mymigros.ch

Issued by R3

About this certificate

This digital certificate with serial number 04:87:71:d4:d3:1f:8e:24:c0:f5:ec:cd:e9:ba:5c:c0:5c:68 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mymigros.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:87:71:d4:d3:1f:8e:24:c0:f5:ec:cd:e9:ba:5c:c0:5c:68
Serial Number (int): 394538571073913874743546220281712449969256
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: e8:b3:c6:6a:22:0f:2b:aa:b4:f1:73:d7:5b:1e:ed:09:6d:eb:1a:47
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): f4:6b:59:16:d6:d1:3f:3c:ba:f3:ee:3a:e3:0e:53:2c:62:8d:f8:41
Fingerprint (sha256): 2d:cc:e9:12:e2:65:d0:d8:93:d8:37:3a:1d:a3:09:9b:c2:26:4d:31:cb:21:fa:5a:96:8f:1b:61:ea:e0:95:cc

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate mymigros.ch

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mymigros.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mymigros.ch

Other certificates including the domain name mymigros.ch

(limited to 100 certificates)
mymigros.ch
mymigros.ch
dev-shop.mymigros.ch
qa-backoffice.mymigros.ch
mymigros.ch
test-backoffice.mymigros.ch
test-shop.mymigros.ch
mymigros.ch
mymigros.ch
storybook.mymigros.ch
qa-shop.mymigros.ch
test-picking.mymigros.ch
dev-backoffice.mymigros.ch
dev-api.mymigros.ch
mymigros.ch
test-api.mymigros.ch
test-picking.mymigros.ch
mymigros.ch
test-backoffice.mymigros.ch
storybook.mymigros.ch
qa-shop.mymigros.ch
test-shop.mymigros.ch
qa-shop.mymigros.ch
test-shop.mymigros.ch
qa-api.mymigros.ch
test-api.mymigros.ch
api.mymigros.ch
www.mymigros.ch
qa-api.mymigros.ch
qa-backoffice.mymigros.ch
mymigros.ch
picking.mymigros.ch
mymigros.ch
dev-backoffice.mymigros.ch
test-picking.mymigros.ch
gundb.mymigros.ch
qa-backoffice.mymigros.ch
www.mymigros.ch
mymigros.ch
mymigros.ch
dev-api.mymigros.ch
qa-backoffice.mymigros.ch
qa-api.mymigros.ch
dev-shop.mymigros.ch
www.mymigros.ch
api.mymigros.ch
www.mymigros.ch
test-backoffice.mymigros.ch
test-www.mymigros.ch
mymigros.ch
dev-backoffice.mymigros.ch
test-api.mymigros.ch
test-picking.mymigros.ch
test-www.mymigros.ch
qa-picking.mymigros.ch
www.mymigros.ch
qa-shop.mymigros.ch
dev-api.mymigros.ch
picking-canary.mymigros.ch
dev-api.mymigros.ch
dev-shop.mymigros.ch
www.mymigros.ch
qa-api.mymigros.ch
dev-backoffice.mymigros.ch
picking-canary.mymigros.ch
www.mymigros.ch
dev-shop.mymigros.ch
dev-shop.mymigros.ch
test-www.mymigros.ch
picking.mymigros.ch
storybook.mymigros.ch
test-api.mymigros.ch
test-shop.mymigros.ch
mymigros.ch

Certificate

The complete raw certificate details for mymigros.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw32lQTEI9oWR6PczEO9q
1D7r6QsReNWZfTIe7fJ/wZUd/NWzBh0hlV4eYIVStiF9gzVLI4IU8ic27eAeIceB
s1nZBVuNK9z0MbpoNK7UE/rgjMF1N0O+ZLYr16sfS302172TsPTQMGSGvVAFUAud
EhTBfrEOZRCqwMLX6F0odUkZ/G9wgpEc22se0AXCx3/GN7Cfyb9wMc7pQDwe3XOy
n0plp5acD1ZG0RVNAOHCG+uGvrJGwHiUS4IZwwPYm+9cidqDZiu2NzRflLz90LQa
lSTyfcKZMT437vOU5IKQoz84VkZl2OpPqKVlb9TKegIHDWkb/ol6cBkNucA9shPh
kQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 394538571073913874743546220281712449969256
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-22 06:51:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-20 06:51:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mymigros.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24678427586459758925330499741450092860023601677844528678408404658188125082831005587968803343926550612657520212011307871277058678305857882251771099722288473291527582290449004247892697850310311615946784366011108508845436819282372898791856301373496556732894950836912868177177687411778718160598381131823890459279777221107884767581357112379420240537494115581167364485132581927415678062169025217494883848525860108189245305349003763710411544327748237414146107666868751199630494547647739299198207610418069071871722670747933164202031398637014387619068041539570817240995281453536752638203322256537831275197449988593889043538321
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e8b3c66a220f2baab4f173d75b1eed096deb1a47
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mymigros.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000187084d7a31000004030047304502205823a88dcb7120973762b7b1fe788fc87dcfa285c12cc8302cf1c22300c7935c022100f5128fd98b48901a2193d487a701e5e0a832e60f041fa059ff970fca2d40ae13007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000187084d7a290000040300473045022100aad23f0719090de653af292787917449c25c26a2be3896e75c4a027ba68d49760220087eda09d922fc246b9752bd58bb11ec6f0b55dabe84624e66a3f60e3baedf71
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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