www.diygeneva.ch
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:ac:fb:fb:2c:67:fd:b6:55:f1:aa:e8:b6:7b:58:4b:22:93 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.diygeneva.ch
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:ac:fb:fb:2c:67:fd:b6:55:f1:aa:e8:b6:7b:58:4b:22:93Serial Number (int): 320200365299800705218891574962788137378451
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 0b:38:cc:0e:55:ab:9c:7c:de:9f:70:78:1b:a5:30:49:de:0a:97:56
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 0c:62:04:5b:12:86:ed:34:d1:8e:4b:d6:47:92:21:ee:82:5d:dd:5a
Fingerprint (sha256): 39:b3:50:e4:3c:ac:9a:f8:7a:97:1f:9f:a9:6d:54:5b:cd:e7:1e:e9:05:9d:c5:c8:8e:3b:e7:54:d7:94:f5:e0
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.diygeneva.ch
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.diygeneva.ch
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.diygeneva.ch
Other certificates including the domain name diygeneva.ch
(limited to 100 certificates)
www.diygeneva.ch
diygeneva.ch
www.diygeneva.ch
www.diygeneva.ch
www.diygeneva.ch
www.diygeneva.ch
diygeneva.ch
www.diygeneva.ch
www.diygeneva.ch
www.diygeneva.ch
www.diygeneva.ch
www.diygeneva.ch
www.diygeneva.ch
www.diygeneva.ch
www.diygeneva.ch
www.diygeneva.ch
www.diygeneva.ch
www.diygeneva.ch
www.diygeneva.ch
www.diygeneva.ch
www.diygeneva.ch
www.diygeneva.ch
diygeneva.ch
www.diygeneva.ch
www.diygeneva.ch
www.diygeneva.ch
www.diygeneva.ch
diygeneva.ch
www.diygeneva.ch
www.diygeneva.ch
www.diygeneva.ch
www.diygeneva.ch
www.diygeneva.ch
www.diygeneva.ch
www.diygeneva.ch
www.diygeneva.ch
www.diygeneva.ch
www.diygeneva.ch
www.diygeneva.ch
www.diygeneva.ch
www.diygeneva.ch
www.diygeneva.ch
www.diygeneva.ch
Certificate
The complete raw certificate details for www.diygeneva.ch in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgISA6z7+yxn/bZV8arotntYSyKTMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEwMDgwNTA4MTVaFw0y MDAxMDYwNTA4MTVaMBsxGTAXBgNVBAMTEHd3dy5kaXlnZW5ldmEuY2gwggEiMA0G CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD17DQ8FU1MwfiW6LL2T9bH2UTuJwP qhPhwTVFdlZ2cDRrBsawLGLeY/Bc0TmSYN027XydfuBBjD0+YqjCse5FDqa2b2NQ W6kHW6nXsw/VSXuZr4V6wZEsRCoEOYA8PpaYI10zoI5rWGubxxaj1jO+3r3EWRDD qHVgSTzywqlpH90FGvo0ohhkpiq/55UmD6Lvgnu/rjDSPCZv3NaEPz7HqK5y1tKJ v4MBY0iELo8ylDtfAhMcWSFcGODowErWukIhQ6RAtAuib2LV97kCrXH1TVugtCbQ FEpogl5qVxLtkT3CCQkZMl13DIBp0DR/+tYBIa1aSrCapm8Ek7xbnvXVAgMBAAGj ggJmMIICYjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsG AQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFAs4zA5Vq5x83p9weBulMEne CpdWMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEB BGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0 Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0 Lm9yZy8wGwYDVR0RBBQwEoIQd3d3LmRpeWdlbmV2YS5jaDBMBgNVHSAERTBDMAgG BmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3Bz LmxldHNlbmNyeXB0Lm9yZzCCAQUGCisGAQQB1nkCBAIEgfYEgfMA8QB3ACk8UZZU yDlluqpQ/FgH1Ldvv1h6KXLcpMMM9OVFR/R4AAABban7hNUAAAQDAEgwRgIhANEj vD0OSokQ1FCOXkKLsJTNkQB1NYSBwPckK5A8JkW5AiEAhL2O+UAPcWZLqFRWGytz iRjIpAopfzV42amyn/htxvQAdgBep3P531bA57U2SH3QSeAyepGaDIShEhKEGHWW gXFFWAAAAW2p+4a8AAAEAwBHMEUCIQDoDKNTRLsf9LDDVYQb5mqeWCGOyNVQb8Mf 5Y629U3tlgIgQ2Q53qYIE3AxUT2Zh12y2vIcaE73DwFbNIn1CcjvzL8wDQYJKoZI hvcNAQELBQADggEBABn3LGvqvDJev+FOQIBIoiCOA3BlMwJrcbMBQRtINDy//iEU 4kbQkjj6Pvr+gXkWBCdNhPHyYSCGGSmYLlKLU+raMK9DBeIHC5M6j2AfIoLvMlur q20X5L678gMdZmf/8LZXSreuuIDLVhGMiTBoOanHZdCQnUW2FmxxjLnxm3YfQ9ew O1nq7l5/65Hff4xzSt57+Dr21gylGUDrhkdNeEpigEsemYNYZMT67HdXL0nlFdr+ l+4t5A0TtpeppYvhEIEiDCihLrmzN4S+wTfqUT4BOynncKxJZQXSAGGLpay318YC Eu4EuGM2BM7ugekemXNxOqbU2C9u7mPlrkgJE2w= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9ew0PBVNTMH4luiy9k/ Wx9lE7icD6oT4cE1RXZWdnA0awbGsCxi3mPwXNE5kmDdNu18nX7gQYw9PmKowrHu RQ6mtm9jUFupB1up17MP1Ul7ma+FesGRLEQqBDmAPD6WmCNdM6COa1hrm8cWo9Yz vt69xFkQw6h1YEk88sKpaR/dBRr6NKIYZKYqv+eVJg+i74J7v64w0jwmb9zWhD8+ x6iuctbSib+DAWNIhC6PMpQ7XwITHFkhXBjg6MBK1rpCIUOkQLQLom9i1fe5Aq1x 9U1boLQm0BRKaIJealcS7ZE9wgkJGTJddwyAadA0f/rWASGtWkqwmqZvBJO8W571 1QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 320200365299800705218891574962788137378451 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-08 05:08:15 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-06 05:08:15 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.diygeneva.ch' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24722830510840054002336411776255059335447129767818178814477756033671562931594184554533939153400443707871065662631912215151322949785934087534668690926852062914230250018538348337161731334288263063073186882815564981988817883570549580036892938082190786713259411980089093485336521567587908093411840820501116208272714958060549928288427931611774828527554918797659383622844114007189538644054295266892704361227309403804564828781119280412268298814618809142235986794459757738984787519508650542284590477426868094609082082876281401871544261352881692954873533700709307973778869998710548618205631578874242705253705422515041956984277 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 0b38cc0e55ab9c7cde9f70781ba53049de0a9756 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diygeneva.ch' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016da9fb84d50000040300483046022100d123bc3d0e4a8910d4508e5e428bb094cd910075358481c0f7242b903c2645b902210084bd8ef9400f71664ba854561b2b738918c8a40a297f3578d9a9b29ff86dc6f40076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016da9fb86bc0000040300473045022100e80ca35344bb1ff4b0c355841be66a9e58218ec8d5506fc31fe58eb6f54ded960220436439dea608137031513d99875db2daf21c684ef70f015b3489f509c8efccbf . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0019f72c6beabc325ebfe14e408048a2208e03706533026b71b301411b48343cbffe2114e246d09238fa3efafe81791604274d84f1f26120861929982e528b53eada30af4305e2070b933a8f601f2282ef325babab6d17e4bebbf2031d6667fff0b6574ab7aeb880cb56118c89306839a9c765d0909d45b6166c718cb9f19b761f43d7b03b59eaee5e7feb91df7f8c734ade7bf83af6d60ca51940eb86474d784a62804b1e99835864c4faec77572f49e515dafe97ee2de40d13b697a9a58be11081220c28a12eb9b33784bec137ea513e013b29e770ac496505d200618ba5acb7d7c60212ee04b8633604ceee81e91e9973713aa6d4d82f6eee63e5ae4809136c