staging.healthyandhappy.ch
Issued by R3
About this certificate
This digital certificate with serial number 03:55:89:5f:14:9f:45:98:53:b2:96:58:e9:a6:66:bb:0b:3c was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=staging.healthyandhappy.ch
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:55:89:5f:14:9f:45:98:53:b2:96:58:e9:a6:66:bb:0b:3cSerial Number (int): 290443456905451612147925536682508436572988
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: b2:75:6a:64:be:22:94:1f:19:a6:73:0d:a9:3c:bd:cc:b8:66:b5:f0
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): fb:38:e2:f7:3c:c0:89:51:3d:e5:43:f5:13:c0:a0:82:50:fb:38:c2
Fingerprint (sha256): 08:48:5b:88:31:9d:33:27:2c:af:59:b3:73:29:7e:9e:e0:a6:3b:e4:db:cf:07:2a:42:cb:6a:cc:85:a3:68:86
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate staging.healthyandhappy.ch
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for staging.healthyandhappy.ch
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
staging.healthyandhappy.ch
Other certificates including the domain name healthyandhappy.ch
(limited to 100 certificates)
staging.healthyandhappy.ch
healthyandhappy.ch
healthyandhappy.ch
healthyandhappy.ch
healthyandhappy.ch
healthyandhappy.ch
healthyandhappy.ch
healthyandhappy.ch
healthyandhappy.ch
healthyandhappy.ch
healthyandhappy.ch
healthyandhappy.ch
healthyandhappy.ch
healthyandhappy.ch
healthyandhappy.ch
healthyandhappy.ch
healthyandhappy.ch
healthyandhappy.ch
healthyandhappy.ch
healthyandhappy.ch
healthyandhappy.ch
healthyandhappy.ch
healthyandhappy.ch
healthyandhappy.ch
healthyandhappy.ch
healthyandhappy.ch
healthyandhappy.ch
healthyandhappy.ch
healthyandhappy.ch
healthyandhappy.ch
healthyandhappy.ch
healthyandhappy.ch
healthyandhappy.ch
healthyandhappy.ch
healthyandhappy.ch
healthyandhappy.ch
healthyandhappy.ch
healthyandhappy.ch
healthyandhappy.ch
healthyandhappy.ch
healthyandhappy.ch
healthyandhappy.ch
healthyandhappy.ch
healthyandhappy.ch
healthyandhappy.ch
healthyandhappy.ch
healthyandhappy.ch
healthyandhappy.ch
healthyandhappy.ch
healthyandhappy.ch
healthyandhappy.ch
Certificate
The complete raw certificate details for staging.healthyandhappy.ch in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFOTCCBCGgAwIBAgISA1WJXxSfRZhTspZY6aZmuws8MA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMjExMTYwMDQ2MTNaFw0yMzAyMTQwMDQ2MTJaMCUxIzAhBgNVBAMT GnN0YWdpbmcuaGVhbHRoeWFuZGhhcHB5LmNoMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEArE6sazX7erWsAtkFdAy+XAvVXbUdidm/Jpm6ANEBlh1BMynK 8yCpYZck2P31jeYBFCa2kplMK9iXE3lrfwknOoZ4OovTy0OTvqH57T7grPGC2wPH KXUfD5sEM7m8uu7NpoWEtWkjYEUSIEEIdJBbX/UHFP3dIcfdBIpw1ao2hXjhLVTJ j5qbNws8WsFAxLUOd0DGGDKSd3prlIBwhvPflHSvinQBS6Qlo5m9xHW3+Xk98Kok qjHrt2iYlST/UVzbi2gFbMJh0woHHsPQ1RR0+ueHeOkXJhMm/ZIYmYexYQ7HdLFg uyLMIFRioOHFStk/DX0N+LIKckTRLTDaboW/UwIDAQABo4ICVDCCAlAwDgYDVR0P AQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMB Af8EAjAAMB0GA1UdDgQWBBSydWpkviKUHxmmcw2pPL3MuGa18DAfBgNVHSMEGDAW gBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUH MAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3Iz LmkubGVuY3Iub3JnLzAlBgNVHREEHjAcghpzdGFnaW5nLmhlYWx0aHlhbmRoYXBw eS5jaDBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsG AQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQMGCisGAQQB1nkC BAIEgfQEgfEA7wB2AHoyjFTYty22IOo44FIe6YQWcDIThU070ivBOlejUutSAAAB hH4dgp0AAAQDAEcwRQIgGdSkudl3VS81nlHwz0zWg0yv7MBDxIxXMLBln5dhA58C IQDHKKxSJVuPOepFzlud298L2NvJhbCSKCCZBZgpNeqG7AB1AK33vvp8/xDIi509 nB4+GGq0Zyldz7EMJMqFhjTr3IKKAAABhH4dhMAAAAQDAEYwRAIgV1of/aqzbHP6 Rs/p8iZzAiJ1/J9S/N6nlWdHcYWlBQ4CIGScV+BJVvQ0iPktP5ElF+u5lm1UzHaj dZCthzARHs5uMA0GCSqGSIb3DQEBCwUAA4IBAQAjXv5rPs5zF8vsxpzWovzEMaEQ 2zX7nKKxBauRrbvuCDgeERcR7LDyVvPU0Iq2zMsRoJ+RKQx2vIedXfk1BH8zo59m J9W3UPQNi1ZeqGV3V9mgmaqGEAWyVtZ0MSGmeAXJiZKG7EAo3KI4B80n+EFgJ7mW aI5uNqtMxBnHZZEF1/U5XYO2UhFZ29H3MbN8XU5DfArSY401EFWzSDlb9jKdUE5O oENFwzsC1AAH9DlMdqxg14ieUUnpTeYVAONGLCrNMLKaq/YVLVWzr8PKli2vCZw/ S3hNmOxGjuyKJ6WDhZr4edBGgvj5w5xc2I0o54ei3oDDUhuSlMCt6JNg0eWb -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArE6sazX7erWsAtkFdAy+ XAvVXbUdidm/Jpm6ANEBlh1BMynK8yCpYZck2P31jeYBFCa2kplMK9iXE3lrfwkn OoZ4OovTy0OTvqH57T7grPGC2wPHKXUfD5sEM7m8uu7NpoWEtWkjYEUSIEEIdJBb X/UHFP3dIcfdBIpw1ao2hXjhLVTJj5qbNws8WsFAxLUOd0DGGDKSd3prlIBwhvPf lHSvinQBS6Qlo5m9xHW3+Xk98KokqjHrt2iYlST/UVzbi2gFbMJh0woHHsPQ1RR0 +ueHeOkXJhMm/ZIYmYexYQ7HdLFguyLMIFRioOHFStk/DX0N+LIKckTRLTDaboW/ UwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 290443456905451612147925536682508436572988 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-16 00:46:13 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-14 00:46:12 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'staging.healthyandhappy.ch' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21751783808313482142271786026390597175043903542855614186823429212308600689235619772140915196039541094866756883989437211956764237804407627141980364240250707847395704853160405971486324382621757884068141049266624025803918772962928190754092395965837866835818513308252557569109049363855933507688301085735539376244701476205942178714529299612159801033429444946690224726120214661842440762468711990944247809748527321420280668493725155606431221503738805651363595650189895615523420199299372769885365869395035379964249509168495966709360974010303687220266909679934688415273492615046360511655593114066438779240762998869905897799507 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) b2756a64be22941f19a6730da93cbdccb866b5f0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.healthyandhappy.ch' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef0076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001847e1d829d0000040300473045022019d4a4b9d977552f359e51f0cf4cd6834cafecc043c48c5730b0659f9761039f022100c728ac52255b8f39ea45ce5b9ddbdf0bd8dbc985b09228209905982935ea86ec007500adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a000001847e1d84c000000403004630440220575a1ffdaab36c73fa46cfe9f22673022275fc9f52fcdea79567477185a5050e0220649c57e04956f43488f92d3f912517ebb9966d54cc76a37590ad8730111ece6e . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00235efe6b3ece7317cbecc69cd6a2fcc431a110db35fb9ca2b105ab91adbbee08381e111711ecb0f256f3d4d08ab6cccb11a09f91290c76bc879d5df935047f33a39f6627d5b750f40d8b565ea8657757d9a099aa861005b256d6743121a67805c9899286ec4028dca23807cd27f8416027b996688e6e36ab4cc419c7659105d7f5395d83b6521159dbd1f731b37c5d4e437c0ad2638d351055b348395bf6329d504e4ea04345c33b02d40007f4394c76ac60d7889e5149e94de61500e3462c2acd30b29aabf6152d55b3afc3ca962daf099c3f4b784d98ec468eec8a27a583859af879d04682f8f9c39c5cd88d28e787a2de80c3521b9294c0ade89360d1e59b