4factors.ch

Issued by R3

About this certificate

This digital certificate with serial number 03:43:55:67:45:2d:03:9f:b0:93:34:35:71:98:88:34:59:5e was issued on by Let's Encrypt.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=4factors.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:43:55:67:45:2d:03:9f:b0:93:34:35:71:98:88:34:59:5e
Serial Number (int): 284249296968254415401554231053943498365278
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 79:01:9c:a0:cf:0f:63:70:70:6d:62:75:50:1e:c4:27:aa:5e:ff:34
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 74:37:97:8d:e5:0d:c6:48:96:44:99:e8:00:95:6c:99:3f:65:f8:54
Fingerprint (sha256): 20:7d:89:26:d2:f3:83:a9:9b:82:e7:38:f7:8b:c4:32:ed:3d:0d:e2:36:56:d1:11:43:4c:64:26:f2:ee:56:c0

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate 4factors.ch

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for 4factors.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

4factors.ch
mobipro.ch
tasktimer.ch
www.4factors.ch
www.mobipro.ch
www.tasktimer.ch

Other certificates including the domain name 4factors.ch

(limited to 100 certificates)
4factors.ch
4factors.ch
www.4factors.ch
www.4factors.ch
4factors.ch
www.4factors.ch
4factors.ch
www.4factors.ch
4factors.ch
4factors.ch
4factors.ch
4factors.ch
4factors.ch
4factors.ch
4factors.ch
4factors.ch
4factors.ch
4factors.ch
www.4factors.ch
4factors.ch
4factors.ch
4factors.ch
www.4factors.ch
4factors.ch
4factors.ch
www.4factors.ch
4factors.ch
4factors.ch
4factors.ch
www.4factors.ch
www.4factors.ch
4factors.ch
4factors.ch
www.4factors.ch
www.4factors.ch
www.4factors.ch
4factors.ch
4factors.ch
4factors.ch
4factors.ch
www.4factors.ch
4factors.ch
4factors.ch
www.4factors.ch

Certificate

The complete raw certificate details for 4factors.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 284249296968254415401554231053943498365278
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-30 03:36:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-30 03:36:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '4factors.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 787367600583410604156829197085284070420875738620733974702322330678632263714851503188239558706749394451260229501415992481704977508927432701954178357919899969366516769373724348713263909765112408227064182097941954578847025908057220183758178297213176517088823613952883886936238374495934225045172444655041711358651670013949082243473735186217137745430679633648051884576746394780544555687143090693678699925551381395480074991863833577167224757320742104963151706554887039910860832178780872190629919566073219535587488862084469883501582952304549718631234303165974152836848038725360478094688314411537333091218374540342448838195517866900292153678500487922120077926881303837422385888595152403235459728295200717673957753393432971252551893433130626439684475307593171848162890363708372033598094054915746418994469189216417746727055025431161634535345683954453365160316842498384514874467112468428852466500652441657128964724060482597050042851227068821869793234635228222069043861297324039409462650919760396760132306934139447831165459248348282271037364670647317073139690765644321228588752900161368658068776070355912843200083914589921064902903247580254143408757422820635748141081612049097252762391172224498037224342370644030348711064318806176842666069851923
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							79019ca0cf0f6370706d6275501ec427aa5eff34
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '4factors.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobipro.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tasktimer.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.4factors.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mobipro.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tasktimer.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018561511ea30000040300483046022100b1cffd1fe99e6c1e5813cdb2ac39542efef566f3b31a7638428ba6178d07fd3e022100c09ae7965885f5470c3d4ec15b9b8b36f2dd3f80c613d188b4884c31bda6dd000077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000185615120760000040300483046022100f0a66319a289a2ac545fdaf9d56704251f5a9ccc1120860d402e2420ad009d95022100d17ecc818479959b1b12ac4f14b721e4cbf56a6026021c6411ce35b2a779967a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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