qa-delica.service.migros.cloud

Issued by R3

About this certificate

This digital certificate with serial number 03:07:df:9b:87:6c:20:de:6e:04:83:1f:b2:24:21:ad:fc:53 was issued on by Let's Encrypt.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=qa-delica.service.migros.cloud

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:07:df:9b:87:6c:20:de:6e:04:83:1f:b2:24:21:ad:fc:53
Serial Number (int): 264016059759492528787961133702218869767251
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ef:74:51:dd:cc:c0:74:4b:21:2b:67:fd:3a:9d:66:ec:6e:b2:8b:07
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ec:86:90:69:c0:f1:16:ea:7d:36:ba:48:27:3b:c8:be:5b:1b:a7:1f
Fingerprint (sha256): 11:db:f3:25:da:d3:fa:fb:47:55:cc:d7:cb:a7:3a:57:f2:95:10:bd:34:88:14:32:40:de:7c:89:48:27:c0:46

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate qa-delica.service.migros.cloud

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for qa-delica.service.migros.cloud

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

delica.service.migros.cloud
qa-delica.service.migros.cloud
retour.delicaservice.ch
test-retour-delica.service.migros.cloud
test.delicaservice.ch
test.retour.delicaservice.ch
www.delicaservice.ch

Other certificates including the domain name migros.cloud

(limited to 100 certificates)
migros.cloud
migros.cloud
migros.cloud
engagement-redirect.service.migros.cloud
lb-dit-orangergarten.service.migros.cloud
admin.m4music.ch
admin.operations.migros.ch
azq.golfparks.ch
alnatura.ch
parkimgruene.ch
admin.hitzberger.ch
alnatura.ch
testadmin-ucommerce-test.service.migros.cloud
dev-cdn.migros.ch
api.migros.ch
admin.logistikplattform.migros.ch
qa-blfa-api.service.migros.cloud
orangergarten.ch
admin.parkimgruene.ch
admin.golfparks.ch
engagement-redirect.service.migros.cloud
engagement-redirect.service.migros.cloud
betriebsrestaurants-migros.ch
blfa-api.service.migros.cloud
admin.migros-city.ch
giftcardshop-b2b.service.migros.cloud
parkimgruene.ch
buelach-sued.ch
azqadmin.golfparks.ch
qa-delica.service.migros.cloud
onlineberatung-qa.service.migros.cloud
alnatura.ch
neumarktaltstetten.ch
logistiktransport-testadmin.service.migros.cloud
kaimug.ch
admin.kaimug.ch
admin.hitzberger.ch
digital-campaign-factory-dev.migros.ch
orangergarten.ch
mgb-peeringpage-prod.service.migros.cloud
digital-campaign-factory-test.migros.ch
admin.betriebsrestaurants-migros.ch
migros.cloud
kaimug.ch
digital-campaign-factory.migros.ch
mangelverwaltung-test.service.migros.cloud
admin.parkimgruene.ch
alnatura.ch
dev-blfa-api.service.migros.cloud
cdn.migros.ch
m4music.ch
neumarktaltstetten.ch
nature.ch
admin.m4music.ch
miduca.ch
sparx-space.ch
blfa-api.service.migros.cloud
betriebsrestaurants-migros.ch
logistiktransport.ch
betriebsrestaurants-migros.ch
sparx-devadmin.service.migros.cloud
logistiktransport-testadmin.service.migros.cloud
zueriseecenter.ch
m4music.ch
logistiktransport.ch
admin.kaimug.ch
www.club-konzerte.ch
admin.migros-kulturprozent-classics.ch
migros.cloud
zueriseecenter.ch
admin.maker-space.com
betriebsrestaurants-migros.ch
maker-space.com
hitzberger.ch
testadmin.sparx-space.ch
logistiktransport.ch
admin.eatery.ch
m4music.ch
digital-campaign-factory-prev.migros.ch
dev-blfa-api.service.migros.cloud
blfa-api.service.migros.cloud
stage-one.ch
migros-city.ch
neumarktaltstetten.ch
buelach-sued.ch
maker-space.com
www.migros-kulturprozent-classics.ch
orangergarten.ch
admin.logistikplattform.migros.ch
parkimgruene.ch
betriebsrestaurants-migros.ch
admin.buelach-sued.ch
www.golfparks.ch
migros-city.ch
dev-cdn.migros.ch
mitreva.ch
admin.eatery.ch
azq.golfparks.ch
stage-one.ch
mgb-peeringpage-prod.service.migros.cloud

Certificate

The complete raw certificate details for qa-delica.service.migros.cloud in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3n5LG1ihRXit9uHDTMtf
3UqHKlGCv3ej1LM0bs8IoLURDb3XcOQG7uCvBG1uEgbB0cSMfP1WD89O3QmWZK9I
V3e73TFwE4X7gkI6RpzCAL9CRNq3mex5j+ecZh1Ofj65wDpOYVZaeLe8cSBtQ1zJ
4g1GPNUZFufe+HkeSnwe4EojCE/unjFTMK4IlO9c9P2qgb4ljfefRvZD870mEQo9
rJQIaEzOvG0UMJpW1A7sbdD/hT/ZLw/12+2kTz5DvEZM6RTGiodw7qFSdnr2xSDF
+IjJJYcbvFIpTX1SmYic46RUVbFu8t4Ltfdi7DM2cz0mpVFdrU8aqHXzfhWzIdED
eQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 264016059759492528787961133702218869767251
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-18 14:56:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-16 14:56:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'qa-delica.service.migros.cloud'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28087181292229064123811847046842362886307662481765432824415757506950210067750296203597594622571368169901545326127589525306113047704037526942752466053836675911324063801649266572140267284270995272465454181889877676777683941582399873616647400148881638310707787243993224167294087802215304925553251475882474932273359106138716780747350513369600972221549514334006648438736650769017825981244616028245186890304280198494514413542203042802112337081255334561624197460529639098804676641880305398238496281197669599420451189628555778395435260734405081559385283112727615267699763482780217248186703956296675034685047703971088301097849
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ef7451ddccc0744b212b67fd3a9d66ec6eb28b07
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (205 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delica.service.migros.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-delica.service.migros.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retour.delicaservice.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-retour-delica.service.migros.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.delicaservice.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.retour.delicaservice.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.delicaservice.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018969b76d9d0000040300473045022100d15b7650b0bf802706931ed2ffb5093133b3e11128afdc75b6fe6a242b11ebc602203d18ad4b297ec77b682e72a560fd211040ecc85edc30f1baf2ece25cfab426da007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018969b76f670000040300483046022100b4766733b25be1609c5f5c436b424dc9a3de74b59c202e2978e68aef9a9ca862022100bc1d18425687bba4283deef7314fc1c42eff0a9932f0b6df13e916b37e7a44a1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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