logging.appuio.ch

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:8b:f9:cd:9b:61:ae:b7:d1:5a:62:28:8e:d4:86:5f:2d:8b was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=logging.appuio.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:8b:f9:cd:9b:61:ae:b7:d1:5a:62:28:8e:d4:86:5f:2d:8b
Serial Number (int): 308968152140610322996966000574513792626059
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e1:de:66:0c:cc:16:80:ec:2c:ca:6a:25:2d:5c:09:8d:9c:78:a8:4a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 03:95:89:fc:4b:68:9b:38:a0:77:d5:dc:1a:e2:b9:9f:0f:f7:0d:a5
Fingerprint (sha256): 1b:36:79:5d:f5:6a:ec:d8:e2:75:b7:22:03:ed:d0:6b:17:f5:8c:2e:12:56:c9:da:fc:82:7c:bb:4d:6f:bd:8a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate logging.appuio.ch

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for logging.appuio.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

logging.appuio.ch

Other certificates including the domain name appuio.ch

(limited to 100 certificates)
register.appuio.ch
logging.appuio.ch
logging.appuio.ch
letsencrypt.appuio.ch
console.lab.appuio.ch
logging.appuio.ch
charts.appuio.ch
logging.appuio.ch
console.appuio.ch
metrics.appuio.ch
register.appuio.ch
registry.appuio.ch
metrics.appuio.ch
console.appuio.ch
console.appuio.ch
console.appuio.ch
registry.appuio.ch
test.appuio.ch
community.appuio.ch
status.appuio.ch
community.appuio.ch
charts.appuio.ch
registry.appuio.ch
registry.appuio.ch
docs.appuio.ch
forum.appuio.ch
logging.appuio.ch
logging.appuio.ch
registry.appuio.ch
appuio.ch
registry.appuio.ch
console.appuio.ch
console.lab.appuio.ch
register.appuio.ch
letsencrypt.appuio.ch
letsencrypt.lab.appuio.ch
console.appuio.ch
docs.appuio.ch
appuio.ch
registry.appuio.ch
console.lab.appuio.ch
console-lab-aws-eu-central-1.appuio.ch
registry.appuio.ch
registry.appuio.ch
metrics.appuio.ch
registry.appuio.ch
metrics.appuio.ch
metrics.appuio.ch
appuio.ch
appuio.ch
console.appuio.ch
status.appuio.ch
console.appuio.ch
console.lab.appuio.ch
control.vshn.net
console.lab.appuio.ch
register.appuio.ch
registry.appuio.ch
console.appuio.ch
console.appuio.ch
metrics.appuio.ch
logging.appuio.ch
community.appuio.ch
logging.appuio.ch
console.lab.appuio.ch
test.appuio.ch
metrics.appuio.ch
registry.appuio.ch
console.appuio.ch
registry.appuio.ch
console-dcs1.appuio.ch
appuio.ch
metrics.appuio.ch
console.appuio.ch
registry.appuio.ch
docs.appuio.ch
community.appuio.ch
logging.appuio.ch
logging.appuio.ch
console.appdirect-prod.appuio.ch
appuio.ch
status.appuio.ch
console.appuio.ch
console.appuio.ch
console.appuio.ch
appuio.ch
console.appdirect-prod.appuio.ch
logging.appuio.ch
metrics.appuio.ch
appuio.ch
status.appuio.ch
appuio.ch
logging.appuio.ch
status.appuio.ch
console.lab.appuio.ch
console.appuio.ch
status.appuio.ch
console-dcs1.appuio.ch
status.appuio.ch
forum.appuio.ch

Certificate

The complete raw certificate details for logging.appuio.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 308968152140610322996966000574513792626059
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-15 00:28:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-14 00:28:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'logging.appuio.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 914257782020099616145484341611271167702447391659553567323012808166198906627239806743179012559706922212213884292730035550169379752180095672583491195747358087147952569108452443983857039069351699796521445253064602615861660261627468046711832410128936243096126575246143374759235266785356352720156424690107817565212231852460117804464636787530773615896364531368953840856520953029329959742970847056311018930998814313965078995159160302370466559874378349693518912676389682405933491557833999454795928736779483151134619615881153342605827181841805629445680010364600773215933236086672014460760105409033163795966398349725288427503328672800509894981813831519986351529245733979242401427033763260633305187944877979210589789662597358063827632663662367755273379959413450712725830139416714371755262483763767519586755033358054675279166424118773238009328049775107711694425622650203889479881628969985574188334480320642898126496782472335790324539336671253558935913533042793557911336915069805113171674311030519498827266864331676698564330009766940111325083050728449019304443309618825658887175670149439366825897286155475183435091140429418184661345349763802180777585157212986948626784960349518795177997188613338661750021423162168176166254337295586035755070376181
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e1de660ccc1680ec2cca6a252d5c098d9c78a84a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'logging.appuio.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016fa6d1578b0000040300473045022013ab2ddd53e5ddf58694f9bfaa983a29e631072d6a2a20d6d228fc9844abc3a2022100cd5919c9b9097075ab93b7c4e1a5c1ee84f59803bddd6bbf9b92876037eb41aa00760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016fa6d157ad0000040300473045022100f5dae290bbb7eb76b01471f1671f72697894e91b041027b3c07fd48585eb4c4e02201c6ad0c9ee426ec93f3d85bc3e9a8d244fe02d8655b5a6f674379bfc531208f2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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