wasser-waerme.ch
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:a0:e4:94:76:40:72:04:d9:13:b0:b0:d3:f8:25:3d:10:94 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=wasser-waerme.ch
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:a0:e4:94:76:40:72:04:d9:13:b0:b0:d3:f8:25:3d:10:94Serial Number (int): 316085871344035140851272412477318131159188
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 0f:74:e2:8d:c7:2d:7e:39:93:d6:1e:0a:8f:9f:12:af:07:a0:db:95
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): de:1b:6d:94:35:4b:b9:46:e6:97:c4:13:b0:1e:e9:70:82:cb:02:ac
Fingerprint (sha256): 32:28:00:a0:a5:de:9e:99:9d:b0:a8:33:5e:9d:c9:06:af:af:05:bb:2e:fa:73:cd:5e:71:9b:31:ae:36:d6:22
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate wasser-waerme.ch
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for wasser-waerme.ch
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
wasser-waerme.ch
www.wasser-waerme.ch
www.wasser-waerme.ch
Other certificates including the domain name wasser-waerme.ch
(limited to 100 certificates)
wasser-waerme.ch
wasser-waerme.ch
wasser-waerme.ch
wasser-waerme.ch
wasser-waerme.ch
wasser-waerme.ch
wasser-waerme.ch
wasser-waerme.ch
wasser-waerme.ch
wasser-waerme.ch
wasser-waerme.ch
wasser-waerme.ch
wasser-waerme.ch
wasser-waerme.ch
wasser-waerme.ch
wasser-waerme.ch
wasser-waerme.ch
wasser-waerme.ch
wasser-waerme.ch
www.wasser-waerme.ch
wasser-waerme.ch
wasser-waerme.ch
wasser-waerme.ch
wasser-waerme.ch
wasser-waerme.ch
wasser-waerme.ch
wasser-waerme.ch
wasser-waerme.ch
wasser-waerme.ch
wasser-waerme.ch
wasser-waerme.ch
wasser-waerme.ch
wasser-waerme.ch
wasser-waerme.ch
wasser-waerme.ch
wasser-waerme.ch
wasser-waerme.ch
wasser-waerme.ch
wasser-waerme.ch
wasser-waerme.ch
wasser-waerme.ch
wasser-waerme.ch
wasser-waerme.ch
wasser-waerme.ch
www.wasser-waerme.ch
wasser-waerme.ch
wasser-waerme.ch
wasser-waerme.ch
wasser-waerme.ch
wasser-waerme.ch
wasser-waerme.ch
Certificate
The complete raw certificate details for wasser-waerme.ch in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGGTCCBQGgAwIBAgISA6DklHZAcgTZE7Cw0/glPRCUMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xNzEyMjcwMDM3MDdaFw0x ODAzMjcwMDM3MDdaMBsxGTAXBgNVBAMTEHdhc3Nlci13YWVybWUuY2gwggIiMA0G CSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCvMoQlhPOH0ISSmYfg1RqpUQFbjeoS wDUEYR+gCmp3E95kx5JEdwuplBs3DxuIOfL492/P8gkQ9nMKXZJ4Hj1rdnajhlih 7/JX1Pcg41extyl2XQ9vCm1iPhcDgMtZNWDeNvgC5HL+R1qx0QEPwtLV6zRNwkg+ fOjwO2POJr9KFZO8GKB5UwVBTIfjilc6HA/VsHGxtYy28eTZaW2UZxiUBiyO28of 0yDJeeP7hMHPaPJ8nIamuetr0uMIa9NiL9Apnm6DwD9Jae92PVMZlBuY6kWB1vcy bK8CJAGAILYeMfhQ8m6lD5po4oFu26JjVPxUANeeackNs+JC9GeTMwvIK8bwZXOR Nh3R2VF0AQrfRgGG9+uosf714rsYk4kzO3BRM/INy91NJG4QQ9qkyYDlB0rYbM9w HAT9QC640w7Lfu5e/wMEM3581Jwz4dH4ViHzN9g7oJVA0hJsCRtQ4oMhhx9Uu6KR yB9Y1XKi494dywdET1pJ6kVmReOplg/rjj4KNBe9/k+r1+s/BiZRN/bqBOSHVbNx kHuTkXnYjNPd6idnYQL7QwpCrVc8sZ9JBbKAU2UttZpReQSnRWBzepahZgR/vzYe 85loVceq+MC7/kwN0t9gd5EZq8C+Mttlgc4Jh1ydpoe6bnKLMHBB+EMnd4lY5nr9 8A1snpVzEEQ6ywIDAQABo4ICJjCCAiIwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQW MBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQP dOKNxy1+OZPWHgqPnxKvB6DblTAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv 86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmlu dC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0Lmlu dC14My5sZXRzZW5jcnlwdC5vcmcvMDEGA1UdEQQqMCiCEHdhc3Nlci13YWVybWUu Y2iCFHd3dy53YXNzZXItd2Flcm1lLmNoMIH+BgNVHSAEgfYwgfMwCAYGZ4EMAQIB MIHmBgsrBgEEAYLfEwEBATCB1jAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRz ZW5jcnlwdC5vcmcwgasGCCsGAQUFBwICMIGeDIGbVGhpcyBDZXJ0aWZpY2F0ZSBt YXkgb25seSBiZSByZWxpZWQgdXBvbiBieSBSZWx5aW5nIFBhcnRpZXMgYW5kIG9u bHkgaW4gYWNjb3JkYW5jZSB3aXRoIHRoZSBDZXJ0aWZpY2F0ZSBQb2xpY3kgZm91 bmQgYXQgaHR0cHM6Ly9sZXRzZW5jcnlwdC5vcmcvcmVwb3NpdG9yeS8wDQYJKoZI hvcNAQELBQADggEBAGitwdAf35PhVK6b5wABgIcEf3qH1hVj91gF4/cxBpQv01Is qiIZ4jq2ZcMAoGPoZv7geSYbVoCVEJhiH3paS+SoVBjfW8QX+vi1t5OjWp8G5WkH 350W7M3m38ii7beCD1DKIUf3eNBQbVtraac4ryYx3/CGNP6ZKwVatcVT9+Jbfc+7 gafKGc0qpQv9R+uSRN2jqPbGpfS847I9CRMGH5nE64eiOkW3hqnlyQY545GUkmay AMdHAleNtsHMkrrCi1tILIWTCXmacoOdGmr+4fPi88E9GLISM3ZmPkntqxNx3DDx i5ru+E1E1YMCVBKGYS/QYAH0KN5pCocGwx6M9B8= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEArzKEJYTzh9CEkpmH4NUa qVEBW43qEsA1BGEfoApqdxPeZMeSRHcLqZQbNw8biDny+Pdvz/IJEPZzCl2SeB49 a3Z2o4ZYoe/yV9T3IONXsbcpdl0PbwptYj4XA4DLWTVg3jb4AuRy/kdasdEBD8LS 1es0TcJIPnzo8Dtjzia/ShWTvBigeVMFQUyH44pXOhwP1bBxsbWMtvHk2WltlGcY lAYsjtvKH9MgyXnj+4TBz2jyfJyGprnra9LjCGvTYi/QKZ5ug8A/SWnvdj1TGZQb mOpFgdb3MmyvAiQBgCC2HjH4UPJupQ+aaOKBbtuiY1T8VADXnmnJDbPiQvRnkzML yCvG8GVzkTYd0dlRdAEK30YBhvfrqLH+9eK7GJOJMztwUTPyDcvdTSRuEEPapMmA 5QdK2GzPcBwE/UAuuNMOy37uXv8DBDN+fNScM+HR+FYh8zfYO6CVQNISbAkbUOKD IYcfVLuikcgfWNVyouPeHcsHRE9aSepFZkXjqZYP644+CjQXvf5Pq9frPwYmUTf2 6gTkh1WzcZB7k5F52IzT3eonZ2EC+0MKQq1XPLGfSQWygFNlLbWaUXkEp0Vgc3qW oWYEf782HvOZaFXHqvjAu/5MDdLfYHeRGavAvjLbZYHOCYdcnaaHum5yizBwQfhD J3eJWOZ6/fANbJ6VcxBEOssCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 316085871344035140851272412477318131159188 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-12-27 00:37:07 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-27 00:37:07 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'wasser-waerme.ch' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 714742743565509034740439002296719740911974029044213025652396966163771731065064824415592310918187991642286475809734500521870777251033330470146830150658798333181783355856125467695826907660523054892551053539764611555514285665185103700219107049257559191055916077325639115861130068853700441658697463159502445146321496827046485802496520409296716670312563122892043254324447392624971350387794148872350809145544739650430837961712135008446094027969937899225536100336602546991536832577329860170647301786484582357090362473522224002721424562406626420772261910066420460293451968205512827801817256158971789169918373456420258310680550109843756221755794725398946605942496517244242979204967974780496863989289867457831276594505538807999999521215320316571151310531264624913912402397789968161566800468479286810149385210535159104993149330166737670106011204512504366239221216235855092574845260573776108279954719080534982524768231019579523632346623363419376731103680170314808878220985239601861866989692602963097130319484381820537486579411995984539320968217769897549140530387584003630592080873710223091430603834851633226230234208463808708102293915264765423994066702556003721339388175577329217254722776179640355377908250614658826262750236681098465354770037451 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 0f74e28dc72d7e3993d61e0a8f9f12af07a0db95 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wasser-waerme.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wasser-waerme.ch' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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