ecfos.ch

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:4f:a4:30:55:b4:72:2c:43:43:d1:a8:12:b5:36:11:c5:7b was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ecfos.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:4f:a4:30:55:b4:72:2c:43:43:d1:a8:12:b5:36:11:c5:7b
Serial Number (int): 288437409141894034792825543051014325781883
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f9:03:ad:3a:8e:a1:8c:60:77:98:e3:25:86:a9:51:35:aa:db:96:d9
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): be:a0:60:2e:7d:99:18:f1:83:9f:bd:1a:49:ed:15:80:b2:a6:31:49
Fingerprint (sha256): 1c:01:51:e1:19:4d:73:b4:a6:92:61:c2:96:dc:76:b4:0b:9f:57:31:63:a6:43:ba:31:98:fd:ef:7b:1a:0b:1b

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate ecfos.ch

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ecfos.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ecfos.ch
www.ecfos.ch

Other certificates including the domain name ecfos.ch

(limited to 100 certificates)
support.ecfos.ch
support.ecfos.ch
tecnologia.industriasgarend.com
ecfos.ch
support.ecfos.ch
v5support.wordshark.co.uk
ecfos.ch
ecfos.ch
ecfos.ch
support.ecfos.ch
support.ecfos.ch
support.ecfos.ch
support.ecfos.ch
support.finterra.org
support.ecfos.ch
v5support.wordshark.co.uk
ecfos.ch
support.ecfos.ch
support.welltech.do
ecfos.ch
ecfos.ch
support.ecfos.ch
support.ecfos.ch
ecfos.ch
ecfos.ch
v5support.wordshark.co.uk
support.telelogx.com
v5support.wordshark.co.uk
v5support.wordshark.co.uk
support.telelogx.com
tickets.imron.com
support.ecfos.ch
support.ecfos.ch
support.telelogx.com
support.telelogx.com
support.ecfos.ch
v5support.wordshark.co.uk
support.ecfos.ch
ecfos.ch
ecfos.ch
ecfos.ch
support.tsorro.com
ecfos.ch
ecfos.ch
support.telelogx.com
support.finterra.org
helpdesk.itservicegroup.net
ecfos.ch
ecfos.ch
support.ecfos.ch
support.ecfos.ch
support.feedbackfans.com
support.telelogx.com
support.telelogx.com
support.mfgxonline.com
ecfos.ch
ecfos.ch
support.tracelabs.io
support.telelogx.com
support.ecfos.ch
ecfos.ch
support.telelogx.com
support.telelogx.com
v5support.wordshark.co.uk
support.tracthai.com
ecfos.ch
support.ecfos.ch
ecfos.ch
support.telelogx.com
support.access-simplified.com
support.telelogx.com
support.telelogx.com
ecfos.ch
ecfos.ch
ecfos.ch
support.telelogx.com
support.supplychainwizard.com
support.klockwork.net
support.telelogx.com
helpdesk.telechoice.com.sg
soporte.southdata-ar.com
ecfos.ch
help.streamlinevrs.com
support.telelogx.com
support.ecfos.ch
ecfos.ch
support.telelogx.com
instantsuite.ecfos.ch
support.ecfos.ch
ecfos.ch
ecfos.ch
support.telelogx.com
support.ecfos.ch
support.ecfos.ch
support.ecfos.ch
support.livemediatechnology.com
ecfos.ch
support.ecfos.ch
ecfos.ch
v5support.wordshark.co.uk

Certificate

The complete raw certificate details for ecfos.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTIFiMUcklpvyPe52Typ
j4fwDdLSXM4IVeIxvJNayF9FvQCG9n5WJXlB5JeLhjAcDsX3PSsQZLYwTZ+1Ly8m
vkblYRRmTvT1BUAgAx9mtYlpvgtJ5UpJ/reBUYBcSo/uUnBFzFVA7weT+2bZYZxw
xxwnaP9X0vrBXp9dKcUuG42HiHz50X+XBv+mhv34biPwBMhxPs2ziSV1ARQPkxYj
z8ADGwh4r4XQ7FElQnyBDRg8HLrShr/qVbQDhtorwc2lGUkKR2maSWTOwbdMe5JI
hp+BziDrqqtOPv+fZwcXrFEH455f0NUFagSUAAEQI8VlW/jzVKqVBDtPfZcX8gGi
UwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 288437409141894034792825543051014325781883
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-11 23:07:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-09 23:07:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ecfos.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22368846558259876154176945570962389287681646811847025842455105133532621510411892260793757385137929969415273109147639768717865566799871635702985819018771163432538061988755641727104183092105875390867828060596629319075757460129021071361676529660295558345465323628748718491605516099891434978781385630381677969116798033597455499984073800742379438184111902159700738265478316684348542007457439447616134299544633204409711598442408873788274997874391633358238340145599371799789951972873840742088064703559576076828595982755088035827651155342762592440257665215258597615639013537410676096069667965957932446208469801212899225608787
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f903ad3a8ea18c607798e32586a95135aadb96d9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecfos.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ecfos.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe000001666599abe90000040300483046022100f35fef29914ccea64e8423025179eadcf6c49c942210ce1ad259d64be70f4b37022100f98f31931081e93596d4cd26a9573ccc03e230956d838f40adc2661253926c1a007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001666599adee000004030047304502204ce0ff72df23e70d83ff2014f047f13f020bfda5937b82b7d457332d58791614022100b25fb344b5b5c65967f1723f56ef7c1c7b35010e91a937d2013222210805e205
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002589cce1bd50799daac5d0e8cc5d4d244e7b1ce5225cee05517567c5dd2d43fe343a3140a93494d5cfa3373e2c7513e30a56881915b710fb26e4bfbc281e0e030bbc6345007a6aa01cf8a9db852f73a37318992a041307470a365743024cc42aea37ed68761fb118d3299c34af93c1a9029167beb10182bbc9fcaa9b176404724e9cc84193300fd255bf0a9814e4ce322e50922e1bc1ad17c6b5b36843d819dcf08f1cf1da432c03967e8727a13e4839a9b6033144e8ee6e6beb4481186a0e915fc1899883cafd2ed5e94bdc9a230455a5afc109efc2c24e0dd8bf5865b295bfabd93ba354973cd53970b1d99bf7ecd151977b0f111d992a3d593cde4843ac7f