admin.betriebsrestaurants-migros.ch
Issued by R3
About this certificate
This digital certificate with serial number 03:47:ba:e3:8e:67:07:4d:dc:bf:1d:fe:96:45:53:da:cc:7b was issued on by Let's Encrypt.
With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=admin.betriebsrestaurants-migros.ch
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:47:ba:e3:8e:67:07:4d:dc:bf:1d:fe:96:45:53:da:cc:7bSerial Number (int): 285745323793535177586312482565200801352827
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 6d:92:9d:fd:ec:b7:4d:6f:24:d5:52:1b:4c:13:00:0e:8b:66:de:35
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 17:0b:7e:d7:97:6a:61:08:4c:91:b1:d7:1b:b4:1b:be:c2:93:de:7a
Fingerprint (sha256): 19:02:e5:31:5a:1c:04:86:6d:2c:dc:41:04:54:7f:af:cb:a4:4b:0f:f1:65:3a:d4:b8:7c:a9:67:46:d2:98:e3
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate admin.betriebsrestaurants-migros.ch
3
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for admin.betriebsrestaurants-migros.ch
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
admin.betriebsrestaurants-migros.ch
betriebsrestaurants-migros-admin.service.migros.cloud
lb-dit-adminbetriebsrestaurants.service.migros.cloud
betriebsrestaurants-migros-admin.service.migros.cloud
lb-dit-adminbetriebsrestaurants.service.migros.cloud
Other certificates including the domain name betriebsrestaurants-migros.ch
(limited to 100 certificates)
betriebsrestaurants-migros.ch
admin.betriebsrestaurants-migros.ch
betriebsrestaurants-migros.ch
betriebsrestaurants-migros.ch
betriebsrestaurants-migros.ch
betriebsrestaurants-migros.ch
admin.betriebsrestaurants-migros.ch
betriebsrestaurants-migros.ch
betriebsrestaurants-migros.ch
betriebsrestaurants-migros.ch
betriebsrestaurants-migros.ch
admin.betriebsrestaurants-migros.ch
admin.betriebsrestaurants-migros.ch
admin.betriebsrestaurants-migros.ch
betriebsrestaurants-migros.ch
www.betriebsrestaurants-migros.ch
betriebsrestaurants-migros.ch
admin.betriebsrestaurants-migros.ch
www.betriebsrestaurants-migros.ch
admin.betriebsrestaurants-migros.ch
admin.betriebsrestaurants-migros.ch
betriebsrestaurants-migros.ch
betriebsrestaurants-migros.ch
betriebsrestaurants-migros.ch
betriebsrestaurants-migros.ch
admin.betriebsrestaurants-migros.ch
betriebsrestaurants-migros.ch
betriebsrestaurants-migros.ch
betriebsrestaurants-migros.ch
betriebsrestaurants-migros.ch
admin.betriebsrestaurants-migros.ch
admin.betriebsrestaurants-migros.ch
admin.betriebsrestaurants-migros.ch
betriebsrestaurants-migros.ch
www.betriebsrestaurants-migros.ch
betriebsrestaurants-migros.ch
admin.betriebsrestaurants-migros.ch
www.betriebsrestaurants-migros.ch
admin.betriebsrestaurants-migros.ch
Certificate
The complete raw certificate details for admin.betriebsrestaurants-migros.ch in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFvDCCBKSgAwIBAgISA0e6445nB03cvx3+lkVT2sx7MA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzA1MjIwMDAwNTBaFw0yMzA4MjAwMDAwNDlaMC4xLDAqBgNVBAMT I2FkbWluLmJldHJpZWJzcmVzdGF1cmFudHMtbWlncm9zLmNoMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdW6CBJ1DlhhSufHHteUKGUzJpL2vFPT6oVX qfIiQjcteshKjMClJo3oeVE/MMxsX5Lme05EGD193ZmrlQUgqTvSplG3mz8sgtm1 t0ebassVXm3OuaaZukF8wZ8HiyP2K3Gi4yJ4vWA1EvERPRLbFza21SahNM7xz4+J vDbjyMXpPCUZL+2sc9p9S7gATRju8PsALHfF9KYQo+eQtnbHBYO/8IIpBx9f+dAH kwzZ8LJsqnPjObU8GJVbsA6q4W27WYWSaBqWhO1Q5vhH1SpvIiMbP3z79YKo9oZd JyS4bC7cP/xxdP6aOs1/b5zLNm7HIEtKn9PFzAC5bVYBWi3o0wIDAQABo4ICzjCC AsowDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcD AjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBRtkp397LdNbyTVUhtMEwAOi2beNTAf BgNVHSMEGDAWgBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcw IQYIKwYBBQUHMAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYW aHR0cDovL3IzLmkubGVuY3Iub3JnLzCBnQYDVR0RBIGVMIGSgiNhZG1pbi5iZXRy aWVic3Jlc3RhdXJhbnRzLW1pZ3Jvcy5jaII1YmV0cmllYnNyZXN0YXVyYW50cy1t aWdyb3MtYWRtaW4uc2VydmljZS5taWdyb3MuY2xvdWSCNGxiLWRpdC1hZG1pbmJl dHJpZWJzcmVzdGF1cmFudHMuc2VydmljZS5taWdyb3MuY2xvdWQwTAYDVR0gBEUw QzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDov L2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdgC3 Pvsk35xNunXyOcW6WPRsXfxCz3qfNcSeHQmBJe20mQAAAYhA+SknAAAEAwBHMEUC IGTsXk78jDwJLuszxiVovroaW/0xIePv6NiGltxT36FnAiEAjw6HRiPY0w54w1T+ JiNBSTO10aGTRXLTBhZjULbILzwAdgDoPtDaPvUGNTLnVyi8iWvJA9PL0RFr7Otp 4Xd9bQa9bgAAAYhA+SmQAAAEAwBHMEUCIQDwQ9hfAgQg+eW8Q+i1sxX1MVuF5wej mSt7naTORJqnSwIgcllsLdJc/pQZJ0pLdbq1VQFnLRBlbnK/a0Oq6WwMT6EwDQYJ KoZIhvcNAQELBQADggEBAKg2/1tPTzihySTzFDwvPpLrlbM66TheTx7k3hqFlXh7 WQ6/HBCj19tR1IPJrMO07P4skyptR+xJKQQnyrqc5S7aZJT3JJgdY8zQWAeqdAIT LmV44eKekI5XUouNX6EvMHV/psgqW49GcklpYgAYrXYdhIBNvPUJr/Vzk3Y749nJ 7EDcWeevryN8PR7nzBv/syE5DrK7iejQednjRSQmhFvc8AlButGPGz6jaOFTL5UB duR4x0YJ+WzN7bPeRDd+TWmAItz8CHwBzMJFZ0UanThqPtOWdx6GIGH90/45KArG PHgsZnBkFSR1CHmH7FlmRk9TpPQHdMs7bnL2z7pBHHM= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdW6CBJ1DlhhSufHHteU KGUzJpL2vFPT6oVXqfIiQjcteshKjMClJo3oeVE/MMxsX5Lme05EGD193ZmrlQUg qTvSplG3mz8sgtm1t0ebassVXm3OuaaZukF8wZ8HiyP2K3Gi4yJ4vWA1EvERPRLb Fza21SahNM7xz4+JvDbjyMXpPCUZL+2sc9p9S7gATRju8PsALHfF9KYQo+eQtnbH BYO/8IIpBx9f+dAHkwzZ8LJsqnPjObU8GJVbsA6q4W27WYWSaBqWhO1Q5vhH1Spv IiMbP3z79YKo9oZdJyS4bC7cP/xxdP6aOs1/b5zLNm7HIEtKn9PFzAC5bVYBWi3o 0wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 285745323793535177586312482565200801352827 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-22 00:00:50 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-20 00:00:49 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'admin.betriebsrestaurants-migros.ch' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21944619315866623141142398384706664910788314506351428144479604955902840326560120601965654951549092686002450494498488375814660949293721251474706140441837747709506689565583166404231231589814787610837886175903487485217518530864257483910663211810373308139666293274628084337923838137094273104104371725913259802476098756147274160190172742325894065910364436943455516954390850642786769062577898450226930350255073247564814132666878366824761014202050357016243358451467810010093522163574013921350496482312525288337937652163445091576213356445120762869038284433422490483185586444756031157956999039639835321431120552035504060491987 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 6d929dfdecb74d6f24d5521b4c13000e8b66de35 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.betriebsrestaurants-migros.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'betriebsrestaurants-migros-admin.service.migros.cloud' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lb-dit-adminbetriebsrestaurants.service.migros.cloud' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018840f929270000040300473045022064ec5e4efc8c3c092eeb33c62568beba1a5bfd3121e3efe8d88696dc53dfa1670221008f0e874623d8d30e78c354fe2623414933b5d1a1934572d306166350b6c82f3c007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018840f929900000040300473045022100f043d85f020420f9e5bc43e8b5b315f5315b85e707a3992b7b9da4ce449aa74b022072596c2dd25cfe9419274a4b75bab55501672d10656e72bf6b43aae96c0c4fa1 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00a836ff5b4f4f38a1c924f3143c2f3e92eb95b33ae9385e4f1ee4de1a8595787b590ebf1c10a3d7db51d483c9acc3b4ecfe2c932a6d47ec49290427caba9ce52eda6494f724981d63ccd05807aa7402132e6578e1e29e908e57528b8d5fa12f30757fa6c82a5b8f46724969620018ad761d84804dbcf509aff57393763be3d9c9ec40dc59e7afaf237c3d1ee7cc1bffb321390eb2bb89e8d079d9e3452426845bdcf00941bad18f1b3ea368e1532f950176e478c74609f96ccdedb3de44377e4d698022dcfc087c01ccc24567451a9d386a3ed396771e862061fdd3fe39280ac63c782c667064152475087987ec5966464f53a4f40774cb3b6e72f6cfba411c73