elk-legacy.internal.ricardo.ch

Issued by R3

About this certificate

This digital certificate with serial number 03:bc:92:e5:bf:4d:64:85:5b:38:70:00:65:dc:be:4c:48:24 was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=elk-legacy.internal.ricardo.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:bc:92:e5:bf:4d:64:85:5b:38:70:00:65:dc:be:4c:48:24
Serial Number (int): 325505202979854285793917000412207782840356
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 07:55:c4:d4:b0:22:23:58:2b:17:63:2e:39:f4:49:21:63:8f:83:e2
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 92:3d:d6:31:d4:fa:30:94:2b:4e:60:d1:83:15:a4:00:5a:8a:b9:8e
Fingerprint (sha256): 16:30:a8:44:48:36:67:1c:de:3d:fd:a4:fe:bc:95:6f:d7:19:0a:7e:2d:34:de:23:f7:dd:e1:e5:c4:c1:42:cc

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate elk-legacy.internal.ricardo.ch

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for elk-legacy.internal.ricardo.ch

Public Key Algorithm

RSA

Key Size

3072

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

elk-legacy.internal.ricardo.ch
es-legacy-ricardo-ch.aivencloud.com
public-es-legacy-ricardo-ch.aivencloud.com

Other certificates including the domain name ricardo.ch

(limited to 100 certificates)
winterthur.fr.ricardo.ch
kafka-proxy.ricardo.ch
kafka-proxy.ricardo.ch
elk-legacy.internal.ricardo.ch
status.proxsis.co.id
cdn.ricardo.ch
ricardo.ch
careers.ricardo.ch
website-status.ametek.com
status.melodydns.com
status.procertified.health
status.potsportal.com
status.brytecall.com
status.trizettoconnect.com
communication.ricardo.ch
com.ricardo.ch
news.ricardo.ch
careers.ricardo.ch
status.hykucommons.org
networkstatus.infogrosp.co.za
careers.ricardo.ch
website-status.ametek.com
com.ricardo.ch
help.ricardo.ch
trust.ricardo.ch
blogue.ricardo.ch
status.hykucommons.org
irpstatus.streamlineit.ca
irpstatus.streamlineit.ca
status.placepay.com
info.ricardo.ch
monitoring.sicktech.online
info.ricardo.ch
irpstatus.streamlineit.ca
login.ricardo.ch
status.verisma.com
communication.ricardo.ch
status.uk.deptagency.com
images.ricardo.ch
o.ricardo.ch
status.constantedge.com
cdn.ricardo.ch
haendler.auto.ricardo.ch
info.ricardo.ch
status.apec.psiexams.com
help.ricardo.ch
status.trizettoconnect.com
vv.ricardo.ch
status.tapmango.com
status.savantx.io
info.ricardo.ch
kafka-proxy.ricardo.ch
news.ricardo.ch
my.ricardo.ch
info.ricardo.ch
auto.ricardo.ch
login.ricardo.ch
monitor.yourcolo.com
o.ricardo.ch
o.ricardo.ch
status.hykucommons.org
info.ricardo.ch
irpstatus.streamlineit.ca
kafka-proxy.ricardo.ch
com.ricardo.ch
elk-legacy.internal.ricardo.ch
status.verisma.com
careers.ricardo.ch
universify-status.mehulbaid.in
cdn.ricardo.ch
status.microtronix-tech.com
info.ricardo.ch
status.hykucommons.org
com.ricardo.ch
info.ricardo.ch
status.tapmango.com
cdn.ricardo.ch
status.freeformfuture.com
communication.ricardo.ch
communication.ricardo.ch
cdn.ricardo.ch
careers.ricardo.ch
universify-status.mehulbaid.in
info.ricardo.ch
info.ricardo.ch
help.ricardo.ch
status.popsmash.com
vv.ricardo.ch
communication.ricardo.ch
status.sclqld.org.au
www.ricardo.ch
cdn.ricardo.ch
o.ricardo.ch
winterthur.ricardo.ch
communication.ricardo.ch
o.ricardo.ch
status.taggun.io
status.sohwatt.com.sg
wesure-wp.noc.cloudi.cloud
com.ricardo.ch

Certificate

The complete raw certificate details for elk-legacy.internal.ricardo.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 325505202979854285793917000412207782840356
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-19 20:33:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-20 20:33:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'elk-legacy.internal.ricardo.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3184 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 4618449202093885596056792139794385134371358803229774160557599881454469413882374534580881070034829809301279621457307174687339034584775035863784636431530511913658180978330002714593613644045458415013543060318589082223121561608757453594238545447148252610598205260563927618748347085905608381531420249835028492015484474130409593458634712518768645306874618412343594757564643067084612509760916798335917458002900821183984547900394301600647211582514555130924331317520279839501084893247136877893776752982905591705513941822180800004732874543779781502618998839878329471934400547438343296346861394748221585776411705958370898087353734614529915930389074556825153027037561975388760583089432249611166230107578129044198534143235647710434274322840378735227223022698232657314973903684592942910378309347748177844614357847257481872651591853507558420417686638583557950558133767820566157684287822743115100648228235705326914864980949743266421185927107
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0755c4d4b02223582b17632e39f44921638f83e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elk-legacy.internal.ricardo.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es-legacy-ricardo-ch.aivencloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'public-es-legacy-ricardo-ch.aivencloud.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d470000017f13e75ba20000040300473045022034f409b2f5be97861522d716b02eafb92ce23a29a8fc921d07e76ada59930cf4022100d10536542e5dd4f2dc57d272ec739e39b06326cf8231cff5cb17baf7987963180075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000017f13e75be4000004030046304402200f06a40fbbcc7d9025e5d356b1af6076ef42c15a6a202840f74523e756ac035f022063438154b89076e1ee71cc45214390e5990be79b1fa5cc3d847c84693cee375a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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