www.honegger.ch

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:fa:ec:df:58:6a:ad:ba:8e:da:ac:94:f4:8a:20:51:ce:6c was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.honegger.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:fa:ec:df:58:6a:ad:ba:8e:da:ac:94:f4:8a:20:51:ce:6c
Serial Number (int): 346722307008024046007652235851540735315564
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: db:55:05:8b:28:b1:12:c0:b1:ba:55:35:1a:63:ad:50:a4:b9:3a:5b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 8f:96:01:9a:f8:95:6e:32:da:e2:d9:ea:21:12:b1:86:3e:cb:1b:4f
Fingerprint (sha256): 34:52:3b:3f:b7:d4:79:61:40:af:0f:6b:be:bf:f1:d1:b5:99:8b:84:be:86:57:85:bb:88:d4:d6:3b:76:61:a1

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.honegger.ch

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.honegger.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.honegger.ch

Other certificates including the domain name honegger.ch

(limited to 100 certificates)
honegger.ch
itstatus.honegger.ch
www.honegger.ch
owa.honegger.ch
honegger.ch
itstatus.honegger.ch
honegger.ch
honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
www.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
www.honegger.ch
www.honegger.ch
honegger.ch
honegger.ch
www.honegger.ch
www.honegger.ch
www.honegger.ch
www.honegger.ch
www.honegger.ch
itstatus.honegger.ch
citrix.honegger.ch
www.honegger.ch
*.honegger.ch
itstatus.honegger.ch
honegger.ch
owa.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
www.honegger.ch
honegger.ch
itstatus.honegger.ch
honegger.ch
honegger.ch
itstatus.honegger.ch
*.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
honegger.ch
honegger.ch
honegger.ch
www.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
www.honegger.ch
itstatus.honegger.ch
www.honegger.ch
itstatus.honegger.ch
honegger.ch
www.honegger.ch
honegger.ch
www.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
www.honegger.ch
honegger.ch
itstatus.honegger.ch
honegger.ch
owa.honegger.ch
itstatus.honegger.ch
www.honegger.ch
itstatus.honegger.ch
honegger.ch
honegger.ch
honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
honegger.ch
www.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
*.honegger.ch
itstatus.honegger.ch
go.honegger.ch
honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
www.honegger.ch

Certificate

The complete raw certificate details for www.honegger.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 346722307008024046007652235851540735315564
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-17 05:09:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-17 05:09:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.honegger.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 793105562114917804387131914852530743944254598139538881742078582863719843338196758017396163146952150273107692003185360196899413498623596199400564254435967174106704547361105847050202551577353212638096228348775444009520878809012836264260915248267818075666995296145379895149585439180209728350354717867894411114629469197602527577501386455518050019348999804743151318266889224716720630468895125557697523435955217909261792595348454282844449248840015335549589562607935851698152520631782413242040829496364230804237807125888549301519170190098547183564280364284537887882530958594916283687397517955326479431056389805625424070916319315734691726067542958077758307695855568266533008767204590910980395815271883238832525965306113001649398754881889688269067501670512197076210174814805167864982832897132445483840702018911938384798006383349437700384034812817404598802863270816679245579029293181451864065440328710875638264310335183480681159911242963116052035232361708958451657486730447737446403492166532892032553766919100351820375171371952426127656484196876609112745971183026036875318150461023914298702650228733372933561375764099218099598895629355350583449120534887857237534089541477750900296128720307275289899537166303050449523249458262285345053881727267
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							db55058b28b112c0b1ba55351a63ad50a4b93a5b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.honegger.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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