appfahrt.ch

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:59:6a:ff:f5:53:03:ee:e5:38:ba:f6:97:e7:27:6e:d8:d0 was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=appfahrt.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:59:6a:ff:f5:53:03:ee:e5:38:ba:f6:97:e7:27:6e:d8:d0
Serial Number (int): 291764215630263898296871257965900361291984
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 8f:1d:a5:29:3f:0b:85:7d:34:2c:23:59:22:de:8a:59:1f:e7:84:38
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): cb:8d:5e:a0:d5:c7:83:1c:12:c9:77:00:e3:9a:4c:e0:46:2d:0e:ad
Fingerprint (sha256): 0a:fd:25:7e:e4:b8:fc:bd:b6:db:71:61:cc:f3:43:fd:59:7d:c1:93:68:cf:e6:48:31:bf:a8:3d:51:d6:29:63

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate appfahrt.ch

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for appfahrt.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

appfahrt.ch
webmail.appfahrt.ch
www.appfahrt.ch

Other certificates including the domain name appfahrt.ch

(limited to 100 certificates)

Certificate

The complete raw certificate details for appfahrt.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCI6CdXhmAHXTduM6KG2
LKQ4FksjtBoJnwAuh9MF/JvUA1pzK24dImQsU/aBNIPX7XFt2xiirHkWn4VCTCDR
BybVVbVsXpMXXz+FvJpJNctUXd8xsh9ThKtVF0P4yBb8WwBRZj7ZbZu9QtkAthBs
XV4mmzhwqvCzVW5xvhKhIXoNEAV4H0XH7ZS7Vc4hrmxrJD335BR8SqvLvTL62ufN
JSr0NDPryXmeWcdETB0G7tCbYpKa/ii9LTRbs5cZpLCgdwvZZYRauT5SKshBQwIr
oP1s5bx/zyYZpyQzR2KyX79NPXdYNkjE3WvaINGSdOfyvWyhh99kDDxeoGy6/+uI
1QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 291764215630263898296871257965900361291984
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-09 23:15:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-07 23:15:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'appfahrt.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22739772714907479668164712435087720546234590796484481983796710732744999332704779765005877752749677394262141287547881634167809924286532139020165767850862270528742639784374320858428891991119047006370232203896264323570297232483663878744028195316265294607971232650261473024743795264672626930864648201633820995185551226143681074893009771933762267815616898444316130725502021187013232741594386911182966494983414963750210409133019444748800858396219465874541383684294918295013880035801456798641825258432453189458187225029156644771728972658057117712055127948444063538027380329383737836398165111469520578190272848261074274453717
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8f1da5293f0b857d342c235922de8a591fe78438
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appfahrt.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.appfahrt.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.appfahrt.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016bd93c7ed1000004030048304602210083f43864594579dd294b24db0efddff5224b58332c713d101ec993e701d36dba022100f765f42c892f7ded401d442a1147ab43726434e02f3988ff60d088d48489d29b007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016bd93c7eee00000403004730450220629fd7f6b7d71ec0b58001e33c28639077dc0e27a97621f12ffba24faf6d7131022100f9f2dbec96d7d2e77fe87a466002d86fcd3b0e4bd9901d58f4f77164529b79ce
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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