xund.ch

Issued by R3

About this certificate

This digital certificate with serial number 04:d9:21:44:03:33:8a:c4:7d:6c:a8:01:99:8f:69:a4:c6:3e was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=xund.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:d9:21:44:03:33:8a:c4:7d:6c:a8:01:99:8f:69:a4:c6:3e
Serial Number (int): 422334635013862727322431100950259609945662
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 5f:cc:7b:97:de:55:f7:99:b9:c2:aa:3e:5e:e2:42:c1:2e:b9:3a:43
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 7a:8e:50:b8:6f:a8:00:e2:f5:db:0b:8c:41:bf:96:e8:bc:ca:70:0f
Fingerprint (sha256): 1b:d0:cd:71:7f:b0:c2:7d:8a:7b:90:fc:1f:18:46:2f:c2:eb:c7:04:3a:30:cf:14:de:e8:da:c7:c0:16:de:26

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate xund.ch

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for xund.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.xund.ch
xund.ch

Other certificates including the domain name xund.ch

(limited to 100 certificates)
mail.xund.ch
moodle.xund.ch
neubau.hfgz.ch
www.xund.ch
www.xund.ch
neubau.xund.ch
neubau.xund.ch
report.xund.ch
game.xund.ch
www.xund.ch
report.xund.ch
xund.ch
mail.xund.ch
xund.ch
game.xund.ch
xund.ch
www.xund.ch
game.xund.ch
moodle.xund.ch
www.xund.ch
*.xund.ch
www.xund.ch
*.xund.ch
xund.ch
xund.ch
xund.ch
moodle.xund.ch
neubau.xund.ch
moodle.xund.ch
www.xund.ch
report.xund.ch
moodle.xund.ch
www.xund.ch
www.xund.ch
report.xund.ch
xund.ch
xund.ch
scundcpv01.xund.ch
sip.xund.ch
report.xund.ch
moodle.hfgz.ch
game.xund.ch
moodle.xund.ch
neubau.xund.ch
game.xund.ch
moodle.xund.ch
sxundcpv01.xund.ch
neubau.xund.ch
neubau.xund.ch
moodle.xund.ch
xund.ch
www.xund.ch
xund.ch
xund.ch
neubau.xund.ch
neubau.xund.ch
game.xund.ch
www.xund.ch
moodle.xund.ch
report.xund.ch
neubau.xund.ch
moodle.xund.ch
xund.ch
xund.ch
xund.ch
www.xund.ch
neubau.xund.ch
report.xund.ch
www.xund.ch
game.xund.ch
report.xund.ch
xund.ch
xund.ch
www.xund.ch
moodle.xund.ch
www.xund.ch
neubau.xund.ch
neubau.xund.ch
report.xund.ch
xund.ch
xund.ch
xund.ch
neubau.xund.ch
*.xund.ch
moodle.xund.ch
moodle.xund.ch
xund.ch
game.xund.ch
game.xund.ch
xund.ch
neubau.xund.ch
xund.ch
xund.ch
mail.xund.ch
zebi.xund.ch
game.xund.ch
moodle.xund.ch
report.xund.ch
neubau.xund.ch
xund.ch

Certificate

The complete raw certificate details for xund.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5mGWBbTXAl/0bduQ8OwX
mVHXWFk3mTJrO9azuev/Dy5OqsxNhVLF6R8xUGE9kbWVBFhc2/36nNBp+MGwgaeg
LHC89mUvleh1zoFN7DcDOtESrPuNdz/OwRNv/nYfsRSo1/SSHWmz5cvNcwmNrGYe
VgMVPQWM38HkGGqx6zJQsAMERj41PuCjWYG7E/Y5/iUbxtwZnrfM1MnPPzR/ZIB/
3Q+61Mp4RGPhxYKsBY+4kDKEG3reLPz96sBo/ks/RsfCdPQ0j7/YUwVfTNLXuUbH
9uwbUR4RdqCYWjWVPZPBO2/IPf3NUOWTUej2aUWUNdfj9SwIIUrZW6k9S4bxsxmg
SQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 422334635013862727322431100950259609945662
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-26 16:25:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-25 16:25:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'xund.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29082931604421810208390857638073352799589117631310769939455283205662621409259801192800340864368968082726880160089249060760329224433429117371834406545307026315437946122111644817807872416405180106857674424972618261277161622086714847096957049388110571186882802935172977510326186284844335261299839586782520516584837625164144205912682485232339609601623252593723752142146371440164314997140742402913184936706209595688140090017225455860458761957287914713525533839492486023561677617820082242296206782350866208367670647854456267020595237271772348569302485381018937950029016087533881744328371105350695389676961195642758868082761
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5fcc7b97de55f799b9c2aa3e5ee242c12eb93a43
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xund.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xund.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000187be993f850000040300473045022004b2e6393574ad83ee22d98d7c6ee14eb80e5c45f1bdb965df629a57333dd863022100d03a01f5f6c3dd0680c7dc496dcd1050967885d23e401fb51904ab287436c1800075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000187be993f98000004030046304402201ba39f30f2fff339962b193e13fe114a8501bc0f99bc655bdf9e6e32c8fb7aee022016e363ca887d978180c9e608e986d690ee6d3d75e3ded3815ac181fe825c6fb3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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