tg.transgourmet.ch

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:cc:07:f2:52:9c:f5:be:a9:0d:95:20:6f:fc:ae:45:33:88 was issued on by Let's Encrypt.

With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tg.transgourmet.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:cc:07:f2:52:9c:f5:be:a9:0d:95:20:6f:fc:ae:45:33:88
Serial Number (int): 330765023454555681499101206192630779949960
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e0:df:93:c4:75:ad:eb:dd:72:6e:0d:aa:1d:7f:ef:cc:52:82:f8:9e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 21:53:db:24:ee:1a:bb:d4:76:53:ab:80:e8:4a:73:69:54:ce:8a:d5
Fingerprint (sha256): 0f:dd:13:66:67:a3:a9:9f:40:ed:62:5e:2e:80:e9:10:fa:a9:ac:21:f1:b3:5f:47:59:06:7a:7f:0d:11:f0:a3

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate tg.transgourmet.ch

9

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tg.transgourmet.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

epaper.transgourmet.ch
gusto.transgourmet.ch
images.transgourmet.ch
law.transgourmet.ch
live.transgourmet.ch
prodega.transgourmet.ch
solutions.transgourmet.ch
support.transgourmet.ch
tg.transgourmet.ch

Other certificates including the domain name transgourmet.ch

(limited to 100 certificates)
moebel-gruber.mediaflip.de
new.transgourmet.ch
magazin.peak-muenster.de
jobst-wohnwelt.mediaflip.de
kiosk.greater.sydney
magazine.landroverusa.com
jobst-wohnwelt.mediaflip.de
lemagazine.landrover.com
solutions.transgourmet.ch
epaper.abakus-magdeburg.de
webkiosks.sm-sport.de
jobst-wohnwelt.mediaflip.de
law.transgourmet.ch
epaper.treffpunkt-bau.eu
moebel-mmz.mediaflip.de
sip.transgourmet.ch
catalog.sogears.com
webkiosk.dein-typ.de
magazin.zibibbo.de
jobst-wohnwelt.mediaflip.de
hoffmann-moebel.mediaflip.de
hoffmann-moebel.mediaflip.de
hummerich.mediaflip.de
moebel-zuck.mediaflip.de
ftp.transgourmet.ch
akamai-san166.exacttarget.com
magazine.landrover.com.cn
mymail.coop.ch
tg.transgourmet.ch
ruesen.mediaflip.de
ruesen.mediaflip.de
transgourmet.ch
moebel-zuck.mediaflip.de
hummerich.mediaflip.de
trop.mediaflip.de
jobst-wohnwelt.mediaflip.de
frauendorfer.mediaflip.de
new.transgourmet.ch
jobst-wohnwelt.mediaflip.de
hummerich.mediaflip.de
berliner-kurier.kiosk.plus
jobst-wohnwelt.mediaflip.de
trop.mediaflip.de
app.langguth.wine
epapers.gleitz-online.de
webmail.transgourmet.ch
webkiosk.baeckereibuettner.de
mymail.coop.ch
moebel-mmz.mediaflip.de
moebel-mai.mediaflip.de
epaper.treffpunkt-bau.eu
blaetterkatalog.rp-media.de
ruesen.mediaflip.de
jobst-wohnwelt.mediaflip.de
moebel-zuck.mediaflip.de
berliner-kurier.kiosk.plus
moebel-berta.mediaflip.de
moebel-mmz.mediaflip.de
jobst-wohnwelt.mediaflip.de
hummerich.mediaflip.de
mobila.mediaflip.de
trop.mediaflip.de
moebel-gruber.mediaflip.de
akamai-san166.exacttarget.com
gusto.transgourmet.ch
moebelundobjekt.mediaflip.de
katalog.unzerbrechbar.de
hetmagazine.landrover.com
medien.koinno-bmwi.de
berliner-zeitung.kiosk.plus
moebel-meyer.mediaflip.de
berliner-zeitung.kiosk.plus
ruesen.mediaflip.de
ftp.transgourmet.ch
kiosk.greater.sydney
jobst-wohnwelt.mediaflip.de
ruesen.mediaflip.de
tg.transgourmet.ch
jobst-wohnwelt.mediaflip.de
ruesen.mediaflip.de
mymail.coop.ch
hummerich.mediaflip.de
katalog.unzerbrechbar.de
webkiosk.reven.de
kiosk.greater.sydney
onlinekrant.binnenvaartkrant.nl
moebel-gruber.mediaflip.de
moebel-berta.mediaflip.de
moebel-gruber.mediaflip.de
private.transgourmet.ch
epaper.treffpunkt-bau.eu
moebel-berta.mediaflip.de
online.hansestyle.hamburg
moebel-meyer.mediaflip.de
akamai-san166.exacttarget.com
law.transgourmet.ch
www.transgourmet.ch
kataloge.fuerholz.de
mobila.mediaflip.de
login.transgourmet.ch

Certificate

The complete raw certificate details for tg.transgourmet.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4+dL9Z3WtdNSIb8iIZ38
Nl0MDx8SzRGHki/uk3321eJM8SZdSxlaGRqtU/GX3gkIBKqAL56eMYuoS5ILXBwS
VksM50hhW/yE0+VeVm3vSaU5oXfHGliD24jznJ5g6PKeIazKTl7txisf1YQWE77J
TujvmuPYAlqPYU5LJDl3lM49GUyB6lEgygxzniT7XhQS/8sLgMr/+0TfyC6XFuyB
t9zNVhIU1HTYFRoU8Khe5s8H6vrqUUpOUQ2w/0UHAlqCPj4esBe7IS0KW5t5xs6V
WMxHIgw1vDTmJukCjdZYWj6+0XoylkBB5B50q4mHt9+weh27K+7e71K2Pv8m6/k2
AQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 330765023454555681499101206192630779949960
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-02 04:33:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-31 04:33:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tg.transgourmet.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28770151889181658511033519227151280768368004307876311026892977204646415735554322883695312955113110658445405647049789234738644458871865753784826438915342962560376917543005830671849419742966442214332198838472367953529341359291210926449702811236505154525053736893858324805665109080633177211432398793267474281963972406056270200459752888505743035590824989861416805633799115405404473008057748626639961181061940440573167371267384940088043021404237929826283490475269920324190476757162352336672755899918967414773712437609177107793265719549669107792911912636659790374207410702132935020030532346380715743307101041520542601524737
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e0df93c475adebdd726e0daa1d7fefcc5282f89e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (214 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epaper.transgourmet.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gusto.transgourmet.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.transgourmet.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'law.transgourmet.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.transgourmet.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prodega.transgourmet.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solutions.transgourmet.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.transgourmet.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tg.transgourmet.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016e2a9a4fc00000040300473045022021c05c3584e21aab179e505bfe51bf47205d0e0440072a2dd89ab18695ee5941022100fa0d3d644244e65689dd7b45316d8d96d2ee2cca13e9df753f7efa8f0246ec53007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016e2a9a4fb6000004030047304502203dce4899772ecdae63cce431b928160b955ad579cdde2da85783b15c64148340022100c75ffd5f1bd5ecc5029286f8fd5f04349e4d7d5335488df46ac7bc6407d06a07
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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