vagrantbox-public.liip.ch

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:da:80:b3:d9:87:a4:00:4e:a6:19:15:aa:69:66:5b:81:1a was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=vagrantbox-public.liip.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:da:80:b3:d9:87:a4:00:4e:a6:19:15:aa:69:66:5b:81:1a
Serial Number (int): 335689488800672913785621978071498334372122
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 29:03:39:39:b6:1a:0b:54:63:66:7b:5f:9a:64:ce:74:1d:46:8c:f1
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 05:1e:3e:b4:26:3c:74:71:39:c7:ff:db:77:cd:d7:d2:cf:0e:51:5f
Fingerprint (sha256): 1a:c2:df:ab:31:75:5d:9a:3e:89:a4:f2:79:ee:44:fa:d5:a3:a7:9a:61:f4:f0:54:43:50:2e:26:9d:69:4c:1b

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate vagrantbox-public.liip.ch

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for vagrantbox-public.liip.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

travisci-assets.liip.ch
vagrantbox-public.liip.ch
vagrantbox.liip.ch

Other certificates including the domain name liip.ch

(limited to 100 certificates)
zebra.liip.ch
liip.ch
beta-zebra.liip.ch
liip.ch
legacy-clients.k8s.liip.ch
prolek.stage01.sb.liip.ch
gitlab.liip.ch
monitoring.elearning.liip.ch
test-wiki.liip.ch
bundstarterkit.demo.liip.ch
crm.svc.clients.liip.ch
baspo.bedev.liip.ch
liip.ch
guess.liip.ch
support.liip.ch
playground.moodle.liip.ch
*.clients.liip.ch
unitar2.stage01.sb.liip.ch
blog.liip.ch
moodle.careum-weiterbildung.ch
liip.ch
techpool.stage01.sb.liip.ch
eduprep.sosaerzte.ch
nagios.liip.ch
account.liip.ch
repair-cafe-stage.clients.liip.ch
stage.bwo.clients.liip.ch
liip-moodle.devel01.sb.liip.ch
order.elearning.liip.ch
meinunterricht2.kvz-weiterbildung.ch
moodle.liip.ch
liip.ch
prolek.stage01.sb.liip.ch
memberplus.rai.clients.liip.ch
vagrantbox-public.liip.ch
blog.liip.ch
ehb.clients.liip.ch
iuffp1.clients.liip.ch
lsca.devel01.sb.liip.ch
mdl-tph-mnet.devel01.sb.liip.ch
preprod.liip.ch
mobi.demo.liip.ch
wks.devel01.sb.liip.ch
preprod.liip.ch
iuffp1.clients.liip.ch
moodle.liip.ch
iuffp1.clients.liip.ch
*.d.clients.liip.ch
download.liip.ch
guidelines.liip.ch
stage.bwo.clients.liip.ch
repair-cafe.clients.liip.ch
*.liip.ch
crm.svc.clients.liip.ch
bzwu.stage01.sb.liip.ch
liip.ch
account.liip.ch
moodle-sob.clients.liip.ch
monitoring.elearning.liip.ch
cpdf.liip.ch
techpool.stage01.sb.liip.ch
liip-moodle.live03.sb.liip.ch
lsca.devel01.sb.liip.ch
moodle.careum-weiterbildung.ch
h5p.devel01.sb.liip.ch
gtm-generator.liip.ch
slides.liip.ch
lhc.stage01.sb.liip.ch
account.liip.ch
slides.liip.ch
blog.liip.ch
moodle-dev.graduateinstitute.ch
bgs.stage01.elearning.liip.ch
projects.liip.ch
lama.liip.ch
baspo.bedev.liip.ch
chbox.clients.liip.ch
kompra.stage01.sb.liip.ch
elearning.liip.ch
futura21.devel01.sb.liip.ch
stage.bwo.clients.liip.ch
shop.stapferhaus.bedev.liip.ch
dev.zb.clients.liip.ch
iuffp1.clients.liip.ch
iuffp1.clients.liip.ch
liip-moodle.stage01.sb.liip.ch
baspo.bedev.liip.ch
liip-moodle.devel01.sb.liip.ch
stage.bwo.clients.liip.ch
hfgz.stage01.sb.liip.ch
bcv.demo.liip.ch
gtm-generator.liip.ch
stage.bwo.clients.liip.ch
sasdb.clients.liip.ch
liip.ch
tourismuskv.stage01.sb.liip.ch
solradmin.live03.sb.liip.ch
php-osx.liip.ch
vagrantbox-public.liip.ch
bzu.stage01.sb.liip.ch

Certificate

The complete raw certificate details for vagrantbox-public.liip.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 335689488800672913785621978071498334372122
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-01 09:39:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-29 09:39:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'vagrantbox-public.liip.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 770202379216060082382451505090602214724055951462664699127772968299045126517955673959388473677441377200891565101275883376738211491446938444438944501407952543734021694296340921098934203655891975157347439042199741585465617441837688135879195948935275909407558372037102159182421699639701566914970953692675916163078956281138300747005875188069446718988342156318908817796255008164532108684984546724894322547838548259303289367701440890720378663355139532286580402805812216782591758436540734572056705948465401743233158351828257677907813495458569824582513964697893423313902207593777565435233772978365802215374439039772304169548184692267713789559956006059839211565383583646600846760067252816737851147584235008762344611900915519625880234626845876030073514235714314139811224975141867541674202277710382160838436239578452847069801392921388046017971117149262663904907655416089686532240851043794861863895694923588975264874427492136028348543779805835987452965328158131092277030951670260364962238815927995282160759901126025057266511816433699216596116592061752381423075053134329501737569808220316618362434418008265262573836474859062269354216722421076629224836404211387819224845269097015954591528908720378701257563521364313826992362586332371475156657340093
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							29033939b61a0b5463667b5f9a64ce741d468cf1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travisci-assets.liip.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vagrantbox-public.liip.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vagrantbox.liip.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016bad1e53e3000004030047304502205aad588e9790dcac7a413ae493a3374000a19d41b1133b130c956933f87b7e54022100e549d91508426ad4b11f8889902cb08020f5330ef6b6b7158e1fdcae9ad5c070007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016bad1e55e4000004030046304402206b7fedc1bc3babc5237cd688082b057bf19c9b11fba4d2f552e4fc5f7c02ed3d02202adccf0f17975efb7725b97898b77447f8c5b7595e9c411c15fdc3493b6a3299
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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