auth.blek.ch
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:a5:28:05:43:ec:4d:f5:8d:aa:bf:de:3a:c7:cf:ae:48:5d was issued on by Let's Encrypt.
With 20 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=auth.blek.ch
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:a5:28:05:43:ec:4d:f5:8d:aa:bf:de:3a:c7:cf:ae:48:5dSerial Number (int): 317536644796194692719996601029400950884445
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 76:73:5c:82:00:53:be:62:37:26:9f:09:b9:fe:8b:e1:8d:bb:f0:66
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): b3:0d:d1:ed:9f:11:90:8a:b3:2b:a6:f7:0d:4e:61:25:7a:37:f8:19
Fingerprint (sha256): 1a:a7:18:05:94:04:5a:85:81:b7:af:23:35:7b:24:cc:7a:da:b6:e3:9d:ad:31:c8:f6:c9:de:4f:d2:6a:37:40
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate auth.blek.ch
20
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for auth.blek.ch
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
athena.blek.ch
auth.blek.ch
benevoles.balelec.ch
cdn.blek.ch
chat.blek.ch
deuxtranet.blek.ch
inscriptions.blek.ch
intranet.blek.ch
iris.blek.ch
kronos.blek.ch
lab.blek.ch
mail.balelec.ch
mail.blek.ch
rc.blek.ch
secu.blek.ch
services.balelec.ch
stats.blek.ch
survey.balelec.ch
vintage.blek.ch
wiki.blek.ch
auth.blek.ch
benevoles.balelec.ch
cdn.blek.ch
chat.blek.ch
deuxtranet.blek.ch
inscriptions.blek.ch
intranet.blek.ch
iris.blek.ch
kronos.blek.ch
lab.blek.ch
mail.balelec.ch
mail.blek.ch
rc.blek.ch
secu.blek.ch
services.balelec.ch
stats.blek.ch
survey.balelec.ch
vintage.blek.ch
wiki.blek.ch
Other certificates including the domain name blek.ch
(limited to 100 certificates)
archives.blek.ch
benevoles.balelec.ch
webcams.blek.ch
*.blek.ch
*.blek.ch
intranet.blek.ch
mail.blek.ch
public.balelec.ch
stats.blek.ch
gallery.blek.ch
files.blek.ch
mail.blek.ch
mail.blek.ch
auth.blek.ch
webcams.blek.ch
gallery.blek.ch
public.balelec.ch
auth.blek.ch
mail.blek.ch
archives.blek.ch
public.balelec.ch
webcams.blek.ch
public.balelec.ch
webcams.blek.ch
public.balelec.ch
files.blek.ch
*.blek.ch
gallery.blek.ch
stats.blek.ch
gallery.blek.ch
auth.blek.ch
mail.blek.ch
files.blek.ch
auth.blek.ch
mail.blek.ch
gallery.blek.ch
public.balelec.ch
gallery.blek.ch
public.balelec.ch
*.srv.blek.ch
benevoles.balelec.ch
files.blek.ch
archives.blek.ch
auth.blek.ch
archives.blek.ch
stats.blek.ch
intranet.blek.ch
auth.blek.ch
files.blek.ch
files.blek.ch
auth.blek.ch
gallery.blek.ch
intranet.blek.ch
mail.blek.ch
cdn.blek.ch
auth.blek.ch
webcams.blek.ch
archives.blek.ch
intranet.blek.ch
public.balelec.ch
gallery.blek.ch
auth.blek.ch
files.blek.ch
webcams.blek.ch
mail.blek.ch
benevoles.balelec.ch
mail.blek.ch
*.srv.blek.ch
webcams.blek.ch
webcams.blek.ch
intranet.blek.ch
stats.blek.ch
intranet.blek.ch
auth.blek.ch
auth.blek.ch
public.balelec.ch
archives.blek.ch
archives.blek.ch
webcams.blek.ch
files.blek.ch
public.balelec.ch
mail.blek.ch
gallery.blek.ch
gallery.blek.ch
gallery.blek.ch
archives.blek.ch
public.balelec.ch
webcams.blek.ch
webcams.blek.ch
intranet.blek.ch
mail.blek.ch
public.balelec.ch
public.balelec.ch
public.balelec.ch
auth.balelec.ch
archives.blek.ch
*.blek.ch
public.balelec.ch
auth.blek.ch
archives.blek.ch
benevoles.balelec.ch
webcams.blek.ch
*.blek.ch
*.blek.ch
intranet.blek.ch
mail.blek.ch
public.balelec.ch
stats.blek.ch
gallery.blek.ch
files.blek.ch
mail.blek.ch
mail.blek.ch
auth.blek.ch
webcams.blek.ch
gallery.blek.ch
public.balelec.ch
auth.blek.ch
mail.blek.ch
archives.blek.ch
public.balelec.ch
webcams.blek.ch
public.balelec.ch
webcams.blek.ch
public.balelec.ch
files.blek.ch
*.blek.ch
gallery.blek.ch
stats.blek.ch
gallery.blek.ch
auth.blek.ch
mail.blek.ch
files.blek.ch
auth.blek.ch
mail.blek.ch
gallery.blek.ch
public.balelec.ch
gallery.blek.ch
public.balelec.ch
*.srv.blek.ch
benevoles.balelec.ch
files.blek.ch
archives.blek.ch
auth.blek.ch
archives.blek.ch
stats.blek.ch
intranet.blek.ch
auth.blek.ch
files.blek.ch
files.blek.ch
auth.blek.ch
gallery.blek.ch
intranet.blek.ch
mail.blek.ch
cdn.blek.ch
auth.blek.ch
webcams.blek.ch
archives.blek.ch
intranet.blek.ch
public.balelec.ch
gallery.blek.ch
auth.blek.ch
files.blek.ch
webcams.blek.ch
mail.blek.ch
benevoles.balelec.ch
mail.blek.ch
*.srv.blek.ch
webcams.blek.ch
webcams.blek.ch
intranet.blek.ch
stats.blek.ch
intranet.blek.ch
auth.blek.ch
auth.blek.ch
public.balelec.ch
archives.blek.ch
archives.blek.ch
webcams.blek.ch
files.blek.ch
public.balelec.ch
mail.blek.ch
gallery.blek.ch
gallery.blek.ch
gallery.blek.ch
archives.blek.ch
public.balelec.ch
webcams.blek.ch
webcams.blek.ch
intranet.blek.ch
mail.blek.ch
public.balelec.ch
public.balelec.ch
public.balelec.ch
auth.balelec.ch
archives.blek.ch
*.blek.ch
public.balelec.ch
auth.blek.ch
archives.blek.ch
Certificate
The complete raw certificate details for auth.blek.ch in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHjTCCBnWgAwIBAgISA6UoBUPsTfWNqr/eOsfPrkhdMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA1MjkxMjAxMzFaFw0x OTA4MjcxMjAxMzFaMBcxFTATBgNVBAMTDGF1dGguYmxlay5jaDCCAiIwDQYJKoZI hvcNAQEBBQADggIPADCCAgoCggIBAKuadPzHBJS4z6ZyDRnjGCocpYVoab5sGy3l nZpDDfgUPr1hvkzVMT3gOZV6so90LU9JoiKajrEHMGRxBt3HU7QwBJEqF4sO5NDR 1kEXo9mKE60Ku0OP1m2o9Do/D6n96SLQHfEu9qmMHRIRlfXV0SSuXgThc3QZCdtp qqaUGUJ8qmMvYuSts8LaA5/D0f0ASp70FB6BwqyVNXJ4ur+Uyxf/14BEIpj/YHRg qQdypWOy2hkd4yCyzpJWZWAK5jTF5WaVP5kDGWyYubYHMhU7MsHFEFQEVsiq/tyq trQQxPjYr6718ieC1abLhdsGa8MbPkQerPzcPFPOUe1Y2fuU6Yv0cG2kfsPaAmYL l0UNAe5LVZ1KC1rO+FShqVMdMuX+gTCK4n4Q9OQk9SNd4gihJnLMGCaZ/fqCU3vl 3FFZ7AIfgA3bM21Wa5EQQXNr2WPnSGe0CHqmcNBg5XweqAPlTySL/82u3NtoDoHN w4ne5Hy/S5z8ydPbvhl49oE/3d6UTg4WCS9a9++wbCRsIYgIhkwroq8H/DUn5qd9 tuW8tEPnGV8MPSE99A7v1Bh0T+Z6EIxw7C3C1Xf9XJXe/wnjF14L0+UWCkjFKq04 UlrJoVF/S4++TWFLlCRkgpEwSh+Vtye0dqatk6flZyMbrjxU1SUrON3sDzj8GqFY 4L8sK/YBAgMBAAGjggOeMIIDmjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYI KwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFHZzXIIA U75iNyafCbn+i+GNu/BmMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyh MG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgz LmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgz LmxldHNlbmNyeXB0Lm9yZy8wggFSBgNVHREEggFJMIIBRYIOYXRoZW5hLmJsZWsu Y2iCDGF1dGguYmxlay5jaIIUYmVuZXZvbGVzLmJhbGVsZWMuY2iCC2Nkbi5ibGVr LmNoggxjaGF0LmJsZWsuY2iCEmRldXh0cmFuZXQuYmxlay5jaIIUaW5zY3JpcHRp b25zLmJsZWsuY2iCEGludHJhbmV0LmJsZWsuY2iCDGlyaXMuYmxlay5jaIIOa3Jv bm9zLmJsZWsuY2iCC2xhYi5ibGVrLmNogg9tYWlsLmJhbGVsZWMuY2iCDG1haWwu Ymxlay5jaIIKcmMuYmxlay5jaIIMc2VjdS5ibGVrLmNoghNzZXJ2aWNlcy5iYWxl bGVjLmNogg1zdGF0cy5ibGVrLmNoghFzdXJ2ZXkuYmFsZWxlYy5jaIIPdmludGFn ZS5ibGVrLmNoggx3aWtpLmJsZWsuY2gwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYL KwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlw dC5vcmcwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdgB0ftqDMa0zEJEhnM4lT0Jw wr/9XkIgCMY3NXnmEHvMVgAAAWsDrm3iAAAEAwBHMEUCICfoWtZO3jTalPJHhApL Oslr0kVOHmRg1VC48req6jC1AiEAxB3cuG7+LkhF65oqhk9jFwQ6dpudzh3HAISU PvA/ej4AdgApPFGWVMg5ZbqqUPxYB9S3b79Yeily3KTDDPTlRUf0eAAAAWsDrm+2 AAAEAwBHMEUCIB3yGK6hqiOeHe1GnbQQTWHnTqym3IwF/P6xcV+D92HXAiEAg6Ox EstNRaYzQ45ORUPZOYFUDLh8r85YZf5FJ967EqYwDQYJKoZIhvcNAQELBQADggEB ABbm1h95sWgyo2AZNuHqhsOWTuNPTdY9RF+ohBX29DPObjq9R48tanuzUaS0djbB xDBu0jJG4+G0fu+dVZJJkehxJZldKpcnloprVXpNqcYFiF3TeF2u2o7KOwB5tjBv o+ZxaGMjRXLw/OrvJIlaUIBXEecq68uJDRhwF90LvBKlGyyryy7M1m+NMVDp2uHh vlMkfBg2zS8De5LqcqTdMRy6HIrzhKS4nM6L8z2o1Szw6twEmAx/TroP84vWCyap FlbsNUYmyaKpCAdqib/JQv/rRCDoNktXOOqLY4J+RCNmZqfsGVJM5ikBZYvPRI7U I6go8gOvcIx/q18ak6y69S0= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAq5p0/McElLjPpnINGeMY KhylhWhpvmwbLeWdmkMN+BQ+vWG+TNUxPeA5lXqyj3QtT0miIpqOsQcwZHEG3cdT tDAEkSoXiw7k0NHWQRej2YoTrQq7Q4/Wbaj0Oj8Pqf3pItAd8S72qYwdEhGV9dXR JK5eBOFzdBkJ22mqppQZQnyqYy9i5K2zwtoDn8PR/QBKnvQUHoHCrJU1cni6v5TL F//XgEQimP9gdGCpB3KlY7LaGR3jILLOklZlYArmNMXlZpU/mQMZbJi5tgcyFTsy wcUQVARWyKr+3Kq2tBDE+NivrvXyJ4LVpsuF2wZrwxs+RB6s/Nw8U85R7VjZ+5Tp i/RwbaR+w9oCZguXRQ0B7ktVnUoLWs74VKGpUx0y5f6BMIrifhD05CT1I13iCKEm cswYJpn9+oJTe+XcUVnsAh+ADdszbVZrkRBBc2vZY+dIZ7QIeqZw0GDlfB6oA+VP JIv/za7c22gOgc3Did7kfL9LnPzJ09u+GXj2gT/d3pRODhYJL1r377BsJGwhiAiG TCuirwf8NSfmp3225by0Q+cZXww9IT30Du/UGHRP5noQjHDsLcLVd/1cld7/CeMX XgvT5RYKSMUqrThSWsmhUX9Lj75NYUuUJGSCkTBKH5W3J7R2pq2Tp+VnIxuuPFTV JSs43ewPOPwaoVjgvywr9gECAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 317536644796194692719996601029400950884445 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-29 12:01:31 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-27 12:01:31 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'auth.blek.ch' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 700080579032596718877947941388311624915417920587330340951192945601039819446939249508240207595182362587033414718136769877808581296697842268732349843506568383813216670527755545869121445168895360385629198247082654592480103043670422270545162806581186288649277038382476438889163521464903749158014459580723906213373910310311806800563753644218596935338825361083675983666164958043806225975323509428292040886089652344473900555051163742752191688645305370383996613160073432440211852851772122522362277798134788026728854547360749191210782604378116845140143084439515865477502315280200068483095445082595969895544768090799732664206562236977859249858614221003134220608642809014827571093675375432735133668839291712242161233755768683771139263467584929681878998196538080374342356130533598944655492705683916892217532245901561679509530473466411378859651468963824473986046353955068863852043535648236228131276409329003682285088820033807940262078252481337209557183075228597989791714472490260726059882773188367292875109536717503443756106695533711644082079633626131970418357885243692855446736031284905738874027462872145405638832994966703521311537621434654294895069161522256890092047420246404298170320426545275303072252497774495193968691878785502130133910943233 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 76735c820053be6237269f09b9fe8be18dbbf066 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (329 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'athena.blek.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.blek.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benevoles.balelec.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.blek.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chat.blek.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deuxtranet.blek.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inscriptions.blek.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.blek.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iris.blek.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kronos.blek.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lab.blek.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.balelec.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.blek.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rc.blek.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secu.blek.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services.balelec.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stats.blek.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'survey.balelec.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vintage.blek.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiki.blek.ch' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016b03ae6de20000040300473045022027e85ad64ede34da94f247840a4b3ac96bd2454e1e6460d550b8f2b7aaea30b5022100c41ddcb86efe2e4845eb9a2a864f6317043a769b9dce1dc70084943ef03f7a3e007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016b03ae6fb6000004030047304502201df218aea1aa239e1ded469db4104d61e74eaca6dc8c05fcfeb1715f83f761d702210083a3b112cb4d45a633438e4e4543d93981540cb87cafce5865fe4527debb12a6 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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