auth.blek.ch

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:a5:28:05:43:ec:4d:f5:8d:aa:bf:de:3a:c7:cf:ae:48:5d was issued on by Let's Encrypt.

With 20 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=auth.blek.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a5:28:05:43:ec:4d:f5:8d:aa:bf:de:3a:c7:cf:ae:48:5d
Serial Number (int): 317536644796194692719996601029400950884445
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 76:73:5c:82:00:53:be:62:37:26:9f:09:b9:fe:8b:e1:8d:bb:f0:66
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b3:0d:d1:ed:9f:11:90:8a:b3:2b:a6:f7:0d:4e:61:25:7a:37:f8:19
Fingerprint (sha256): 1a:a7:18:05:94:04:5a:85:81:b7:af:23:35:7b:24:cc:7a:da:b6:e3:9d:ad:31:c8:f6:c9:de:4f:d2:6a:37:40

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate auth.blek.ch

20

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for auth.blek.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

athena.blek.ch
auth.blek.ch
benevoles.balelec.ch
cdn.blek.ch
chat.blek.ch
deuxtranet.blek.ch
inscriptions.blek.ch
intranet.blek.ch
iris.blek.ch
kronos.blek.ch
lab.blek.ch
mail.balelec.ch
mail.blek.ch
rc.blek.ch
secu.blek.ch
services.balelec.ch
stats.blek.ch
survey.balelec.ch
vintage.blek.ch
wiki.blek.ch

Other certificates including the domain name blek.ch

(limited to 100 certificates)
archives.blek.ch
benevoles.balelec.ch
webcams.blek.ch
*.blek.ch
*.blek.ch
intranet.blek.ch
mail.blek.ch
public.balelec.ch
stats.blek.ch
gallery.blek.ch
files.blek.ch
mail.blek.ch
mail.blek.ch
auth.blek.ch
webcams.blek.ch
gallery.blek.ch
public.balelec.ch
auth.blek.ch
mail.blek.ch
archives.blek.ch
public.balelec.ch
webcams.blek.ch
public.balelec.ch
webcams.blek.ch
public.balelec.ch
files.blek.ch
*.blek.ch
gallery.blek.ch
stats.blek.ch
gallery.blek.ch
auth.blek.ch
mail.blek.ch
files.blek.ch
auth.blek.ch
mail.blek.ch
gallery.blek.ch
public.balelec.ch
gallery.blek.ch
public.balelec.ch
*.srv.blek.ch
benevoles.balelec.ch
files.blek.ch
archives.blek.ch
auth.blek.ch
archives.blek.ch
stats.blek.ch
intranet.blek.ch
auth.blek.ch
files.blek.ch
files.blek.ch
auth.blek.ch
gallery.blek.ch
intranet.blek.ch
mail.blek.ch
cdn.blek.ch
auth.blek.ch
webcams.blek.ch
archives.blek.ch
intranet.blek.ch
public.balelec.ch
gallery.blek.ch
auth.blek.ch
files.blek.ch
webcams.blek.ch
mail.blek.ch
benevoles.balelec.ch
mail.blek.ch
*.srv.blek.ch
webcams.blek.ch
webcams.blek.ch
intranet.blek.ch
stats.blek.ch
intranet.blek.ch
auth.blek.ch
auth.blek.ch
public.balelec.ch
archives.blek.ch
archives.blek.ch
webcams.blek.ch
files.blek.ch
public.balelec.ch
mail.blek.ch
gallery.blek.ch
gallery.blek.ch
gallery.blek.ch
archives.blek.ch
public.balelec.ch
webcams.blek.ch
webcams.blek.ch
intranet.blek.ch
mail.blek.ch
public.balelec.ch
public.balelec.ch
public.balelec.ch
auth.balelec.ch
archives.blek.ch
*.blek.ch
public.balelec.ch
auth.blek.ch
archives.blek.ch

Certificate

The complete raw certificate details for auth.blek.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAq5p0/McElLjPpnINGeMY
KhylhWhpvmwbLeWdmkMN+BQ+vWG+TNUxPeA5lXqyj3QtT0miIpqOsQcwZHEG3cdT
tDAEkSoXiw7k0NHWQRej2YoTrQq7Q4/Wbaj0Oj8Pqf3pItAd8S72qYwdEhGV9dXR
JK5eBOFzdBkJ22mqppQZQnyqYy9i5K2zwtoDn8PR/QBKnvQUHoHCrJU1cni6v5TL
F//XgEQimP9gdGCpB3KlY7LaGR3jILLOklZlYArmNMXlZpU/mQMZbJi5tgcyFTsy
wcUQVARWyKr+3Kq2tBDE+NivrvXyJ4LVpsuF2wZrwxs+RB6s/Nw8U85R7VjZ+5Tp
i/RwbaR+w9oCZguXRQ0B7ktVnUoLWs74VKGpUx0y5f6BMIrifhD05CT1I13iCKEm
cswYJpn9+oJTe+XcUVnsAh+ADdszbVZrkRBBc2vZY+dIZ7QIeqZw0GDlfB6oA+VP
JIv/za7c22gOgc3Did7kfL9LnPzJ09u+GXj2gT/d3pRODhYJL1r377BsJGwhiAiG
TCuirwf8NSfmp3225by0Q+cZXww9IT30Du/UGHRP5noQjHDsLcLVd/1cld7/CeMX
XgvT5RYKSMUqrThSWsmhUX9Lj75NYUuUJGSCkTBKH5W3J7R2pq2Tp+VnIxuuPFTV
JSs43ewPOPwaoVjgvywr9gECAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 317536644796194692719996601029400950884445
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-29 12:01:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-27 12:01:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'auth.blek.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 700080579032596718877947941388311624915417920587330340951192945601039819446939249508240207595182362587033414718136769877808581296697842268732349843506568383813216670527755545869121445168895360385629198247082654592480103043670422270545162806581186288649277038382476438889163521464903749158014459580723906213373910310311806800563753644218596935338825361083675983666164958043806225975323509428292040886089652344473900555051163742752191688645305370383996613160073432440211852851772122522362277798134788026728854547360749191210782604378116845140143084439515865477502315280200068483095445082595969895544768090799732664206562236977859249858614221003134220608642809014827571093675375432735133668839291712242161233755768683771139263467584929681878998196538080374342356130533598944655492705683916892217532245901561679509530473466411378859651468963824473986046353955068863852043535648236228131276409329003682285088820033807940262078252481337209557183075228597989791714472490260726059882773188367292875109536717503443756106695533711644082079633626131970418357885243692855446736031284905738874027462872145405638832994966703521311537621434654294895069161522256890092047420246404298170320426545275303072252497774495193968691878785502130133910943233
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							76735c820053be6237269f09b9fe8be18dbbf066
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (329 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'athena.blek.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.blek.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benevoles.balelec.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.blek.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chat.blek.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deuxtranet.blek.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inscriptions.blek.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.blek.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iris.blek.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kronos.blek.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lab.blek.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.balelec.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.blek.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rc.blek.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secu.blek.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services.balelec.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stats.blek.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'survey.balelec.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vintage.blek.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiki.blek.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016b03ae6de20000040300473045022027e85ad64ede34da94f247840a4b3ac96bd2454e1e6460d550b8f2b7aaea30b5022100c41ddcb86efe2e4845eb9a2a864f6317043a769b9dce1dc70084943ef03f7a3e007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016b03ae6fb6000004030047304502201df218aea1aa239e1ded469db4104d61e74eaca6dc8c05fcfeb1715f83f761d702210083a3b112cb4d45a633438e4e4543d93981540cb87cafce5865fe4527debb12a6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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