auth.blek.ch

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ac:6f:43:3e:4a:0e:40:ef:85:da:22:e6:38:b8:e3:66:24 was issued on by Let's Encrypt.

With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=auth.blek.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ac:6f:43:3e:4a:0e:40:ef:85:da:22:e6:38:b8:e3:66:24
Serial Number (int): 320013318360480493895879371293117802309156
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 76:73:5c:82:00:53:be:62:37:26:9f:09:b9:fe:8b:e1:8d:bb:f0:66
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): be:06:7c:86:20:96:8c:bb:fa:9a:42:d6:4b:79:8c:d5:1b:c8:8a:ba
Fingerprint (sha256): 12:d5:2b:30:d1:03:78:50:0d:db:97:50:de:68:b0:51:e0:5f:cb:7f:21:ed:9d:c2:24:5a:a4:e8:ad:43:10:1a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate auth.blek.ch

18

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for auth.blek.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

athena.blek.ch
auth.blek.ch
benevoles.balelec.ch
cdn.blek.ch
deuxtranet.blek.ch
inscriptions.blek.ch
intranet.blek.ch
kronos.blek.ch
lab.blek.ch
mail.balelec.ch
mail.blek.ch
rc.blek.ch
secu.blek.ch
services.balelec.ch
stats.blek.ch
survey.balelec.ch
vintage.blek.ch
wiki.blek.ch

Other certificates including the domain name blek.ch

(limited to 100 certificates)
archives.blek.ch
benevoles.balelec.ch
webcams.blek.ch
*.blek.ch
*.blek.ch
intranet.blek.ch
mail.blek.ch
public.balelec.ch
stats.blek.ch
gallery.blek.ch
files.blek.ch
mail.blek.ch
mail.blek.ch
auth.blek.ch
webcams.blek.ch
gallery.blek.ch
public.balelec.ch
auth.blek.ch
mail.blek.ch
archives.blek.ch
public.balelec.ch
webcams.blek.ch
public.balelec.ch
webcams.blek.ch
public.balelec.ch
files.blek.ch
*.blek.ch
gallery.blek.ch
stats.blek.ch
gallery.blek.ch
auth.blek.ch
mail.blek.ch
files.blek.ch
auth.blek.ch
mail.blek.ch
gallery.blek.ch
public.balelec.ch
gallery.blek.ch
public.balelec.ch
*.srv.blek.ch
benevoles.balelec.ch
files.blek.ch
archives.blek.ch
auth.blek.ch
archives.blek.ch
stats.blek.ch
intranet.blek.ch
auth.blek.ch
files.blek.ch
files.blek.ch
auth.blek.ch
gallery.blek.ch
intranet.blek.ch
mail.blek.ch
cdn.blek.ch
auth.blek.ch
webcams.blek.ch
archives.blek.ch
intranet.blek.ch
public.balelec.ch
gallery.blek.ch
auth.blek.ch
files.blek.ch
webcams.blek.ch
mail.blek.ch
benevoles.balelec.ch
mail.blek.ch
*.srv.blek.ch
webcams.blek.ch
webcams.blek.ch
intranet.blek.ch
stats.blek.ch
intranet.blek.ch
auth.blek.ch
auth.blek.ch
public.balelec.ch
archives.blek.ch
archives.blek.ch
webcams.blek.ch
files.blek.ch
public.balelec.ch
mail.blek.ch
gallery.blek.ch
gallery.blek.ch
gallery.blek.ch
archives.blek.ch
public.balelec.ch
webcams.blek.ch
webcams.blek.ch
intranet.blek.ch
mail.blek.ch
public.balelec.ch
public.balelec.ch
public.balelec.ch
auth.balelec.ch
archives.blek.ch
*.blek.ch
public.balelec.ch
auth.blek.ch
archives.blek.ch

Certificate

The complete raw certificate details for auth.blek.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 320013318360480493895879371293117802309156
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-10 13:40:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-08 13:40:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'auth.blek.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 700080579032596718877947941388311624915417920587330340951192945601039819446939249508240207595182362587033414718136769877808581296697842268732349843506568383813216670527755545869121445168895360385629198247082654592480103043670422270545162806581186288649277038382476438889163521464903749158014459580723906213373910310311806800563753644218596935338825361083675983666164958043806225975323509428292040886089652344473900555051163742752191688645305370383996613160073432440211852851772122522362277798134788026728854547360749191210782604378116845140143084439515865477502315280200068483095445082595969895544768090799732664206562236977859249858614221003134220608642809014827571093675375432735133668839291712242161233755768683771139263467584929681878998196538080374342356130533598944655492705683916892217532245901561679509530473466411378859651468963824473986046353955068863852043535648236228131276409329003682285088820033807940262078252481337209557183075228597989791714472490260726059882773188367292875109536717503443756106695533711644082079633626131970418357885243692855446736031284905738874027462872145405638832994966703521311537621434654294895069161522256890092047420246404298170320426545275303072252497774495193968691878785502130133910943233
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							76735c820053be6237269f09b9fe8be18dbbf066
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (301 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'athena.blek.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.blek.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benevoles.balelec.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.blek.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deuxtranet.blek.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inscriptions.blek.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.blek.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kronos.blek.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lab.blek.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.balelec.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.blek.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rc.blek.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secu.blek.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services.balelec.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stats.blek.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'survey.balelec.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vintage.blek.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiki.blek.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000166fe10b92f00000403004730450220043777a97828017e276f676d900030665ec3fbff85e45862913a4c6431322352022100b7efcdde784ed711ed3cdc90af35fc08f3ead4d8cca383f490d0d85d80b793af007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000166fe10b9de000004030047304502203bdd5ed2ee8da4e91480390bb5e9ca45b1e6ffb4858240d6bd60c83a75331731022100da3d33aeacae20b9512aad1b802a8d573c6791a94ea2507a281e25616c55e83b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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