confluences.ch
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:7e:ba:bd:fb:72:d8:a4:64:3e:ba:33:03:0f:36:9f:e9:07 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=confluences.ch
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:7e:ba:bd:fb:72:d8:a4:64:3e:ba:33:03:0f:36:9f:e9:07Serial Number (int): 391572944810385358960207700644618353764615
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: ed:bc:96:6e:1b:74:a5:b3:11:0a:89:7f:ab:ef:7a:10:b1:cf:60:4e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 3c:51:be:19:92:05:85:e3:f7:98:d1:93:88:91:5b:01:33:39:5c:20
Fingerprint (sha256): 14:26:1a:9b:10:f9:1b:8a:a6:dc:17:8b:d6:ed:9b:95:30:10:6d:5e:0e:77:cc:ed:9b:55:98:ac:05:7a:23:2c
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate confluences.ch
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for confluences.ch
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
confluences.ch
confluences.nimag.net
confluences.nimag.net
Other certificates including the domain name confluences.ch
(limited to 100 certificates)
Certificate
The complete raw certificate details for confluences.ch in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGbTCCBVWgAwIBAgISBH66vfty2KRkProzAw82n+kHMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAyMjUyMDA5MTFaFw0y MDA1MjUyMDA5MTFaMBkxFzAVBgNVBAMTDmNvbmZsdWVuY2VzLmNoMIICIjANBgkq hkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAzH82y6DhAJdAXXMoYCAoa5yWUEHNxZtH iDc1j/D1LlB9tX29T7Qh0C3nKpkqwomCpibPonbOnH2naRjEFJaeFUld9guiqidP 9LT/91YAWIJ6QQ2A6vEeA3fiXw9jVpf74bxmAGcDakDJVvixz4Mmdyrm3NQ3QDHp WGNXiSWSd8hu5IaI+wpDh0eJ7kMTjhFtonYJ6qdvV28OCeATliTGSKiWDcGeBjbE l139YVcTP0JAAB6fzUHHiuZ4BfxwnIomBobLU/fiARsDot+ly+13V+xk2Y00SbXL ktmhxU0p2m0muH+tv3gtNhrow5lmVgFhcfp/Zhj39TRSPADO3fRYZtUrnGRNip9b WCOoM+SKy96CQ3Kq8S7EYAfV3EcfKzGvz0p9t5Mc8bUIDXLJ6BVhGmFdHG/Bfv9y gwuSfNME3/O086+TesOhIdsbnaPVcZNXa+isb6BA8UdF8loiDRyXUhTI4/2BRFhG U3qpc+7hvFmOVsv8EEJp1PhUtNDbpRLs9D236tZKn9odD856KVDZ6idtziMVN/eA 3sZol7kpWgN+c6Wc8WfyN5rtP+vF3tG8jGKLwoqLdTUM0URDLqEVMUgfehMY/Uxb fmSE3sDEJIuduEkExfD83rTvLtS2pxj1AvKvyBBQMo0OiA8Krr5hwIFwaE4OesOb dBvZbjuFRasCAwEAAaOCAnwwggJ4MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAU BggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU7byW bht0pbMRCol/q+96ELHPYE4wHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo 7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQt eDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQt eDMubGV0c2VuY3J5cHQub3JnLzAwBgNVHREEKTAngg5jb25mbHVlbmNlcy5jaIIV Y29uZmx1ZW5jZXMubmltYWcubmV0MEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysG AQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQu b3JnMIIBBgYKKwYBBAHWeQIEAgSB9wSB9ADyAHcAb1N2rDHwMRnYmQCkURX/dxUc EdkCwQApBo2yCJo32RMAAAFwfi6n4AAABAMASDBGAiEAmbUfu0tzadaiptOj+Q81 jAkNKAAkHnKBNWRyfu9rTgECIQCSSSyY1ibMMDVP7Yvg2SQUV3cWzQcm4zom+tfO 6NrYcgB3AAe3XBvlfWj/8bDGHSMVx7rmV3xXlLdq7rxhOhpp06IcAAABcH4up+EA AAQDAEgwRgIhAJYM6VboLbnkZyIc/Ifi4Xq6SzKouRxkFqNzyoLw/I9xAiEA2mVu qNZn/b5BVgh01mfYc3N/SDBNJbl197TcMUqzJ7AwDQYJKoZIhvcNAQELBQADggEB AFmyXNVCBRZxAWsg66jftHLJ95LMn5ibn9yIuvR0Y8yCobSWxbLn6eiWMtuYX2EM Dlw1SMCeBmEmM2eyLiwZ45fwwC6OmDH2TLhvalVZ1DMnxP/nhiF6Q2IF69p9CxYm WOq9cDvPAdwA+AlQ2GRwWtRJy1YWpCe9+s5Ad3FWyEwQDUYmiCvPiX2u8JeyUK6T F7K78Cz9erMSXOlVXqNEgIZQVcwGq20jFfJJsQnJSp+Ed64eSKr3aoWvgHY/IsbZ ngxh3AuLfzmzc6uSLBM09b1GD6SYps8xZ/oAjjZXPo6VyOpxS4q7HE+4U+xC+PPo D4PkOPEscQW6fP6yajpkQD4= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAzH82y6DhAJdAXXMoYCAo a5yWUEHNxZtHiDc1j/D1LlB9tX29T7Qh0C3nKpkqwomCpibPonbOnH2naRjEFJae FUld9guiqidP9LT/91YAWIJ6QQ2A6vEeA3fiXw9jVpf74bxmAGcDakDJVvixz4Mm dyrm3NQ3QDHpWGNXiSWSd8hu5IaI+wpDh0eJ7kMTjhFtonYJ6qdvV28OCeATliTG SKiWDcGeBjbEl139YVcTP0JAAB6fzUHHiuZ4BfxwnIomBobLU/fiARsDot+ly+13 V+xk2Y00SbXLktmhxU0p2m0muH+tv3gtNhrow5lmVgFhcfp/Zhj39TRSPADO3fRY ZtUrnGRNip9bWCOoM+SKy96CQ3Kq8S7EYAfV3EcfKzGvz0p9t5Mc8bUIDXLJ6BVh GmFdHG/Bfv9ygwuSfNME3/O086+TesOhIdsbnaPVcZNXa+isb6BA8UdF8loiDRyX UhTI4/2BRFhGU3qpc+7hvFmOVsv8EEJp1PhUtNDbpRLs9D236tZKn9odD856KVDZ 6idtziMVN/eA3sZol7kpWgN+c6Wc8WfyN5rtP+vF3tG8jGKLwoqLdTUM0URDLqEV MUgfehMY/UxbfmSE3sDEJIuduEkExfD83rTvLtS2pxj1AvKvyBBQMo0OiA8Krr5h wIFwaE4OesObdBvZbjuFRasCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 391572944810385358960207700644618353764615 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-25 20:09:11 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-25 20:09:11 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'confluences.ch' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 834274686839060339426287034929775870067638457177634723663476944435316253888305845296027214636699895225161763275315610236311789142057533777366955290561257709404160302115155111166952387073831366867180972064969651122182318060330288571416925239890568838348207172642965539642803139214290884296494258115362255844640162411243513805163200986299544862590717856167760799714142500456342515909695745666251648553902546171202173187643798121503963517446825400273609171653844370017982546534627421681160184481752789090990952478470713489174516060130573081736478684033352595012626490776301453284478724625308456100622273743103941703244578327828192243280567993117509142346018407242043360358228133614213369458511898287036016129647528959200907360901068122420392803922001770783924962115939912230576726788167015540042040388080987229898986344488529010845524873983410874499443321709401556569215753434901180297307222889486925733291250856013302268865596552906138787612758531705120834222503963598266226418043106971386947163514042158889606945333453858968817622580193447527928803435251622226372120123807655418446796073612366309288198942134706780062391477997182464176662646410615213318942085983757234843746575290014293423298876574809368850640602345781588396022777259 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) edbc966e1b74a5b3110a897fabef7a10b1cf604e . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (41 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'confluences.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'confluences.nimag.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) 00f20077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001707e2ea7e0000004030048304602210099b51fbb4b7369d6a2a6d3a3f90f358c090d2800241e72813564727eef6b4e0102210092492c98d626cc30354fed8be0d92414577716cd0726e33a26fad7cee8dad87200770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001707e2ea7e10000040300483046022100960ce956e82db9e467221cfc87e2e17aba4b32a8b91c6416a373ca82f0fc8f71022100da656ea8d667fdbe41560874d667d873737f48304d25b975f7b4dc314ab327b0 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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