www.cura-domicil.ch

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:0f:cf:24:35:44:6d:68:14:bb:46:98:2c:24:1a:4d:51:54 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.cura-domicil.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:0f:cf:24:35:44:6d:68:14:bb:46:98:2c:24:1a:4d:51:54
Serial Number (int): 266716431497298285468074264401400147300692
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c3:63:f6:5b:eb:8e:c9:93:f8:99:cc:e0:5e:af:48:de:90:03:c0:95
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 97:de:73:81:5c:4e:90:bc:ba:90:d6:9d:8b:98:98:09:85:e4:81:07
Fingerprint (sha256): 0e:8f:f1:06:9f:dd:2c:c5:b9:fd:81:a7:94:81:16:36:b0:e3:5a:d1:c6:62:54:b7:ff:62:d0:9f:cd:7b:74:87

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.cura-domicil.ch

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.cura-domicil.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.cura-domicil.ch

Other certificates including the domain name cura-domicil.ch

(limited to 100 certificates)
www.cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
cura-domicil.ch
cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
cura-domicil.ch
www.cura-domicil.ch
cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch

Certificate

The complete raw certificate details for www.cura-domicil.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 266716431497298285468074264401400147300692
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-17 01:35:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-15 01:35:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.cura-domicil.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 991281727032496942465360494045549818499792476225483064353007739346805840861514561737663859637834091108247001802547275368979658225259552082817482752664664996656902703328541647773071209196147755089111312253489342810349240896227035396048865922382650080875534066737169950327551823424312716363721447153220488942902163943913595391235832749448374288437424943710641655288147248889280469440218939318047106474248201170852753076192213236538220987476166807975467506765302042312935460972559299262841084092916512146793837641486301302535979809903918285995841418714970639162244213126453890345874313624947506175492470355280322873633879984463374762502918765787984331639207918912035554249150782545071170210613910193510944162846195810509385674608918813867981117926588129657046448132132839292310124634748605513736242203660272550859356573288403402961785472964502510584294852119253435357765510310453994991119782059499581910886786965939471391846366410087285528567082196916401593670339446813891900458398351028946139276578782946449377132595177090470512612076147845785766318163865641094257815676254521297402406147835793974323134290203342348250288086576554142241522545955762110661405325926612988904664596680046810395404905008160657241224425159572886784747694801
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c363f65beb8ec993f899cce05eaf48de9003c095
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cura-domicil.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016c9d6e65630000040300473045022100aa6680b45bfe72bc5e2ae61d86d258926082b5aca51ab0e5660b3f513c9e2eff02205cb6e36103e433f42b0938860ac735d5aec544cc45e9622ee86b1db05181a147007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c9d6e658200000403004730450221008083eca18723299559f36c0be371371407a7354e8153b45b4de7b3478e3321900220758a30084ae703873fd76e7d5612c8598baf78cccce560d1ff0e8f6edcee15f6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0014adc36461b7cba30e59d5818f4405b3a6affc3e67ac6b6e3db8777292997896a335a236a8d0cccb0343c9b00d531e3ccd94ea13c65855a53544a614de2dcb6c9689c2b7d3a3a4b4f707e273bd7e27c4f1148fe66f0272a8fc08aad70ac3745f84832b96bf610c24d2265ed1289816381c61ad2a4ce42bfba525ee41b74ab27ce6d7a14b237a11aefc5f2e755131d2e4abe533579048ade993a508f79aeb64dc84b17f0cfecb60f09815851637a443f6807338ce54450b938b033e78d6576135f00c66b71c16c1254f49f16f8b8e7aedd5a096dc2162c6d4178fb866aacc5208c0538df79c1a677b3218efd495f434b329698d2100099400ba2fe8e69cf5e476