kellerfahnen.ch

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ae:46:88:ce:6c:96:1d:95:cd:67:37:7c:5f:13:fa:6d:18 was issued on by Let's Encrypt.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=kellerfahnen.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ae:46:88:ce:6c:96:1d:95:cd:67:37:7c:5f:13:fa:6d:18
Serial Number (int): 320639745938381215851687879252982367939864
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 0e:8c:6d:2c:a9:8b:19:0a:ce:c1:ce:28:b9:d0:98:5b:de:67:ed:73
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ba:a2:f8:33:39:31:e9:3a:8a:21:a4:fa:26:12:35:07:18:17:8a:04
Fingerprint (sha256): 31:31:bd:6d:f5:9b:4b:60:b1:5e:06:33:6c:ff:36:53:ab:bf:e5:5c:ea:04:8d:ba:e4:25:b8:94:83:e8:80:af

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate kellerfahnen.ch

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kellerfahnen.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

kellerdrapeaux.ch
kellerfahnen.c-929.maxcluster.net
kellerfahnen.ch
www.kellerdrapeaux.ch
www.kellerfahnen.ch

Other certificates including the domain name kellerfahnen.ch

(limited to 100 certificates)
kellerfahnen.ch
kellerfahnen.ch
fw.kellerfahnen.ch
test.kellerfahnen.ch
webmail.kellerfahnen.ch
test.kellerfahnen.ch
www.kellerfahnen.ch
kellerfahnen.ch
www.kellerfahnen.ch
kellerfahnen.ch
fw.kellerfahnen.ch
test.hach.ch
kellerfahnen.ch
fw.kellerfahnen.ch
test.kellerfahnen.ch
kellerfahnen.ch
kellerfahnen.ch
fw.kellerfahnen.ch
test.kellerfahnen.ch
www.kellerfahnen.ch
kellerfahnen.ch
kellerfahnen.ch
kellerfahnen.ch
test.kellerfahnen.ch
kellerfahnen.ch
kellerfahnen.ch
kellerfahnen.ch
www.kellerfahnen.ch
www.kellerfahnen.ch
fw.kellerfahnen.ch
test.kellerfahnen.ch
www.kellerfahnen.ch
www.kellerfahnen.ch
www.kellerfahnen.ch
kellerfahnen.ch
kellerfahnen.ch
kellerfahnen.ch
test.kellerfahnen.ch
kellerfahnen.ch
fw.kellerfahnen.ch
kellerfahnen.ch

Certificate

The complete raw certificate details for kellerfahnen.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsASRHi3DzkOOZebyzJlf
eNaPI2YxvgkhFPa5rBSoJFqGJkS21Sol5uaAdqDmDzs3DtlTV6tvMZMXRcGui+aL
PN9r8yPOwbVMb2+CwkUmguuckuyxUmuioUhJnHIa1JEXutUW9q7P/hF4nXWY1JJO
wSdl09dMbFewI2v9aRHrRRa+AVvnMQOAt9hZQ0JFAULTqqadDWh4WhGCMp2wyKxi
VbuTFF5uluHGitpDMeYinqFhmqHyh7taoQ5aQIFhQRrACRjUWupn7bzJCJ79UJXm
5w8MSEkZw/hWgc7AhHvcMjeyuo4V8f20br41nhLV2mycfVV5P7gIJNanu3/bxmXg
uwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 320639745938381215851687879252982367939864
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-11 08:26:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-09 08:26:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kellerfahnen.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22220193679949946810240263411848490581226949373151200565985825148150196653814795612334196846087157613724848009848420398263069430661160219137824181436393435915772854985494366646324008124423192331703748526265996647423749866099007870762425705355343335728246009144262316130938272356278666892602665814860783619200733181752327575088391788928674345308342805435793630304145618412005887153762197007186070619834770866096934871718141124963363522756096947574841559606663621922422961942178167134957929926564112595667517168738014328847849482361683670711969911466475502334131402878134283903970333723046200528100837312095652747272379
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0e8c6d2ca98b190acec1ce28b9d0985bde67ed73
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (117 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kellerdrapeaux.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kellerfahnen.c-929.maxcluster.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kellerfahnen.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kellerdrapeaux.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kellerfahnen.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016b45dc1da40000040300473045022100e1915bf54af75d98661de1ebfdd4b26cb7e64d082d1f30106d1f4dc82078eed202206893c74f9130fc1d8b54445502d91cbacd8d74c3f56190ff444d5a9d8d214938007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016b45dc1f6d000004030046304402202323b0c721026bf9022da08256b3524a5638cbdc55e4100cd50660ce89b7261d02203f1455ea502486b04a2b9fee674ff47bcd4382167df2ff8dce46fc3c3ef81863
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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