243560349206724935804111278831132526219178225676512589033660733067310064761610572516524835696799749358051926513814745546185087903
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ab2d841c40a17b0a1e34c639824bf8a30209beb2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'branchenloesung.astag.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'branchenloesung.bwise.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc56000001688b69336b0000040300483046022100a7eb7d64fddd2f7427ba15422d4051a8358ba5cf94daf8e67fa04bd3fdee7f65022100f8cfea9b1279715df2f82a87a1fdf21a2cc5715bd707b09963ed1fb79ddea36a007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001688b693568000004030046304402205ef3c7b75894a3f585ba44dac41b4539a962d550807de7e1a29e3f46cc6629c2022045064f6b3894d7057ecbea1cd0b2243a0d6d20cf7e3905d56db0bd54d64bdffc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00145637bf67d5a6575f0473bf6f461f3a6add850a4f868e8c9c79422f661b85362a8ddcd227ab5c844197afba7c72e28ea64b61028c5dcae440bff72705e45c3ec1fd22d661cee1dfa0df242de282bf6e9c15983455287fa19e48c30ea924e6d9ba2a55e4f642e1fdc56b38ad457a69efe8ca312c3a9e8a854b47b6261e7ca42d55728ecd806e1542862d55c677291e50b99860f6676f625c6d26b9c1a80f38d2506f3852c78e86d393ad3c5a426c975060c3593cd121ba55583d12c6a6f617b77b398d5a8ca758be7af1543c604cfdcf39db4735361b7109f54c2c09185d58c7833118d9596abca9320f6376fa850754a4f0e75dae603623c91cf8f5c5f3755a