honegger.ch

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:59:da:46:aa:5d:6c:c4:55:61:70:29:a4:6c:82:6a:2b:1d was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=honegger.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:59:da:46:aa:5d:6c:c4:55:61:70:29:a4:6c:82:6a:2b:1d
Serial Number (int): 291912127070516985754669538235744256666397
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 79:a9:9e:da:ed:36:f0:49:54:83:c6:ff:e6:51:80:4e:cf:1c:6c:cc
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 5d:e4:ec:fc:bc:be:a4:34:66:4a:70:e9:21:32:dc:44:4a:b2:3e:cf
Fingerprint (sha256): 28:2f:41:d0:37:0a:a4:87:34:dd:ef:28:0b:ce:ab:69:11:68:60:aa:f7:ff:ca:37:96:40:96:61:31:8d:06:73

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate honegger.ch

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for honegger.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

honegger.ch

Other certificates including the domain name honegger.ch

(limited to 100 certificates)
honegger.ch
itstatus.honegger.ch
www.honegger.ch
owa.honegger.ch
honegger.ch
itstatus.honegger.ch
honegger.ch
honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
www.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
www.honegger.ch
www.honegger.ch
honegger.ch
honegger.ch
www.honegger.ch
www.honegger.ch
www.honegger.ch
www.honegger.ch
www.honegger.ch
itstatus.honegger.ch
citrix.honegger.ch
www.honegger.ch
*.honegger.ch
itstatus.honegger.ch
honegger.ch
owa.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
www.honegger.ch
honegger.ch
itstatus.honegger.ch
honegger.ch
honegger.ch
itstatus.honegger.ch
*.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
honegger.ch
honegger.ch
honegger.ch
www.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
www.honegger.ch
itstatus.honegger.ch
www.honegger.ch
itstatus.honegger.ch
honegger.ch
www.honegger.ch
honegger.ch
www.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
www.honegger.ch
honegger.ch
itstatus.honegger.ch
honegger.ch
owa.honegger.ch
itstatus.honegger.ch
www.honegger.ch
itstatus.honegger.ch
honegger.ch
honegger.ch
honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
honegger.ch
www.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
*.honegger.ch
itstatus.honegger.ch
go.honegger.ch
honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
www.honegger.ch

Certificate

The complete raw certificate details for honegger.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 291912127070516985754669538235744256666397
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-06 05:35:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-04 05:35:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'honegger.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 871650444761193509290814759097143642738450815553686754402959239344833086563407723913753558538340723492514081067544926370609112001044308185968741797608222222658705557473294128425774853993748132930470207056903356446431611395546071993930110596997606472224335010455041995573106580386910385877362820821957297595630694986847820238813063438851181452012465132441752721089747092942763607390206960019208296596017589116527287666479474506300302367419235153733525340971611862506774044846165520650978536679391960590773290242644514818671205670000083695195766898751213748133758626371916982823293727843936559265377514273257666332410196019550118874800112017094903864018426511631211677493333434657377378385271110356155327360982397869945477791641977044513719217438851705535149814501194786904772763141561373003916925001592053176129982511367007838819922875991595102458382846979529461434597715767819525510114455761311462519402649866090593528296775899415981061258615142363452486165713139524550044684530279798403931415692228513281478354796772657849735750628069032674739970955330775824493135212969745608863482172533640943989454298848291795020868048284718496644691875114618229504697515709368641041877440028611335307029877797763373669016326969390686806782646729
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							79a99edaed36f0495483c6ffe651804ecf1c6ccc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'honegger.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016d9fc7cb100000040300483046022100f96cd998dd0d170a8384685d74352947601c34e0890640c40ac6dc7a09af07210221008ebfda7ed44f06dc0286e5a5a9943b5c8fb3a1666f4a52e193cad87bcbb94c5d007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016d9fc7cb35000004030046304402202eb1142489e4b2bd408cd979f53c04462bda88e2bf19aa603d937742662459710220030dd7767ac617ab2c28361ba19cb5c559b8a1cbc7f9616ee3dc24e76a972488
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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