tg.transgourmet.ch

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:f5:52:c4:68:e2:84:54:40:d4:31:95:bc:c4:1d:60:79:dd was issued on by Let's Encrypt.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tg.transgourmet.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f5:52:c4:68:e2:84:54:40:d4:31:95:bc:c4:1d:60:79:dd
Serial Number (int): 344816054204066416801400248665895725988317
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e0:df:93:c4:75:ad:eb:dd:72:6e:0d:aa:1d:7f:ef:cc:52:82:f8:9e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): fa:69:23:25:6b:f1:f0:4d:3e:45:49:5a:6e:05:a3:27:2e:39:c0:49
Fingerprint (sha256): 29:c9:bd:4f:bf:d9:42:d2:b9:d2:14:7c:18:c9:50:3c:bb:d5:ae:45:b6:1c:49:69:1c:15:d4:15:d8:00:6b:7f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate tg.transgourmet.ch

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tg.transgourmet.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

epaper.transgourmet.ch
prodega.transgourmet.ch
solutions.transgourmet.ch
support.transgourmet.ch
tg.transgourmet.ch

Other certificates including the domain name transgourmet.ch

(limited to 100 certificates)
moebel-gruber.mediaflip.de
new.transgourmet.ch
magazin.peak-muenster.de
jobst-wohnwelt.mediaflip.de
kiosk.greater.sydney
magazine.landroverusa.com
jobst-wohnwelt.mediaflip.de
lemagazine.landrover.com
solutions.transgourmet.ch
epaper.abakus-magdeburg.de
webkiosks.sm-sport.de
jobst-wohnwelt.mediaflip.de
law.transgourmet.ch
epaper.treffpunkt-bau.eu
moebel-mmz.mediaflip.de
sip.transgourmet.ch
catalog.sogears.com
webkiosk.dein-typ.de
magazin.zibibbo.de
jobst-wohnwelt.mediaflip.de
hoffmann-moebel.mediaflip.de
hoffmann-moebel.mediaflip.de
hummerich.mediaflip.de
moebel-zuck.mediaflip.de
ftp.transgourmet.ch
akamai-san166.exacttarget.com
magazine.landrover.com.cn
mymail.coop.ch
tg.transgourmet.ch
ruesen.mediaflip.de
ruesen.mediaflip.de
transgourmet.ch
moebel-zuck.mediaflip.de
hummerich.mediaflip.de
trop.mediaflip.de
jobst-wohnwelt.mediaflip.de
frauendorfer.mediaflip.de
new.transgourmet.ch
jobst-wohnwelt.mediaflip.de
hummerich.mediaflip.de
berliner-kurier.kiosk.plus
jobst-wohnwelt.mediaflip.de
trop.mediaflip.de
app.langguth.wine
epapers.gleitz-online.de
webmail.transgourmet.ch
webkiosk.baeckereibuettner.de
mymail.coop.ch
moebel-mmz.mediaflip.de
moebel-mai.mediaflip.de
epaper.treffpunkt-bau.eu
blaetterkatalog.rp-media.de
ruesen.mediaflip.de
jobst-wohnwelt.mediaflip.de
moebel-zuck.mediaflip.de
berliner-kurier.kiosk.plus
moebel-berta.mediaflip.de
moebel-mmz.mediaflip.de
jobst-wohnwelt.mediaflip.de
hummerich.mediaflip.de
mobila.mediaflip.de
trop.mediaflip.de
moebel-gruber.mediaflip.de
akamai-san166.exacttarget.com
gusto.transgourmet.ch
moebelundobjekt.mediaflip.de
katalog.unzerbrechbar.de
hetmagazine.landrover.com
medien.koinno-bmwi.de
berliner-zeitung.kiosk.plus
moebel-meyer.mediaflip.de
berliner-zeitung.kiosk.plus
ruesen.mediaflip.de
ftp.transgourmet.ch
kiosk.greater.sydney
jobst-wohnwelt.mediaflip.de
ruesen.mediaflip.de
tg.transgourmet.ch
jobst-wohnwelt.mediaflip.de
ruesen.mediaflip.de
mymail.coop.ch
hummerich.mediaflip.de
katalog.unzerbrechbar.de
webkiosk.reven.de
kiosk.greater.sydney
onlinekrant.binnenvaartkrant.nl
moebel-gruber.mediaflip.de
moebel-berta.mediaflip.de
moebel-gruber.mediaflip.de
private.transgourmet.ch
epaper.treffpunkt-bau.eu
moebel-berta.mediaflip.de
online.hansestyle.hamburg
moebel-meyer.mediaflip.de
akamai-san166.exacttarget.com
law.transgourmet.ch
www.transgourmet.ch
kataloge.fuerholz.de
mobila.mediaflip.de
login.transgourmet.ch

Certificate

The complete raw certificate details for tg.transgourmet.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4+dL9Z3WtdNSIb8iIZ38
Nl0MDx8SzRGHki/uk3321eJM8SZdSxlaGRqtU/GX3gkIBKqAL56eMYuoS5ILXBwS
VksM50hhW/yE0+VeVm3vSaU5oXfHGliD24jznJ5g6PKeIazKTl7txisf1YQWE77J
TujvmuPYAlqPYU5LJDl3lM49GUyB6lEgygxzniT7XhQS/8sLgMr/+0TfyC6XFuyB
t9zNVhIU1HTYFRoU8Khe5s8H6vrqUUpOUQ2w/0UHAlqCPj4esBe7IS0KW5t5xs6V
WMxHIgw1vDTmJukCjdZYWj6+0XoylkBB5B50q4mHt9+weh27K+7e71K2Pv8m6/k2
AQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 344816054204066416801400248665895725988317
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-16 08:53:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-14 08:53:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tg.transgourmet.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28770151889181658511033519227151280768368004307876311026892977204646415735554322883695312955113110658445405647049789234738644458871865753784826438915342962560376917543005830671849419742966442214332198838472367953529341359291210926449702811236505154525053736893858324805665109080633177211432398793267474281963972406056270200459752888505743035590824989861416805633799115405404473008057748626639961181061940440573167371267384940088043021404237929826283490475269920324190476757162352336672755899918967414773712437609177107793265719549669107792911912636659790374207410702132935020030532346380715743307101041520542601524737
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e0df93c475adebdd726e0daa1d7fefcc5282f89e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epaper.transgourmet.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prodega.transgourmet.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solutions.transgourmet.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.transgourmet.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tg.transgourmet.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016b5fb4e9ab0000040300463044022042a09837b1ab2d38674655b9d25fcd785dc287db88e8a070aa406405853c619802203cbc4cbc2e2a77be8947dd2afd7adcab4713dc3762675b2d717dedf89bbf172c007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016b5fb4e9aa0000040300473045022100b5fb30b0c4cd097fcb3c8dba5d9368ac53bd23ba4d00248b5e77a81d48e006c802205d534be3fb5931bff2c69ab3d627f0fb9bc4b8e7fed52b2985c9389c82339c5f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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