registry.appuio.ch

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:c0:63:b9:72:ae:1e:83:03:43:57:a6:8a:db:a0:e9:e6:5c was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=registry.appuio.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:c0:63:b9:72:ae:1e:83:03:43:57:a6:8a:db:a0:e9:e6:5c
Serial Number (int): 413915914648352545214751057807316540319324
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 65:e4:79:a3:30:39:1e:4e:1e:91:46:5f:02:29:b9:a7:c4:b8:47:36
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 59:87:6c:93:53:c3:82:8a:61:c8:c9:0e:5a:f5:d9:48:f3:df:b4:8e
Fingerprint (sha256): 2a:45:ba:f4:d7:8f:8a:b2:b0:9b:54:ba:0b:81:c9:9d:c0:ec:13:22:76:7e:b1:29:63:37:63:b8:00:72:37:68

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate registry.appuio.ch

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for registry.appuio.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

registry.appuio.ch

Other certificates including the domain name appuio.ch

(limited to 100 certificates)
register.appuio.ch
logging.appuio.ch
logging.appuio.ch
letsencrypt.appuio.ch
console.lab.appuio.ch
logging.appuio.ch
charts.appuio.ch
logging.appuio.ch
console.appuio.ch
metrics.appuio.ch
register.appuio.ch
registry.appuio.ch
metrics.appuio.ch
console.appuio.ch
console.appuio.ch
console.appuio.ch
registry.appuio.ch
test.appuio.ch
community.appuio.ch
status.appuio.ch
community.appuio.ch
charts.appuio.ch
registry.appuio.ch
registry.appuio.ch
docs.appuio.ch
forum.appuio.ch
logging.appuio.ch
logging.appuio.ch
registry.appuio.ch
appuio.ch
registry.appuio.ch
console.appuio.ch
console.lab.appuio.ch
register.appuio.ch
letsencrypt.appuio.ch
letsencrypt.lab.appuio.ch
console.appuio.ch
docs.appuio.ch
appuio.ch
registry.appuio.ch
console.lab.appuio.ch
console-lab-aws-eu-central-1.appuio.ch
registry.appuio.ch
registry.appuio.ch
metrics.appuio.ch
registry.appuio.ch
metrics.appuio.ch
metrics.appuio.ch
appuio.ch
appuio.ch
console.appuio.ch
status.appuio.ch
console.appuio.ch
console.lab.appuio.ch
control.vshn.net
console.lab.appuio.ch
register.appuio.ch
registry.appuio.ch
console.appuio.ch
console.appuio.ch
metrics.appuio.ch
logging.appuio.ch
community.appuio.ch
logging.appuio.ch
console.lab.appuio.ch
test.appuio.ch
metrics.appuio.ch
registry.appuio.ch
console.appuio.ch
registry.appuio.ch
console-dcs1.appuio.ch
appuio.ch
metrics.appuio.ch
console.appuio.ch
registry.appuio.ch
docs.appuio.ch
community.appuio.ch
logging.appuio.ch
logging.appuio.ch
console.appdirect-prod.appuio.ch
appuio.ch
status.appuio.ch
console.appuio.ch
console.appuio.ch
console.appuio.ch
appuio.ch
console.appdirect-prod.appuio.ch
logging.appuio.ch
metrics.appuio.ch
appuio.ch
status.appuio.ch
appuio.ch
logging.appuio.ch
status.appuio.ch
console.lab.appuio.ch
console.appuio.ch
status.appuio.ch
console-dcs1.appuio.ch
status.appuio.ch
forum.appuio.ch

Certificate

The complete raw certificate details for registry.appuio.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 413915914648352545214751057807316540319324
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-24 11:24:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-22 11:24:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'registry.appuio.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 812243647095561329474609218101891388637355360102630567813685756068159458885412428459166611985870207989092609872994897332502187615901741325984882236138979151932311371616333022818508881866798792773128906107143094746789678810311978882410749533643602933535963851833300466310301587075273219584542418702613600597766906030451828078877271992367695974055050120979232799902799341139685255791484544485790216051605327819073785744373948628154807028376893709498448832778649506896301214754381300230263606105896935490475277226817966011331325197428430358665063089940204479736447696938287799983998410002088462390876397640245085624523293586012061892506913318216044540656040796143244574496128692373861883070529279507063995090146155318563211418506560829626587012191571284825232640062277508891226809284787432726878751033093061055688340095998550477222195872910100469599005114658994348381635829423984321594192487479841951351512330225999370317070481909746556287881491917681629077456022702537399655498179277130271507715825279726791534834164399515158912257366784441269198125698536525634683916143991804846838824293095045598510295605534495865273562172999030944476520244497333573790713050229693819632395230178426102192699815331609732777448780024005563216895530593
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							65e479a330391e4e1e91465f0229b9a7c4b84736
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'registry.appuio.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016dfdb9be870000040300483046022100de87058873d6f6686cd7aa837abed6aacbfe05b4c7d3fa1a4afe198f01b6e0bd022100bf654f71911cad705964d1c8618b3f5dcf58313a2b80a92323db39ac3f8ed993007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016dfdb9be8900000403004730450220689eda0db28eb4585f7fffe37b095efc4c2b2cc42cf5ea8cbd9976e49833acfa022100da5a85fc2a161147737266ee31f8d42dc8265f84c14f6178c364c49f9d212551
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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