ticino-win.ch

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:53:a7:16:14:d1:68:48:bc:19:f5:aa:78:7c:61:a9:47:e0 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ticino-win.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:53:a7:16:14:d1:68:48:bc:19:f5:aa:78:7c:61:a9:47:e0
Serial Number (int): 289802389977784753534793411025961457633248
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 0a:15:8b:d0:23:2d:45:56:79:1b:df:18:ab:71:b2:90:29:76:5c:5c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 68:7f:81:98:e4:95:af:7c:22:e0:e0:0d:0a:22:bd:94:f0:f1:cd:18
Fingerprint (sha256): 26:a3:83:7b:2b:c8:b4:d8:7e:d4:92:47:8e:ad:01:ba:8c:95:60:e3:c8:63:f4:a7:b3:57:34:1d:63:6e:54:6b

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate ticino-win.ch

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ticino-win.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ticino-win.ch
www.ticino-win.ch

Other certificates including the domain name ticino-win.ch

(limited to 100 certificates)

Certificate

The complete raw certificate details for ticino-win.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 289802389977784753534793411025961457633248
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-01 23:00:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-30 23:00:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ticino-win.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 802891435880978526371310891673227802514525229676550078566051219040396943537435404777190463242150105510617128194891578303429361164904211640386826798631503372066133621474677879536495250525726642312518217555644772853156404420369928734765029779855217773370303567941300813464868392916298919518691034710961430290014263102527016593694414703016539456131623840239329461439129073797158207447974993473582510806221591185182129358402429918329573504016526715733187395342945095496926498536362343162246428552226006709988365974858474071931705936604358848881266191401854573861945165622091287220386997341023049664470151798431660288267711037009152955558068326821799202619400887025156524671922188685649228799249419374434547421526800878597507876441923570898054221392716317646398519134855377801587641460583509503522976309366396269118285328081126861220396622866331151076962755544552352349756639928184448162196389219860308344780713489268838764810855337446981186593343547312853938376267658874678551049474461679238032783795800727420693538969478974414985451754076987144010216887159529534640653657268157830044085188161046767546334527980927283456141472268517142882600660154276493672942591208171290985512204290671661416470648560456644357117620282981245724869208479
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0a158bd0232d4556791bdf18ab71b29029765c5c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticino-win.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ticino-win.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016c4fa08d2a000004030047304502207cdf1c744d7fe88fc241220882c51cd92f31ee91e10f4a82e0fbf5e93932e304022100e4ea78d7bf73e5e65cb934076a4b428690a9185331365bfba56e596b6857605800760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016c4fa08d430000040300473045022007593166732ab67c38465bb22aa4048bb57e93e844b45f07fb2ec582935d458b022100cf09fb2eb568548108e30bf7ba94db18305f169d5a5b2f0d91d107b4eec6e738
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		004d595c21859fc3be28fb174f2135f89f1796602e64f059a94d7e48aa3d2a214769e568056111f695bb64c6f4a7854ef71d54b4b07476d59983f1567a3f333732554c72b2d94312be418a18363d6b121659b21b0ba70710978cca35af7fc06c159686b27e04cd9c97785400ef9db06abf4c9b459587704463271b02b64ee430efd0a3a66a9bf8e709577db6266a2ef5180a6e92fe4045ff0972c0f9d48351371012cb94088422c2147bcfe149eefeb335a29161aed5a6de86eb2de6f322ec9319a1a4f087b456acfb42e2898604e8c1eed8753bbbd60b1fb4392ee3ea2911cbad2ade439b1e4ed654f275eed43b2fe1534a191cf1612e41c7dc10a08418639642