liip.ch

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:c4:c0:9d:35:7d:c5:ec:4b:b0:c8:9d:db:e3:0c:1b:48:7b was issued on by Let's Encrypt.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=liip.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c4:c0:9d:35:7d:c5:ec:4b:b0:c8:9d:db:e3:0c:1b:48:7b
Serial Number (int): 328288229762514656112916709631486802479227
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: cb:fc:d4:8a:07:3d:65:e0:59:4a:36:1a:79:a4:1c:ee:88:27:77:09
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c8:67:13:85:b0:a6:92:5c:31:79:00:4e:8f:1f:be:18:48:e9:65:2b
Fingerprint (sha256): 19:8c:8f:f7:f2:f0:a0:b6:5b:10:68:e6:84:31:b0:4f:80:fd:1f:b5:c9:5f:9e:ba:27:6c:5c:a4:81:97:76:de

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate liip.ch

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for liip.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

blog.liip.ch
elearning.liip.ch
journal.liip.ch
liip.ch
www.liip.ch

Other certificates including the domain name liip.ch

(limited to 100 certificates)
zebra.liip.ch
liip.ch
beta-zebra.liip.ch
liip.ch
legacy-clients.k8s.liip.ch
prolek.stage01.sb.liip.ch
gitlab.liip.ch
monitoring.elearning.liip.ch
test-wiki.liip.ch
bundstarterkit.demo.liip.ch
crm.svc.clients.liip.ch
baspo.bedev.liip.ch
liip.ch
guess.liip.ch
support.liip.ch
playground.moodle.liip.ch
*.clients.liip.ch
unitar2.stage01.sb.liip.ch
blog.liip.ch
moodle.careum-weiterbildung.ch
liip.ch
techpool.stage01.sb.liip.ch
eduprep.sosaerzte.ch
nagios.liip.ch
account.liip.ch
repair-cafe-stage.clients.liip.ch
stage.bwo.clients.liip.ch
liip-moodle.devel01.sb.liip.ch
order.elearning.liip.ch
meinunterricht2.kvz-weiterbildung.ch
moodle.liip.ch
liip.ch
prolek.stage01.sb.liip.ch
memberplus.rai.clients.liip.ch
vagrantbox-public.liip.ch
blog.liip.ch
ehb.clients.liip.ch
iuffp1.clients.liip.ch
lsca.devel01.sb.liip.ch
mdl-tph-mnet.devel01.sb.liip.ch
preprod.liip.ch
mobi.demo.liip.ch
wks.devel01.sb.liip.ch
preprod.liip.ch
iuffp1.clients.liip.ch
moodle.liip.ch
iuffp1.clients.liip.ch
*.d.clients.liip.ch
download.liip.ch
guidelines.liip.ch
stage.bwo.clients.liip.ch
repair-cafe.clients.liip.ch
*.liip.ch
crm.svc.clients.liip.ch
bzwu.stage01.sb.liip.ch
liip.ch
account.liip.ch
moodle-sob.clients.liip.ch
monitoring.elearning.liip.ch
cpdf.liip.ch
techpool.stage01.sb.liip.ch
liip-moodle.live03.sb.liip.ch
lsca.devel01.sb.liip.ch
moodle.careum-weiterbildung.ch
h5p.devel01.sb.liip.ch
gtm-generator.liip.ch
slides.liip.ch
lhc.stage01.sb.liip.ch
account.liip.ch
slides.liip.ch
blog.liip.ch
moodle-dev.graduateinstitute.ch
bgs.stage01.elearning.liip.ch
projects.liip.ch
lama.liip.ch
baspo.bedev.liip.ch
chbox.clients.liip.ch
kompra.stage01.sb.liip.ch
elearning.liip.ch
futura21.devel01.sb.liip.ch
stage.bwo.clients.liip.ch
shop.stapferhaus.bedev.liip.ch
dev.zb.clients.liip.ch
iuffp1.clients.liip.ch
iuffp1.clients.liip.ch
liip-moodle.stage01.sb.liip.ch
baspo.bedev.liip.ch
liip-moodle.devel01.sb.liip.ch
stage.bwo.clients.liip.ch
hfgz.stage01.sb.liip.ch
bcv.demo.liip.ch
gtm-generator.liip.ch
stage.bwo.clients.liip.ch
sasdb.clients.liip.ch
liip.ch
tourismuskv.stage01.sb.liip.ch
solradmin.live03.sb.liip.ch
php-osx.liip.ch
vagrantbox-public.liip.ch
bzu.stage01.sb.liip.ch

Certificate

The complete raw certificate details for liip.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 328288229762514656112916709631486802479227
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-04 09:35:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-02 09:35:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'liip.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 692758166780611661918434229590541323658733845131729125203585045223155088624375805088127644163048229042377705265115062137241371551644104534820979054150422729464060682739347134402009425967808955808794978083437543714762686408427898059091334016205048223836873490192039709660585675798353231603532985887636981521361366956112926088355370167178320404677049250825388833022616029079306695898392998705014056735505285811881300464229302535972712729793098182569896025779261433126313661444174831019479604020057360475761231657283883327555378825011413940793078131247319037295500309461071251960862085756288802024537365744140817553710924560011680274625994460880530999847084376609598885747228793421847861797277033442676427346143040636578246196289561007897879536644488136705637745476754028944992444482353230650657608085889148045641820245914326362374126254223789040286254452543450402989731093938928291820241138034886775356137088623213391066381334589388744085814471423158682343163083331383492999091143655196794041294370853998798122726398513438775488453996172991967149316332955367045765491215109566862311755714272565365743312339685675573164613069939743886313350619659122610135185549032217375545682164990841594353297456598313613821248684542009299009692194407
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cbfcd48a073d65e0594a361a79a41cee88277709
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.liip.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elearning.liip.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'journal.liip.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liip.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liip.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016a8269ff290000040300483046022100a720131378949d3f38f2ce87d92c2963c90910bb6217797ac5711700bb0f936f02210093f0a143ae14a1f61aba0ebfae50e918fe9f6608bbdf5670d59f45505ce901c900770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016a8269fd320000040300483046022100df2eadb8f190de8a86bc5d1a6a0802b01678a2d76ab69abebf1db39b61aaa8b6022100b33c8dd6b77a17c5d351767e6b971f1e51d4d23af5cb7a4af43bbc04f277918f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		009bcbbd563046c6f4596c7e9fbb1aab7a09ed93f494bc7cac33d07be87c70b7aab5e92103bcb347ea62359e77eead8a3508f2e7ac4f369e63f8c685ca6b7ad4bf4a0f3a7f8668da2b00634b639d17fe2898d699ef7676d4fa6e8384d337540e9e08f6fc63e294536c879aec4d718f55b68628a3b3057dbf14adf516e0ce650e785db90dc22f47308fd290e87e4de815da8fa821812ea50d216c8b496526eba8a9400254bf40eef7e1e50dd5c71730174aaf2131855099ca26f97b5c80ebd8aee5e79973176fffa7ce9e2bea27167fba56302013a910eddac218ced0b31b37105daef210aa9b864ea36d0adadc61d6a518d0c3f1ab1bc9171e07d6c9ff51699b63