swisstastic.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:d4:1e:30:d4:07:64:82:0c:ce:26:51:2b:b4:31:d3:09:78 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=swisstastic.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d4:1e:30:d4:07:64:82:0c:ce:26:51:2b:b4:31:d3:09:78
Serial Number (int): 333516849953098990175584251717121725368696
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 04:9c:e7:97:e8:13:39:97:ca:bd:22:aa:e5:16:41:01:ab:fd:10:0d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 0d:81:7e:7c:7a:88:a8:2b:1b:db:fe:de:2d:91:ce:79:49:a2:d8:bc
Fingerprint (sha256): 1a:83:3a:03:69:48:f6:43:b2:d6:8e:61:f7:db:22:d5:e4:86:54:49:3c:7d:2f:02:b5:2f:8c:0c:c9:f7:79:8c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate swisstastic.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for swisstastic.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

swisstastic.com

Other certificates including the domain name swisstastic.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for swisstastic.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 333516849953098990175584251717121725368696
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-12 11:11:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-10 11:11:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'swisstastic.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 770217755677772037202135793766912951647044702529970995605349262721144288496929941324344204748759355604777222596363961327943339493635238331791821966741955859894677664843573232038710696932678413500229118295157162767895071356782272205106037348574334294768578069893459194452992236316520396526311156952778242187809133414618441711050431948027732154912697040769641068387496643216933060296889316794203903857482633719383055477035356131626790380181667208204815754864354291219785522994610005900477846102894760952044778095728954944208662210587523453578454897054617976613355226870152072209684924891725619865003760771680543251020561021671550872289220935901474859173772029998776973206468663025450715887363664729938585265794299343955473543790479481793683995360899557232648689625586050533859792749115717932519028866994724163352112677481239739909612801076747870903753644468302195646975521330771799771982203132852291427070168272403252761563419169004569931668135925202258822163360034260186170661232133030494567518789782243654176317186450909512455598404771176546592483298107148419626658305033153112012223760594364993974057436211400743676411219717248259147498530146699298521918524448654776335978173043662970835247827486211590026876601873054009770986112923
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							049ce797e8133997cabd22aae5164101abfd100d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swisstastic.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016dbfe1314b000004030048304602210094c629eae8423163d7dffa40ee70ee693ede87b3b4b786ee65f37f5a937fa2d3022100e6131ea7d7f1f4acf4a1e31f412ab6c9b236e7aa349cfea73d82d19eedf824bf007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016dbfe131460000040300483046022100ba3aa944dfc823b0f8b5a5b9329e03055393970646546fc0c6bc88aee11adc16022100b86c6a65afe913f73dcd3228497d492192dac840047f66fba8f870a632ec3db8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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