mgb-peeringpage-prod.service.migros.cloud

Issued by R3

About this certificate

This digital certificate with serial number 04:3e:65:68:3f:d4:33:57:0f:cf:a0:39:3f:88:02:c6:36:81 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mgb-peeringpage-prod.service.migros.cloud

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:3e:65:68:3f:d4:33:57:0f:cf:a0:39:3f:88:02:c6:36:81
Serial Number (int): 369681443797190799916253465300633834108545
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 84:7e:46:e1:e0:b8:0d:32:39:b9:90:20:2e:ad:2e:68:ff:f0:3d:fa
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 5c:9c:1e:98:44:2f:18:3d:77:e2:bc:d1:b6:f9:bf:76:51:95:de:68
Fingerprint (sha256): 38:4e:4a:1c:f2:f4:3f:3c:8d:cd:b7:14:18:eb:73:6f:4b:75:94:0f:e0:8d:54:14:97:86:c7:04:a8:f2:f6:f1

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate mgb-peeringpage-prod.service.migros.cloud

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mgb-peeringpage-prod.service.migros.cloud

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mgb-peeringpage-prod.service.migros.cloud
peering.mgb.ch

Other certificates including the domain name migros.cloud

(limited to 100 certificates)
migros.cloud
migros.cloud
migros.cloud
migros.cloud
engagement-redirect.service.migros.cloud
lb-dit-orangergarten.service.migros.cloud
admin.m4music.ch
admin.operations.migros.ch
azq.golfparks.ch
alnatura.ch
parkimgruene.ch
admin.hitzberger.ch
alnatura.ch
testadmin-ucommerce-test.service.migros.cloud
dev-cdn.migros.ch
api.migros.ch
admin.logistikplattform.migros.ch
qa-blfa-api.service.migros.cloud
orangergarten.ch
admin.parkimgruene.ch
admin.golfparks.ch
engagement-redirect.service.migros.cloud
engagement-redirect.service.migros.cloud
betriebsrestaurants-migros.ch
blfa-api.service.migros.cloud
admin.migros-city.ch
giftcardshop-b2b.service.migros.cloud
parkimgruene.ch
buelach-sued.ch
azqadmin.golfparks.ch
qa-delica.service.migros.cloud
onlineberatung-qa.service.migros.cloud
alnatura.ch
neumarktaltstetten.ch
logistiktransport-testadmin.service.migros.cloud
kaimug.ch
admin.kaimug.ch
admin.hitzberger.ch
digital-campaign-factory-dev.migros.ch
orangergarten.ch
mgb-peeringpage-prod.service.migros.cloud
digital-campaign-factory-test.migros.ch
admin.betriebsrestaurants-migros.ch
migros.cloud
kaimug.ch
digital-campaign-factory.migros.ch
mangelverwaltung-test.service.migros.cloud
admin.parkimgruene.ch
alnatura.ch
dev-blfa-api.service.migros.cloud
cdn.migros.ch
m4music.ch
neumarktaltstetten.ch
nature.ch
admin.m4music.ch
miduca.ch
sparx-space.ch
blfa-api.service.migros.cloud
betriebsrestaurants-migros.ch
logistiktransport.ch
betriebsrestaurants-migros.ch
sparx-devadmin.service.migros.cloud
logistiktransport-testadmin.service.migros.cloud
zueriseecenter.ch
m4music.ch
logistiktransport.ch
admin.kaimug.ch
www.club-konzerte.ch
admin.migros-kulturprozent-classics.ch
migros.cloud
zueriseecenter.ch
admin.maker-space.com
betriebsrestaurants-migros.ch
maker-space.com
hitzberger.ch
testadmin.sparx-space.ch
logistiktransport.ch
admin.eatery.ch
m4music.ch
digital-campaign-factory-prev.migros.ch
dev-blfa-api.service.migros.cloud
blfa-api.service.migros.cloud
stage-one.ch
migros-city.ch
neumarktaltstetten.ch
buelach-sued.ch
maker-space.com
www.migros-kulturprozent-classics.ch
orangergarten.ch
admin.logistikplattform.migros.ch
parkimgruene.ch
betriebsrestaurants-migros.ch
admin.buelach-sued.ch
www.golfparks.ch
migros-city.ch
dev-cdn.migros.ch
mitreva.ch
admin.eatery.ch
azq.golfparks.ch
stage-one.ch

Certificate

The complete raw certificate details for mgb-peeringpage-prod.service.migros.cloud in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+rSkNH3IFpRpR/GhHPd
SiSjCePp27BJ4a0oDpI1Qwhwi3dcnrWaO5i46fptQxtSL8n7WC8U4HHCoS/HRMqG
QVo6wnhR7EXs8xy3qJzoDu5IlqrVc6P62PZGFJJqp11uENajxtyLHI4w6K68cZKS
rHOplBimgJcpA51zqDGeBTo00+JKCmmjiSoMMGynoTFLZXba1Jn+YP+MweuPYyEc
4fLNA9++X1FNM7/udKClClXOMCqEVQnG0OA3S4Raaas0cW+EmjonrbzQstgc8+ks
ghRLPMQ3eMBXhkXiMHcotzNSpbZyfYFe+S2zs1u4yHotiic1BKNocsOSIPMTqlKe
EQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 369681443797190799916253465300633834108545
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-15 10:26:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-13 10:26:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mgb-peeringpage-prod.service.migros.cloud'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25237217989732186109267400896144721991921188957711750634196617019603576378551801391991601678397372908001867722715002381251006906881758999167518301939303139242108128569539322004505842161492644017823568622957866629656124756662893483691547156550491543120050677052855129911556550380303692439871553005622504064640778379648501660591652317119815760985950423941305396661053428402461690627905130916953945248387167444638178608241923129567973697894362322875737600257784709522265116634596343048142058945617100461320522573605599372664034408866193177170602650497361722064129718734406369573679184792412746310011518566804713934855697
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							847e46e1e0b80d3239b990202ead2e68fff03dfa
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mgb-peeringpage-prod.service.migros.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peering.mgb.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000189594d909b0000040300483046022100ff1a331b2f32f8a868ebc34793c8501bc828a2955a952c5d267174866752c577022100d24a44ef428cba819acd98d8a2916ac454fe39d61f443a4f6187015d0e8da2990076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000189594d90aa00000403004730450220026c6fed0d4a2159935275dd26e6f891720f3ba75e206f615236ea75f8fe8afb022100ad10db7ea1061ff40df98d7d3da6858b224283d9e8c11b72beabf51a6cbaefb4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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