xn--freishofldeli-jfb.ch

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:6d:6e:03:d0:ad:71:00:fc:f8:07:0b:db:ed:7c:44:58:ef was issued on by Let's Encrypt.

With 20 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=xn--freishofldeli-jfb.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:6d:6e:03:d0:ad:71:00:fc:f8:07:0b:db:ed:7c:44:58:ef
Serial Number (int): 298573870678572591483118479617884428720367
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 81:f9:ad:e2:fd:a6:f2:69:fb:86:4b:8b:9c:9f:40:9d:76:86:ea:5b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): df:5c:3e:4e:07:d1:53:31:c4:d8:9c:83:91:34:43:39:a9:bc:eb:6f
Fingerprint (sha256): 14:c4:02:49:00:7f:28:ff:0b:3c:3a:63:32:42:72:27:e7:f1:73:b5:ae:d5:24:74:a7:c2:5b:9c:2a:fb:4d:1e

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate xn--freishofldeli-jfb.ch

20

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for xn--freishofldeli-jfb.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

autodiscover.pixelwiese.ch
autodiscover.xn--freishofldeli-jfb.ch
cpanel.pixelwiese.ch
cpanel.xn--freishofldeli-jfb.ch
cpcalendars.pixelwiese.ch
cpcalendars.xn--freishofldeli-jfb.ch
cpcontacts.pixelwiese.ch
cpcontacts.xn--freishofldeli-jfb.ch
freishoflaedeli.pixelwiese.ch
mail.pixelwiese.ch
mail.xn--freishofldeli-jfb.ch
pixelwiese.ch
webdisk.pixelwiese.ch
webdisk.xn--freishofldeli-jfb.ch
webmail.pixelwiese.ch
webmail.xn--freishofldeli-jfb.ch
www.freishoflaedeli.pixelwiese.ch
www.pixelwiese.ch
www.xn--freishofldeli-jfb.ch
xn--freishofldeli-jfb.ch

Other certificates including the domain name xn--freishofldeli-jfb.ch

(limited to 100 certificates)
xn--freishofldeli-jfb.ch
xn--freishofldeli-jfb.ch
xn--freishofldeli-jfb.ch
xn--freishofldeli-jfb.ch
xn--freishofldeli-jfb.ch
xn--freishofldeli-jfb.ch
xn--freishofldeli-jfb.ch
xn--freishofldeli-jfb.ch
xn--freishofldeli-jfb.ch
xn--freishofldeli-jfb.ch
xn--freishofldeli-jfb.ch
xn--freishofldeli-jfb.ch
xn--freishofldeli-jfb.ch
xn--freishofldeli-jfb.ch
freishoflaedeli.pixelwiese.ch
xn--freishofldeli-jfb.ch
xn--freishofldeli-jfb.ch
xn--freishofldeli-jfb.ch

Certificate

The complete raw certificate details for xn--freishofldeli-jfb.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0srluZNPfutwebXmDvvG
HT1O2bszU+Ct9drCL3CsJfyz+qOG0VzhL+4bMTMaL9eM/uDiv6vVveje0mozUNY2
6Zc4cZ3u5t7WWMlQFiC8IKifi4h6DA0ssP8aEWtncUrIGGPi/YJil2XdRCX4JIx4
s4tmVEa5ax+S8+1qAQiW611y6IevpXeNkLhTGPc/GTN9Fz1Gr8L/wVcAikBfGCN8
zjw1YtGwDSsVpo1sVDYDKUxxD0IRLfahQgI7P8e5rOeyjr1zGu4VhpJ3E8vTG7HR
vOY8ORl49fNwjyH3XYN57Olc/qKS9soO23r9gHikEYvWBJfSOSrSp9BLGoEW/mTW
bwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 298573870678572591483118479617884428720367
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-26 21:43:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-26 21:43:50 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'xn--freishofldeli-jfb.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26610096461526151317961785232912124303744401248299360545256839643746126160015467130512089876604896818347000433852076169928465701738244533305016398111599190786038688481572391142049052110038416714983925169109876875707496253794667780471919803414177558569462712635373972909781204086343714806658645302058173114873626902727067206036893164635710691458249483159032268821931288740681215567283346819574335989100552960146533610107578860768494755337729737438194456110116882080428082289222169226487112283471542070985675133798189740581469353228648075394333552390878377093070089636075400738428773419702378023037649723627879409178223
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							81f9ade2fda6f269fb864b8b9c9f409d7686ea5b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (575 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.pixelwiese.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.xn--freishofldeli-jfb.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.pixelwiese.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.xn--freishofldeli-jfb.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcalendars.pixelwiese.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcalendars.xn--freishofldeli-jfb.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcontacts.pixelwiese.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcontacts.xn--freishofldeli-jfb.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freishoflaedeli.pixelwiese.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.pixelwiese.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.xn--freishofldeli-jfb.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pixelwiese.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.pixelwiese.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.xn--freishofldeli-jfb.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.pixelwiese.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.xn--freishofldeli-jfb.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.freishoflaedeli.pixelwiese.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pixelwiese.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--freishofldeli-jfb.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--freishofldeli-jfb.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000017083abac93000004030048304602210093305c949a28e2978874dd681005966426d76e9fe9faf09ee8dbf03fbe10fb9d022100d7b8f5c34d19b17176736a35cdb7c040590a4c951b7eaf9ebdfac33efb296ea2007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000017083abac8000000403004830460221009359201897aeb3c7d2c387df70d84d5e0f7698b62394051907710a282b0a8c46022100e8c09affa51a562d2d461f722b185cb7c5e882f003494f53152526eb4f98795c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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