bkb.paixon.ch

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:2d:ee:b7:36:88:57:e1:80:aa:28:f6:76:b7:9f:aa:d0:52 was issued on by Let's Encrypt.

With 30 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=bkb.paixon.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:2d:ee:b7:36:88:57:e1:80:aa:28:f6:76:b7:9f:aa:d0:52
Serial Number (int): 276966871866097239157826514098601465663570
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 68:6d:7a:97:8b:e6:99:81:44:5c:0f:a0:00:f4:72:e0:10:bc:ac:ba
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): af:33:6e:c0:e9:f6:3c:62:d7:61:eb:a2:8b:ed:23:35:8e:58:84:5f
Fingerprint (sha256): 10:41:c6:b4:c1:09:72:bc:ba:7a:74:e6:58:43:37:34:07:60:65:5b:66:a4:a9:1e:e2:92:4b:a7:8d:be:f6:89

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate bkb.paixon.ch

30

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bkb.paixon.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.paixon.ch
backup.paixon.ch
bkb.paixon.ch
bot.bkb.paixon.ch
bot.das.paixon.ch
bot.ifmh.paixon.ch
bot.mite.paixon.ch
bot.sygma.paixon.ch
bot.unibern.paixon.ch
bot.ylex.paixon.ch
dev.admin.paixon.ch
dev.bkb.paixon.ch
dev.bot.bkb.paixon.ch
dev.bot.das.paixon.ch
dev.bot.ifmh.paixon.ch
dev.bot.sygma.paixon.ch
dev.bot.unibern.paixon.ch
dev.bot.ylex.paixon.ch
dev.ifmh.paixon.ch
dev.paixon.ch
dev.sygma.paixon.ch
dev.unibern.paixon.ch
dev.ylex.paixon.ch
ifmh.paixon.ch
paixon.ch
rasa.sdt.paixon.ch
sdt.paixon.ch
sygma.paixon.ch
unibern.paixon.ch
ylex.paixon.ch

Other certificates including the domain name paixon.ch

(limited to 100 certificates)
bkb.paixon.ch
*.paixon.ch
bkb.paixon.ch
bkb.paixon.ch
bkb.paixon.ch
paixon.ch
paixon.ch
paixon.ch
paixon.ch
paixon.ch
paixon.ch
paixon.ch
*.paixon.ch
paixon.ch
paixon.ch
paixon.ch
bkb.paixon.ch
paixon.ch
paixon.ch
paixon.ch
*.paixon.ch
paixon.ch
paixon.ch
bls.paixon.ch
paixon.ch
paixon.ch
paixon.ch
paixon.ch
paixon.ch
bls.paixon.ch
paixon.ch
paixon.ch
bls.paixon.ch
paixon.ch
paixon.ch
bkb.paixon.ch
bls.paixon.ch
bls.paixon.ch
paixon.ch
paixon.ch
paixon.ch
bls.paixon.ch
paixon.ch
paixon.ch
paixon.ch
paixon.ch
paixon.ch
bkb.paixon.ch
paixon.ch
paixon.ch
paixon.ch
paixon.ch
paixon.ch
paixon.ch
bls.paixon.ch
*.paixon.ch
bkb.paixon.ch
bkb.paixon.ch
bls.paixon.ch
*.paixon.ch
bls.paixon.ch
*.paixon.ch
paixon.ch

Certificate

The complete raw certificate details for bkb.paixon.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3jWN8jt2PTuG+4iyPf7
lnewu+I8Yc1RSrux5rF/3KBvjE1kJbswRFCoEa0UEw5jKrNNCYLVWNUC1uhafrtw
/ktSlQVcMDm1R7O2r4osaGaDIpYLut2sCmJDzFyUgcrAx/sGxw7VKTixKHAtcCff
McNiT7UqyXadN8n+sVYJ5+kdBhR42ZHS3hPLrheLMlhKM/0JuGetgEEU+whftuRd
41t2LGaFcQIJzzNKMhl7OzwziUFKA1sfeHBzioKusc5jdDRVt+OEii2EMXvdLHNP
nJHorD0gvOM7uxoFnRK6ivyT0dzSZH2C+/4ooB5Lj94PeMW1jFlQ/HqBXgQAgy1r
iQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 276966871866097239157826514098601465663570
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-17 05:58:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-17 05:58:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bkb.paixon.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25181009529590411932556807515995220818900585087847237767196809418316864108292058966601486501650396653258969165465875503640816464409207820675361600530732153086458544954290302076809229179520630772120982872644407463886174966340415536135804534745364021009004793655711419556750074048640998601954544184116380456646665015671776963317054700172377580571181475867490918564863834973351446020717528633033034485710858204668276809910790973427824645988030906318371555247463548574075877958568701109735242861024779380541845263653760518804522434298813547532655728056640081208349539953470320976138452931849851580632356180293904772197257
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							686d7a978be69981445c0fa000f472e010bcacba
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (595 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.paixon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backup.paixon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bkb.paixon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bot.bkb.paixon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bot.das.paixon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bot.ifmh.paixon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bot.mite.paixon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bot.sygma.paixon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bot.unibern.paixon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bot.ylex.paixon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.admin.paixon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.bkb.paixon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.bot.bkb.paixon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.bot.das.paixon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.bot.ifmh.paixon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.bot.sygma.paixon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.bot.unibern.paixon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.bot.ylex.paixon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.ifmh.paixon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.paixon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.sygma.paixon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.unibern.paixon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.ylex.paixon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ifmh.paixon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paixon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rasa.sdt.paixon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sdt.paixon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sygma.paixon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unibern.paixon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ylex.paixon.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000017051f0b318000004030047304502203ecef0f725ded358a620d09bbd9c023fc69b9601ca4087c81215e646b7af6418022100d2a9bc9316e645bbcb29dd8896d0f4c8e6e8f9cfb3dc2eda4478840d2c80f920007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000017051f0b53b0000040300473045022100a99495630148e6b77bf72e5679b5689d7305032f1201154c00385c8a5c7d47de02207fad39556585df8f5d5aa3b2457f1e0a42429214ec90764b71e517ccb0e823ab
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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