kif-parechoc.ch
Issued by R3
About this certificate
This digital certificate with serial number 03:e7:a1:62:b6:43:b4:55:31:20:23:c9:43:13:22:e9:21:af was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=kif-parechoc.ch
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:e7:a1:62:b6:43:b4:55:31:20:23:c9:43:13:22:e9:21:afSerial Number (int): 340156602803193677914067411019681768219055
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 63:be:63:1c:1f:e7:59:0e:35:85:64:1f:a4:f0:6d:e9:d1:64:01:9e
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): bb:6b:cf:5f:a1:01:59:0e:8c:f3:24:e7:45:da:13:b0:f1:a3:ba:99
Fingerprint (sha256): 0c:cf:9a:ce:b5:c7:c3:46:1e:67:cd:7a:94:06:06:15:f3:51:0c:0f:c1:05:27:22:f6:3e:24:4c:3c:90:98:b3
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate kif-parechoc.ch
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for kif-parechoc.ch
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
kif-parechoc.ch
www.kif-parechoc.ch
www.kif-parechoc.ch
Other certificates including the domain name kif-parechoc.ch
(limited to 100 certificates)
mail.kif-parechoc.ch
kif-parechoc.ch
acrotec.ch
mail.kif-parechoc.ch
acrotec.ch
kif-parechoc.ch
kif-parechoc.ch
kif-parechoc.ch
acrotec.ch
acrotec.ch
acrotec.ch
acrotec.ch
acrotec.ch
acrotec.ch
mail.kif-parechoc.ch
mail.kif-parechoc.ch
acrotec.ch
acrotec.ch
acrotec.ch
kif-parechoc.ch
kif-parechoc.ch
acrotec.ch
mail.kif-parechoc.ch
kif-parechoc.ch
mail.kif-parechoc.ch
acrotec.ch
acrotec.ch
mail.kif-parechoc.ch
acrotec.ch
acrotec.ch
kif-parechoc.ch
acrotec.ch
kif-parechoc.ch
acrotec.ch
kif-parechoc.ch
acrotec.ch
acrotec.ch
2020.kif-parechoc.ch
acrotec.ch
acrotec.ch
acrotec.ch
acrotec.ch
kif-parechoc.ch
acrotec.ch
mail.kif-parechoc.ch
acrotec.ch
kif-parechoc.ch
kif-parechoc.ch
kif-parechoc.ch
acrotec.ch
acrotec.ch
acrotec.ch
acrotec.ch
acrotec.ch
acrotec.ch
mail.kif-parechoc.ch
mail.kif-parechoc.ch
acrotec.ch
acrotec.ch
acrotec.ch
kif-parechoc.ch
kif-parechoc.ch
acrotec.ch
mail.kif-parechoc.ch
kif-parechoc.ch
mail.kif-parechoc.ch
acrotec.ch
acrotec.ch
mail.kif-parechoc.ch
acrotec.ch
acrotec.ch
kif-parechoc.ch
acrotec.ch
kif-parechoc.ch
acrotec.ch
kif-parechoc.ch
acrotec.ch
acrotec.ch
2020.kif-parechoc.ch
acrotec.ch
acrotec.ch
acrotec.ch
acrotec.ch
Certificate
The complete raw certificate details for kif-parechoc.ch in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgISA+ehYrZDtFUxICPJQxMi6SGvMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzAxMTQwNDE2MTRaFw0yMzA0MTQwNDE2MTNaMBoxGDAWBgNVBAMT D2tpZi1wYXJlY2hvYy5jaDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB ANXSurcUtVLR1wNnKycPOqNaf7/DQ0Ifj5TXbCdKFctIdj6TT65VooHj4EvbC/Ge XmtLrmY/ET7QTG3H4ayRaTYtJDXQ00KXt6IhsLH3FukoF1w4dGrfij2TMnSaon4B 6/smj2YSDdpBB3ZkhpTUOtsA65XYF/sAa2hZkN1C5Sfr3CkaXXbhDvW+6MSc76jR gT/9eOFVFkhxdVd0qV1CIlyEjuPFcHfsEjdoGIVyP0BGZZBVDKR/Pavh3ZjxHJxe J8cxV6ZJxpyElT/xoxE/CyfJOyvhtVsifJ0Sd5JUzVHhvjukVmI8wZxwbsdWKg+L PX/oZL2pjh8aJrq90ucW6e8CAwEAAaOCAl4wggJaMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNV HQ4EFgQUY75jHB/nWQ41hWQfpPBt6dFkAZ4wHwYDVR0jBBgwFoAUFC6zF7dYVsuu UAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8v cjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9y Zy8wLwYDVR0RBCgwJoIPa2lmLXBhcmVjaG9jLmNoghN3d3cua2lmLXBhcmVjaG9j LmNoMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYB BQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBAwYKKwYBBAHWeQIE AgSB9ASB8QDvAHUAtz77JN+cTbp18jnFulj0bF38Qs96nzXEnh0JgSXttJkAAAGF rrT7PAAABAMARjBEAiAeWgQgPjFmvl9SvMHDpO+Mnx66iN8YyhXdsqB4rXyCQgIg BMX3A41ccdlT34jF7IsSYsnNHG+5cUej6wAU7LYTPwIAdgDoPtDaPvUGNTLnVyi8 iWvJA9PL0RFr7Otp4Xd9bQa9bgAAAYWutPs6AAAEAwBHMEUCIB+NBGFu3SoxrZV8 uG/w2ddJkD35kOZRoF71ZAIO4BWUAiEA6htHvbeJptJFE4Za+53T5ZC06nP8jCfB WntulBkun3EwDQYJKoZIhvcNAQELBQADggEBAEzZMY7qnv3rhzliRiVcEIfdhZO3 vXHJ3hToOILgw1sPd7JGzxswTn0xj0b6BzTbmZRGn+hOy67dhvIwU43q7t1x/CwM Q334ViVTU552XVZwchonr0kAaWNZEp3DXp0l75ZvC0b9tk2IO6PwB13+BDhc25EX pk+B+zg+vt46zubl74kc3mgQoKUY2aP4pgGVy3MXgyb/FDbkQyGaSOVj+ny+l7eR 1r8rxlbgnzG4RwVbBFPMlUvkV9xdiJ7IfIZwqnY5bgvI+TFRzL/iyAWtcDOhwYMJ ZuSWRqFJpSHVQAizPQgFvHihlpOz3FtmelTnm+yjiTs8xCMNzRJmsoaU5YI= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1dK6txS1UtHXA2crJw86 o1p/v8NDQh+PlNdsJ0oVy0h2PpNPrlWigePgS9sL8Z5ea0uuZj8RPtBMbcfhrJFp Ni0kNdDTQpe3oiGwsfcW6SgXXDh0at+KPZMydJqifgHr+yaPZhIN2kEHdmSGlNQ6 2wDrldgX+wBraFmQ3ULlJ+vcKRpdduEO9b7oxJzvqNGBP/144VUWSHF1V3SpXUIi XISO48Vwd+wSN2gYhXI/QEZlkFUMpH89q+HdmPEcnF4nxzFXpknGnISVP/GjET8L J8k7K+G1WyJ8nRJ3klTNUeG+O6RWYjzBnHBux1YqD4s9f+hkvamOHxomur3S5xbp 7wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 340156602803193677914067411019681768219055 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-14 04:16:14 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-14 04:16:13 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kif-parechoc.ch' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26992673476206941866592335319850328835429263390424344204780122451679992625705273235599448994799415302014302676320694396187524435288678074670852823654970997457231170957003659387676222001891665577924746509520913315153616847403689184990725109530328137072867076806124662107268129480159011442209643025727041785042821731366775572520581572435383250830207737405220600174543842164369260576403851688825551126107693413870169236896090824402592984555908825616846621490752398900523926481243855435256400520878167140557564149120562291077220846496095241165943737977838913505209565145955899689063996955456812197949584799180155478534639 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 63be631c1fe7590e3585641fa4f06de9d164019e . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kif-parechoc.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kif-parechoc.ch' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000185aeb4fb3c000004030046304402201e5a04203e3166be5f52bcc1c3a4ef8c9f1eba88df18ca15ddb2a078ad7c8242022004c5f7038d5c71d953df88c5ec8b1262c9cd1c6fb97147a3eb0014ecb6133f02007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000185aeb4fb3a000004030047304502201f8d04616edd2a31ad957cb86ff0d9d749903df990e651a05ef564020ee01594022100ea1b47bdb789a6d24513865afb9dd3e590b4ea73fc8c27c15a7b6e94192e9f71 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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