crm.svc.clients.liip.ch

Issued by R3

About this certificate

This digital certificate with serial number 04:e8:cb:b8:30:9d:3a:7e:2b:cb:05:68:29:c3:2b:25:2f:56 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=crm.svc.clients.liip.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:e8:cb:b8:30:9d:3a:7e:2b:cb:05:68:29:c3:2b:25:2f:56
Serial Number (int): 427665442504477603592531057605422642179926
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: e2:9c:df:a1:81:1e:d2:03:36:16:ad:64:c8:c4:94:28:94:97:28:30
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 16:07:77:76:e2:26:41:64:b5:44:14:11:50:25:8f:45:c8:53:18:ed
Fingerprint (sha256): 10:f4:66:f7:26:1b:95:bd:a4:7d:24:9c:83:dd:dc:6c:c2:d5:8a:e2:98:4d:b5:a0:18:36:c1:75:29:33:df:72

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate crm.svc.clients.liip.ch

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for crm.svc.clients.liip.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

crm.svc.clients.liip.ch
crm.swiss-venture-club.ch

Other certificates including the domain name liip.ch

(limited to 100 certificates)
zebra.liip.ch
liip.ch
beta-zebra.liip.ch
liip.ch
legacy-clients.k8s.liip.ch
prolek.stage01.sb.liip.ch
gitlab.liip.ch
monitoring.elearning.liip.ch
test-wiki.liip.ch
bundstarterkit.demo.liip.ch
crm.svc.clients.liip.ch
baspo.bedev.liip.ch
liip.ch
guess.liip.ch
support.liip.ch
playground.moodle.liip.ch
*.clients.liip.ch
unitar2.stage01.sb.liip.ch
blog.liip.ch
moodle.careum-weiterbildung.ch
liip.ch
techpool.stage01.sb.liip.ch
eduprep.sosaerzte.ch
nagios.liip.ch
account.liip.ch
repair-cafe-stage.clients.liip.ch
stage.bwo.clients.liip.ch
liip-moodle.devel01.sb.liip.ch
order.elearning.liip.ch
meinunterricht2.kvz-weiterbildung.ch
moodle.liip.ch
liip.ch
prolek.stage01.sb.liip.ch
memberplus.rai.clients.liip.ch
vagrantbox-public.liip.ch
blog.liip.ch
ehb.clients.liip.ch
iuffp1.clients.liip.ch
lsca.devel01.sb.liip.ch
mdl-tph-mnet.devel01.sb.liip.ch
preprod.liip.ch
mobi.demo.liip.ch
wks.devel01.sb.liip.ch
preprod.liip.ch
iuffp1.clients.liip.ch
moodle.liip.ch
iuffp1.clients.liip.ch
*.d.clients.liip.ch
download.liip.ch
guidelines.liip.ch
stage.bwo.clients.liip.ch
repair-cafe.clients.liip.ch
*.liip.ch
crm.svc.clients.liip.ch
bzwu.stage01.sb.liip.ch
liip.ch
account.liip.ch
moodle-sob.clients.liip.ch
monitoring.elearning.liip.ch
cpdf.liip.ch
techpool.stage01.sb.liip.ch
liip-moodle.live03.sb.liip.ch
lsca.devel01.sb.liip.ch
moodle.careum-weiterbildung.ch
h5p.devel01.sb.liip.ch
gtm-generator.liip.ch
slides.liip.ch
lhc.stage01.sb.liip.ch
account.liip.ch
slides.liip.ch
blog.liip.ch
moodle-dev.graduateinstitute.ch
bgs.stage01.elearning.liip.ch
projects.liip.ch
lama.liip.ch
baspo.bedev.liip.ch
chbox.clients.liip.ch
kompra.stage01.sb.liip.ch
elearning.liip.ch
futura21.devel01.sb.liip.ch
stage.bwo.clients.liip.ch
shop.stapferhaus.bedev.liip.ch
dev.zb.clients.liip.ch
iuffp1.clients.liip.ch
iuffp1.clients.liip.ch
liip-moodle.stage01.sb.liip.ch
baspo.bedev.liip.ch
liip-moodle.devel01.sb.liip.ch
stage.bwo.clients.liip.ch
hfgz.stage01.sb.liip.ch
bcv.demo.liip.ch
gtm-generator.liip.ch
stage.bwo.clients.liip.ch
sasdb.clients.liip.ch
liip.ch
tourismuskv.stage01.sb.liip.ch
solradmin.live03.sb.liip.ch
php-osx.liip.ch
vagrantbox-public.liip.ch
bzu.stage01.sb.liip.ch

Certificate

The complete raw certificate details for crm.svc.clients.liip.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 427665442504477603592531057605422642179926
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-15 19:00:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-13 19:00:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'crm.svc.clients.liip.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 818690633848237712427812181361496427909298567741684214205933424357088552720299639542260740964834348752626716164613967696234005904318293250149530921217175087522617718206029838697351828014431733035631837329910902791305500835354981230266698392767175465796123283085581542444610514340570638434767517058770061562662474409582949710258881542813177776421270389881492341790111438277357384779756627475084182647145301244291022145014822767288678595824540378726438224694221340084749421133248271076091666832430053930475403236038100320990585151876556884493588419823962897886320192227826522371203297787519828595544864740826265870625780059687536500454022977794464831876879581590077827653951452184526353982123104952097313854729441890241915968991435477129970799161922385471369880322796441759145686272677072141529687348563406215395569239133953467869218814453927891504638440889055997838152179174986369642638900915605743438857741919433005880534161888600028164850492948975359867426875878688014674522671120082319381190939627652258282180446623604308274922065163721587412728267481508390257676374434296239840059470841824969909354018504636664966902057052295390455973861828194388802309313983336084236905426896401211300234452458015696110799833169040426425723397679
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e29cdfa1811ed2033616ad64c8c4942894972830
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crm.svc.clients.liip.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crm.swiss-venture-club.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000189fac8d96a0000040300483046022100e83138e1972dcfe7d3b9b7d9a17cfa5282191303cc3c3f23bb1398e18a38dac6022100f4b045ef3ca39ace94acc077a0b1451525b44092f6f4f890e80db97beca17277007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000189fac8d9890000040300473045022100e0987447c9cfcc04bc8c8e77479fa16ed7f2653cc1e14940aa1c21b02d3dd7ec02201f6a355c87808306d41ab6e15b4bf911db7cae583a7e61d1816b5ecae81041aa
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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