4factors.ch

Issued by R3

About this certificate

This digital certificate with serial number 03:f4:0d:1b:0e:01:9e:37:b5:89:cc:67:cb:06:70:57:62:47 was issued on by Let's Encrypt.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=4factors.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f4:0d:1b:0e:01:9e:37:b5:89:cc:67:cb:06:70:57:62:47
Serial Number (int): 344383175764032037965028590436290995380807
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 79:d3:cf:97:3f:34:10:e8:0a:4d:bf:10:e2:52:05:cc:90:00:2b:1b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 5e:d5:65:fb:0f:ec:f0:c7:29:01:bf:bc:d6:b2:70:f9:c5:8f:d4:a0
Fingerprint (sha256): 3a:d0:e0:8b:cf:c5:f8:e5:ee:f6:59:c8:a9:99:29:83:54:14:c9:25:22:68:0f:52:2a:84:af:d1:7d:13:e4:12

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate 4factors.ch

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for 4factors.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

4factors.ch
mobipro.ch
tasktimer.ch
www.4factors.ch
www.mobipro.ch
www.tasktimer.ch

Other certificates including the domain name 4factors.ch

(limited to 100 certificates)
4factors.ch
4factors.ch
www.4factors.ch
www.4factors.ch
4factors.ch
www.4factors.ch
4factors.ch
www.4factors.ch
4factors.ch
4factors.ch
4factors.ch
4factors.ch
4factors.ch
4factors.ch
4factors.ch
4factors.ch
4factors.ch
4factors.ch
www.4factors.ch
4factors.ch
4factors.ch
4factors.ch
www.4factors.ch
4factors.ch
4factors.ch
www.4factors.ch
4factors.ch
4factors.ch
4factors.ch
www.4factors.ch
www.4factors.ch
4factors.ch
4factors.ch
www.4factors.ch
www.4factors.ch
www.4factors.ch
4factors.ch
4factors.ch
4factors.ch
4factors.ch
www.4factors.ch
4factors.ch
4factors.ch
www.4factors.ch

Certificate

The complete raw certificate details for 4factors.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEApzVON0dw26ayexUrPVHi
XA3UhkyDIGAPYPnmON8fMuDFBmbSzxcuts9GbnLSYWWnH/zWqp2ykgdXxWfTSk3M
98NzM9Yc5xUkAs6unbz4q0/6kOYmuHGDpMksb4UFY3pn+JlK2CZRS1XU9DEVRUC1
sBxrlvBV0zYHqaaDD3qv1Dbjv2GkbgZ01FG+m3YaFdLtvpsIjoKyY1gHExsnJ1n3
HCrIN8X2bAfqRqJijjVlOqh090qegudJk9mJCmIvQLOFhkURuWW9LCXIlstgH2I4
DRx0QIlHT5wgz8an21uxgaZ0Bz/+9FJnVUZBY9tp5m1XHVRdG8hoRgs2VQV6Yl4e
7jLP+iNkrRwSNLue0q1NSMq9cxbc3bK/WvCdAY6a5V1fsoD1kRrnNziyvgZXsLOV
pJJLA/dNpQPH7+xLpSgXwDvD2RL+4RiM9YlqQlwIzgNhoX1h81ovok7BaGEbIG19
mGeIbpl3fk83rNtqDtWw0BxftCSDDuSF3TkxSheUPJ+PdmbkF2jfkcGICfp2Cql2
nzsDx+lQ0HykU+HrnOfoWVxh8G28PqqOS+bEDhy8MnxKCsvuozbYk0PdxlSWRO/W
xgjCbnGSrgO1XhIBVt+Vfe42Y0+vcn/isORUCufiosQgjG/+k3gxoAga3btg7Si/
PSuD3yztbQGFoqbHvkIjrCECAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 344383175764032037965028590436290995380807
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-27 02:34:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-25 02:34:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '4factors.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 682150042145699347950525445568030271691054725137821085236571043144698971703734421844188801789977312147230665478000863141734408607574817619391606090330869354238996966333068416670485582784110539476829351163832510768509199984406658474368884027336441085741491982120867119394861192302008543287254007576656407414229546241298244299091484829571675986354282753556763062078237614968331178608394371200303657657320637826412205967616634994859619095778548262084742488599896321915631729566882120821813888888454262667719964454978570562794784906703162860330472729541540087293330826224126127879463824647528709559328132890974331022941800422775052702445161044218341401840093685637217339994176393234524576864338624250532531164748378015383182634822534985228333106990414657366683684222929048024991252926599422040090350740874589110577830180847301854038733472339454322739702228871224623575686571771112590116439511628701038253993265745403984709493667235903563595926187546808191885396314810809000913068807824982104424397977857457949288807159182826110651702786029104025291783411439654869089480610851509962072577277244853828321392732087172486405068432881346471256373312635575003400221479434285748983183426521245157706724677457261374278154724466115702208403319841
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							79d3cf973f3410e80a4dbf10e25205cc90002b1b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '4factors.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobipro.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tasktimer.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.4factors.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mobipro.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tasktimer.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000188faeae7a3000004030048304602210087b1026b62bb1a1dca9c8a3e3b216c9e36a2f46f772729bc7f2e701270f2db58022100d55a1fc4ce437b39ea73e27d94cac1b3f0bf4cd972416c1f976036d866f8cce9007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000188faeae7c20000040300473045022100e2ad18d74d54482fc4b255ba0dd3323d598ea088ead058b3f5053f136d166db202206ceac1ceecaefdd3a4d700ef44b7a8ff4fc67260116b96665e2e13ff20a886a8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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