auth.blek.ch
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:72:bc:a3:d9:9e:bf:7b:0a:db:a5:32:bd:96:84:69:ad:9b was issued on by Let's Encrypt.
With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=auth.blek.ch
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:72:bc:a3:d9:9e:bf:7b:0a:db:a5:32:bd:96:84:69:ad:9bSerial Number (int): 300379793245723424191399112362960427265435
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 76:73:5c:82:00:53:be:62:37:26:9f:09:b9:fe:8b:e1:8d:bb:f0:66
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 57:b4:f8:42:78:57:ab:90:c8:6e:0b:e7:e2:c4:6a:9c:3c:c3:7f:d7
Fingerprint (sha256): 3a:ef:49:89:76:29:1c:78:d3:29:37:72:be:21:c5:f1:ec:bd:78:62:f4:58:fe:91:b5:ec:ae:a5:65:02:d8:ff
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate auth.blek.ch
18
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for auth.blek.ch
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
athena.blek.ch
auth.blek.ch
benevoles.balelec.ch
cdn.blek.ch
deuxtranet.blek.ch
inscriptions.blek.ch
intranet.blek.ch
kronos.blek.ch
lab.blek.ch
mail.balelec.ch
mail.blek.ch
rc.blek.ch
secu.blek.ch
services.balelec.ch
stats.blek.ch
survey.balelec.ch
vintage.blek.ch
wiki.blek.ch
auth.blek.ch
benevoles.balelec.ch
cdn.blek.ch
deuxtranet.blek.ch
inscriptions.blek.ch
intranet.blek.ch
kronos.blek.ch
lab.blek.ch
mail.balelec.ch
mail.blek.ch
rc.blek.ch
secu.blek.ch
services.balelec.ch
stats.blek.ch
survey.balelec.ch
vintage.blek.ch
wiki.blek.ch
Other certificates including the domain name blek.ch
(limited to 100 certificates)
archives.blek.ch
benevoles.balelec.ch
webcams.blek.ch
*.blek.ch
*.blek.ch
intranet.blek.ch
mail.blek.ch
public.balelec.ch
stats.blek.ch
gallery.blek.ch
files.blek.ch
mail.blek.ch
mail.blek.ch
auth.blek.ch
webcams.blek.ch
gallery.blek.ch
public.balelec.ch
auth.blek.ch
mail.blek.ch
archives.blek.ch
public.balelec.ch
webcams.blek.ch
public.balelec.ch
webcams.blek.ch
public.balelec.ch
files.blek.ch
*.blek.ch
gallery.blek.ch
stats.blek.ch
gallery.blek.ch
auth.blek.ch
mail.blek.ch
files.blek.ch
auth.blek.ch
mail.blek.ch
gallery.blek.ch
public.balelec.ch
gallery.blek.ch
public.balelec.ch
*.srv.blek.ch
benevoles.balelec.ch
files.blek.ch
archives.blek.ch
auth.blek.ch
archives.blek.ch
stats.blek.ch
intranet.blek.ch
auth.blek.ch
files.blek.ch
files.blek.ch
auth.blek.ch
gallery.blek.ch
intranet.blek.ch
mail.blek.ch
cdn.blek.ch
auth.blek.ch
webcams.blek.ch
archives.blek.ch
intranet.blek.ch
public.balelec.ch
gallery.blek.ch
auth.blek.ch
files.blek.ch
webcams.blek.ch
mail.blek.ch
benevoles.balelec.ch
mail.blek.ch
*.srv.blek.ch
webcams.blek.ch
webcams.blek.ch
intranet.blek.ch
stats.blek.ch
intranet.blek.ch
auth.blek.ch
auth.blek.ch
public.balelec.ch
archives.blek.ch
archives.blek.ch
webcams.blek.ch
files.blek.ch
public.balelec.ch
mail.blek.ch
gallery.blek.ch
gallery.blek.ch
gallery.blek.ch
archives.blek.ch
public.balelec.ch
webcams.blek.ch
webcams.blek.ch
intranet.blek.ch
mail.blek.ch
public.balelec.ch
public.balelec.ch
public.balelec.ch
auth.balelec.ch
archives.blek.ch
*.blek.ch
public.balelec.ch
auth.blek.ch
archives.blek.ch
benevoles.balelec.ch
webcams.blek.ch
*.blek.ch
*.blek.ch
intranet.blek.ch
mail.blek.ch
public.balelec.ch
stats.blek.ch
gallery.blek.ch
files.blek.ch
mail.blek.ch
mail.blek.ch
auth.blek.ch
webcams.blek.ch
gallery.blek.ch
public.balelec.ch
auth.blek.ch
mail.blek.ch
archives.blek.ch
public.balelec.ch
webcams.blek.ch
public.balelec.ch
webcams.blek.ch
public.balelec.ch
files.blek.ch
*.blek.ch
gallery.blek.ch
stats.blek.ch
gallery.blek.ch
auth.blek.ch
mail.blek.ch
files.blek.ch
auth.blek.ch
mail.blek.ch
gallery.blek.ch
public.balelec.ch
gallery.blek.ch
public.balelec.ch
*.srv.blek.ch
benevoles.balelec.ch
files.blek.ch
archives.blek.ch
auth.blek.ch
archives.blek.ch
stats.blek.ch
intranet.blek.ch
auth.blek.ch
files.blek.ch
files.blek.ch
auth.blek.ch
gallery.blek.ch
intranet.blek.ch
mail.blek.ch
cdn.blek.ch
auth.blek.ch
webcams.blek.ch
archives.blek.ch
intranet.blek.ch
public.balelec.ch
gallery.blek.ch
auth.blek.ch
files.blek.ch
webcams.blek.ch
mail.blek.ch
benevoles.balelec.ch
mail.blek.ch
*.srv.blek.ch
webcams.blek.ch
webcams.blek.ch
intranet.blek.ch
stats.blek.ch
intranet.blek.ch
auth.blek.ch
auth.blek.ch
public.balelec.ch
archives.blek.ch
archives.blek.ch
webcams.blek.ch
files.blek.ch
public.balelec.ch
mail.blek.ch
gallery.blek.ch
gallery.blek.ch
gallery.blek.ch
archives.blek.ch
public.balelec.ch
webcams.blek.ch
webcams.blek.ch
intranet.blek.ch
mail.blek.ch
public.balelec.ch
public.balelec.ch
public.balelec.ch
auth.balelec.ch
archives.blek.ch
*.blek.ch
public.balelec.ch
auth.blek.ch
archives.blek.ch
Certificate
The complete raw certificate details for auth.blek.ch in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHcTCCBlmgAwIBAgISA3K8o9mev3sK26UyvZaEaa2bMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTAyMDgxMzE4MzRaFw0x OTA1MDkxMzE4MzRaMBcxFTATBgNVBAMTDGF1dGguYmxlay5jaDCCAiIwDQYJKoZI hvcNAQEBBQADggIPADCCAgoCggIBAKuadPzHBJS4z6ZyDRnjGCocpYVoab5sGy3l nZpDDfgUPr1hvkzVMT3gOZV6so90LU9JoiKajrEHMGRxBt3HU7QwBJEqF4sO5NDR 1kEXo9mKE60Ku0OP1m2o9Do/D6n96SLQHfEu9qmMHRIRlfXV0SSuXgThc3QZCdtp qqaUGUJ8qmMvYuSts8LaA5/D0f0ASp70FB6BwqyVNXJ4ur+Uyxf/14BEIpj/YHRg qQdypWOy2hkd4yCyzpJWZWAK5jTF5WaVP5kDGWyYubYHMhU7MsHFEFQEVsiq/tyq trQQxPjYr6718ieC1abLhdsGa8MbPkQerPzcPFPOUe1Y2fuU6Yv0cG2kfsPaAmYL l0UNAe5LVZ1KC1rO+FShqVMdMuX+gTCK4n4Q9OQk9SNd4gihJnLMGCaZ/fqCU3vl 3FFZ7AIfgA3bM21Wa5EQQXNr2WPnSGe0CHqmcNBg5XweqAPlTySL/82u3NtoDoHN w4ne5Hy/S5z8ydPbvhl49oE/3d6UTg4WCS9a9++wbCRsIYgIhkwroq8H/DUn5qd9 tuW8tEPnGV8MPSE99A7v1Bh0T+Z6EIxw7C3C1Xf9XJXe/wnjF14L0+UWCkjFKq04 UlrJoVF/S4++TWFLlCRkgpEwSh+Vtye0dqatk6flZyMbrjxU1SUrON3sDzj8GqFY 4L8sK/YBAgMBAAGjggOCMIIDfjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYI KwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFHZzXIIA U75iNyafCbn+i+GNu/BmMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyh MG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgz LmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgz LmxldHNlbmNyeXB0Lm9yZy8wggE2BgNVHREEggEtMIIBKYIOYXRoZW5hLmJsZWsu Y2iCDGF1dGguYmxlay5jaIIUYmVuZXZvbGVzLmJhbGVsZWMuY2iCC2Nkbi5ibGVr LmNoghJkZXV4dHJhbmV0LmJsZWsuY2iCFGluc2NyaXB0aW9ucy5ibGVrLmNoghBp bnRyYW5ldC5ibGVrLmNogg5rcm9ub3MuYmxlay5jaIILbGFiLmJsZWsuY2iCD21h aWwuYmFsZWxlYy5jaIIMbWFpbC5ibGVrLmNoggpyYy5ibGVrLmNoggxzZWN1LmJs ZWsuY2iCE3NlcnZpY2VzLmJhbGVsZWMuY2iCDXN0YXRzLmJsZWsuY2iCEXN1cnZl eS5iYWxlbGVjLmNogg92aW50YWdlLmJsZWsuY2iCDHdpa2kuYmxlay5jaDBMBgNV HSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpo dHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQQGCisGAQQB1nkCBAIEgfUEgfIA 8AB2AOJpS64m6OlACeiGG7Y7g9Q+5/50iPukjyiTAZ3d8dv+AAABaM15ckoAAAQD AEcwRQIgL3u83j8tcbYurYSxq+Kkpxne3xYpVYz1X10W/yyWRdkCIQCKBWzXUoVA 03OBvggSrpGMXXkRTnpcxDg4wf7RTQIMDwB2ACk8UZZUyDlluqpQ/FgH1Ldvv1h6 KXLcpMMM9OVFR/R4AAABaM15cpUAAAQDAEcwRQIhAIPgGNundJsUtTjsywlro1up 8Sl9RnAED1L0OvVSO2JeAiAIuYBSvLgSeJuxZ64C95z5k5tZTv8kWDKMHNQ+Z2rf QTANBgkqhkiG9w0BAQsFAAOCAQEACIXt6QQxHEXd0n8rq2D1b93N+R/2zESNK/cT EORfJt6cqZ7+Wzrw2498TT9WPvydmSTNYHkUDAspYvG+tiNzb7Nse28ImaHewDuz nIa9p55Vkw/TZFhB5JCME2xpkgSUqzeXpiAUKSNZMVJ//9pfo5LxrydAXOf2afn4 Oh7ZW1Cop9YyXwls57u8vCZ9iFxzlsnfgCDshZeN+di15eH+pm/NOuzrNwxbFMLj RbVPBaVgxnPVsqseCtm5wqN/TK3+WxZ6wFYeRcVHpZmfW8mdDCjoGYx8JVx1f5b6 woWg+2MqokkGJtu2M3Vw5JpWgChYnRV7ENoFSOinDQ4Pac0QGw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAq5p0/McElLjPpnINGeMY KhylhWhpvmwbLeWdmkMN+BQ+vWG+TNUxPeA5lXqyj3QtT0miIpqOsQcwZHEG3cdT tDAEkSoXiw7k0NHWQRej2YoTrQq7Q4/Wbaj0Oj8Pqf3pItAd8S72qYwdEhGV9dXR JK5eBOFzdBkJ22mqppQZQnyqYy9i5K2zwtoDn8PR/QBKnvQUHoHCrJU1cni6v5TL F//XgEQimP9gdGCpB3KlY7LaGR3jILLOklZlYArmNMXlZpU/mQMZbJi5tgcyFTsy wcUQVARWyKr+3Kq2tBDE+NivrvXyJ4LVpsuF2wZrwxs+RB6s/Nw8U85R7VjZ+5Tp i/RwbaR+w9oCZguXRQ0B7ktVnUoLWs74VKGpUx0y5f6BMIrifhD05CT1I13iCKEm cswYJpn9+oJTe+XcUVnsAh+ADdszbVZrkRBBc2vZY+dIZ7QIeqZw0GDlfB6oA+VP JIv/za7c22gOgc3Did7kfL9LnPzJ09u+GXj2gT/d3pRODhYJL1r377BsJGwhiAiG TCuirwf8NSfmp3225by0Q+cZXww9IT30Du/UGHRP5noQjHDsLcLVd/1cld7/CeMX XgvT5RYKSMUqrThSWsmhUX9Lj75NYUuUJGSCkTBKH5W3J7R2pq2Tp+VnIxuuPFTV JSs43ewPOPwaoVjgvywr9gECAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 300379793245723424191399112362960427265435 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-08 13:18:34 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-09 13:18:34 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'auth.blek.ch' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 700080579032596718877947941388311624915417920587330340951192945601039819446939249508240207595182362587033414718136769877808581296697842268732349843506568383813216670527755545869121445168895360385629198247082654592480103043670422270545162806581186288649277038382476438889163521464903749158014459580723906213373910310311806800563753644218596935338825361083675983666164958043806225975323509428292040886089652344473900555051163742752191688645305370383996613160073432440211852851772122522362277798134788026728854547360749191210782604378116845140143084439515865477502315280200068483095445082595969895544768090799732664206562236977859249858614221003134220608642809014827571093675375432735133668839291712242161233755768683771139263467584929681878998196538080374342356130533598944655492705683916892217532245901561679509530473466411378859651468963824473986046353955068863852043535648236228131276409329003682285088820033807940262078252481337209557183075228597989791714472490260726059882773188367292875109536717503443756106695533711644082079633626131970418357885243692855446736031284905738874027462872145405638832994966703521311537621434654294895069161522256890092047420246404298170320426545275303072252497774495193968691878785502130133910943233 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 76735c820053be6237269f09b9fe8be18dbbf066 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (301 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'athena.blek.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.blek.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benevoles.balelec.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.blek.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deuxtranet.blek.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inscriptions.blek.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.blek.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kronos.blek.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lab.blek.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.balelec.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.blek.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rc.blek.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secu.blek.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services.balelec.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stats.blek.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'survey.balelec.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vintage.blek.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiki.blek.ch' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000168cd79724a000004030047304502202f7bbcde3f2d71b62ead84b1abe2a4a719dedf1629558cf55f5d16ff2c9645d90221008a056cd7528540d37381be0812ae918c5d79114e7a5cc43838c1fed14d020c0f007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000168cd797295000004030047304502210083e018dba7749b14b538eccb096ba35ba9f1297d4670040f52f43af5523b625e022008b98052bcb812789bb167ae02f79cf9939b594eff2458328c1cd43e676adf41 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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