alpyou.golfparks.ch

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:08:e4:bb:e8:2a:99:d0:62:32:39:2e:8f:fd:00:ed:34:74 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=alpyou.golfparks.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:08:e4:bb:e8:2a:99:d0:62:32:39:2e:8f:fd:00:ed:34:74
Serial Number (int): 351475442313854215125569357169153255748724
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: d2:87:cf:40:35:d6:ad:16:08:7a:ae:ac:37:67:0a:06:cc:42:44:5e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 8c:db:76:1e:70:50:19:a6:03:44:bb:d4:37:fa:8b:1a:c3:7a:78:0d
Fingerprint (sha256): 25:4f:03:05:c7:a4:a1:45:0f:24:b1:14:27:5d:30:db:07:8e:c1:a2:20:9f:da:15:73:db:c5:07:f9:e4:88:54

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate alpyou.golfparks.ch

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for alpyou.golfparks.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

alpyou.golfparks.ch

Other certificates including the domain name golfparks.ch

(limited to 100 certificates)
azq.golfparks.ch
admin.golfparks.ch
azqadmin.golfparks.ch
moom.golfparks.ch
alpyou.golfparks.ch
rainbird-holz.golfparks.ch
www.golfparks.ch
moom.golfparks.ch
azq.golfparks.ch
www.golfparks.ch
moom.golfparks.ch
alpyou.golfparks.ch
moom.golfparks.ch
moom.golfparks.ch
moom.golfparks.ch
golfparkmigros.alpyou.com
www.golfparks.ch
azqadmin.golfparks.ch
alpyou.golfparks.ch
www.golfparks.ch
www.golfparks.ch
admin.golfparks.ch
www.golfparks.ch
www.golfparks.ch
www.golfparks.ch
azqadmin.golfparks.ch
azq.golfparks.ch
www.golfparks.ch
www.golfparks.ch
www.golfparks.ch
admin.golfparks.ch
admin.golfparks.ch

Certificate

The complete raw certificate details for alpyou.golfparks.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHETCCBfmgAwIBAgISBAjku+gqmdBiMjkuj/0A7TR0MA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODA4MDYxMjQxMTJaFw0x
ODExMDQxMjQxMTJaMB4xHDAaBgNVBAMTE2FscHlvdS5nb2xmcGFya3MuY2gwggIi
MA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDTjgqmwimlbisUkK1vcMeQ7Uj0
3gsFciIQyWp1YmFEtiCBMA22bdWtKBcb4bM1wwm3I8RvqkrmhW2JWK09Nk56hrOQ
4w4/5h5E6Ep72hy/17FPCFuGJfp2z4x4vvopCPgGjFv4zOiRzHEK2kP2zrVJs++e
DxF1wvU44pvc6SINt/n5JeMWXKwKq5RiBzWydsuBFBNhsCa9zsktYIIcQvBH15ip
c6vFp4Xihia7d7m4LIWmAf0g42/ZWmFGv0lKrps+GnvhbxkCTcpQGzhMUG5ItNxW
qKorqwddyyM5K7PLKuteEE/nwJAji6qBPZr3dOeqku+idi/TAmk3I9Nz5KDG/77l
OXhj8f0UPCOUoDh5XoS5G5b3B/uqvtebBgrfrnhL7tx6lzoxHKRv0Hv44HcJ3dDi
QmBSi+5drYe2wH++5wNUmJZRnPBPjFRW6rzBxIjV5f0BznWYJ4nG2/ScCCaCX6dZ
SUPkH64dSxRAJ+s1skQxQLVU62FD2//WENU0wEEn0ALAphXH8Q3Sp46nTBqJ17fx
PZmXnYnRzPm8bVn1oJ1SbJxuQCjspFROdlHlZzOAvzB8boXGQrg2k2K7mM4u22qO
3sHkXmCv9ZX0ypxeEAXVL5a0TSJohxTPJ75ej8XfKACWZCVset11tHYcEQcOkI6V
kHH/V4ZE7Uc/s4/3BQIDAQABo4IDGzCCAxcwDgYDVR0PAQH/BAQDAgWgMB0GA1Ud
JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQW
BBTSh89ANdatFgh6rqw3ZwoGzEJEXjAfBgNVHSMEGDAWgBSoSmpjBH3duubRObem
RWXv86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3Nw
LmludC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0
LmludC14My5sZXRzZW5jcnlwdC5vcmcvMB4GA1UdEQQXMBWCE2FscHlvdS5nb2xm
cGFya3MuY2gwgf4GA1UdIASB9jCB8zAIBgZngQwBAgEwgeYGCysGAQQBgt8TAQEB
MIHWMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCBqwYI
KwYBBQUHAgIwgZ4MgZtUaGlzIENlcnRpZmljYXRlIG1heSBvbmx5IGJlIHJlbGll
ZCB1cG9uIGJ5IFJlbHlpbmcgUGFydGllcyBhbmQgb25seSBpbiBhY2NvcmRhbmNl
IHdpdGggdGhlIENlcnRpZmljYXRlIFBvbGljeSBmb3VuZCBhdCBodHRwczovL2xl
dHNlbmNyeXB0Lm9yZy9yZXBvc2l0b3J5LzCCAQQGCisGAQQB1nkCBAIEgfUEgfIA
8AB2ACk8UZZUyDlluqpQ/FgH1Ldvv1h6KXLcpMMM9OVFR/R4AAABZQ94YdAAAAQD
AEcwRQIgW75Fl1soTPYTo5JJgI6UYjTxlt2d/PYXLoNb6seEPq8CIQD7ViF/WFyt
Q6KItkdLrQbkOlLYcQFKCvE664SO9oTKGAB2AG9Tdqwx8DEZ2JkApFEV/3cVHBHZ
AsEAKQaNsgiaN9kTAAABZQ94Yi4AAAQDAEcwRQIhAONfPj31iPuvGDBbQes+KYDK
44zTFTLRDFvUEWXaGj5TAiAEfuIDSwjlLzZCnE/ePAj6hPHQQmcNGg2Cl7MBvDCn
/jANBgkqhkiG9w0BAQsFAAOCAQEAAeciaUqw4OSUEkH8Om35GOq1XwQgdJgGbgJ+
HABDlmPLttWM+dpKHRwSYuceMmTfc7lCQG3tgPkA+UuVQX0X4DuXcryjeNBBEhG5
AeWn/EzCIRmEID+LZezP4c9NFKA8JRmqKz4aJ8VcRzuKFodFVJ/xFiS3gIS/ZKGQ
VvenICQDZOtI66D0iHeE4064ViRx+HVnmrSRl13MNFPOij4hr7r81jovKlsiglvt
Cvqn6DvDTpdFJMPlDYjPVIaC2zZBldDZUu0mCWVn1rIvyDwJeZPOO4ddmOLcQ7sn
8b1ESQHxTiDTczoyuV5H36HuQu/1JKdZ6lI4oJrq8stV/BWsCA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 351475442313854215125569357169153255748724
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-06 12:41:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-04 12:41:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'alpyou.golfparks.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 863068488975450195837690065059121086809271208133981534475494298119651296441529741563483808116603479646803904058338900998101731438320275989857321958302324418458377583469357059158200030593957714765553098528253787045562452298566578712689057971726101922234529519674725324464725271696979549006081370879352931313036867886754159484503515415397222829117908355383042925722439414744469117968426723066753034659483434185083593309145630521184317181538261402114487180346482603346738246267619988729972791810427819890284249684521243326098815337183892439303326637151204411413178607714105180615215182863808280525372552647061319340452198604497989597978034412542199518797054327386073813965979368666738140420489162598023175483527408161194803666609927378730485787930101200478507805431629524820336360014459640935570154881863575680531595919183960946263889488844521622698401912040558154910096052357387749118051327421891281799022936537332241051393448230938810864100427553032320321095964857640358274975659719091956827969523159568121955963464189753365878697216468014458019025439979659678120565190677534791804146038514383249987891737434263814233769537091769474928074565332553811398790223766440952498956726908615278806194472555923788449240844923961287366889436933
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d287cf4035d6ad16087aaeac37670a06cc42445e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alpyou.golfparks.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001650f7861d0000004030047304502205bbe45975b284cf613a39249808e946234f196dd9dfcf6172e835beac7843eaf022100fb56217f585cad43a288b6474bad06e43a52d871014a0af13aeb848ef684ca180076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001650f78622e0000040300473045022100e35f3e3df588fbaf18305b41eb3e2980cae38cd31532d10c5bd41165da1a3e530220047ee2034b08e52f36429c4fde3c08fa84f1d042670d1a0d8297b301bc30a7fe
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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