sunnig.ch

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:b1:59:f6:41:fb:42:6b:be:5c:88:74:f3:b9:46:a1:4f:52 was issued on by Let's Encrypt.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sunnig.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b1:59:f6:41:fb:42:6b:be:5c:88:74:f3:b9:46:a1:4f:52
Serial Number (int): 321686416675202354346280460137768698335058
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a6:10:d2:24:26:5f:a0:50:5d:70:89:d5:48:7a:f2:b9:c1:2c:c0:40
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a0:20:6b:a7:28:3d:a4:bd:82:70:2f:6b:43:62:35:29:17:05:7b:7d
Fingerprint (sha256): 3f:f2:5b:df:c2:3f:f5:37:73:16:88:b1:5b:3b:25:9b:1b:23:28:80:84:4c:0c:a1:60:5f:3b:a6:04:f5:31:a1

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate sunnig.ch

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sunnig.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

chaeller.sunnig.ch
scherer.changeip.net
scherer.swissdatacenters.ch
sunnig.ch
www.sunnig.ch

Other certificates including the domain name sunnig.ch

(limited to 100 certificates)
sunnig.ch
sunnig.ch
sunnig.ch
sunnig.ch
sunnig.ch
sunnig.ch
sunnig.ch
sunnig.ch
sunnig.ch
sunnig.ch
sunnig.ch
sunnig.ch
sunnig.ch
sunnig.ch
sunnig.ch
sunnig.ch
sunnig.ch
sunnig.ch
sunnig.ch
sunnig.ch

Certificate

The complete raw certificate details for sunnig.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4RkAIIBpAJdp9XkhjXRk
KyXXBKs8NUssuuaRtMpFh3rTj6Bzsk6hFBTTjScFn09CEv3ef1ET9nr8oDNw1byh
SDOho+b1wgNmGswawILIfzMtbPvdIqwVK6Rgu3ttBPegCLpnsd4m/nOI4Vwyqmwh
OHvW6MP5xMF17F5NOkOhgHI+9XnGwR6fKSX0iag51M3ecV6F/DH3Xq/pLw/9IpXs
Zi/uVpMm1ZjjGleCZINPW5N5A2n3Ww4jSYwO7LeGfV3mS91CQPYmgOQGmrcvB7qc
8e1hLpAHErVGHERoxjPySL1MbygWvm2mhTHE9BdYVjgkHsbVML8VV2dlRctNfjtT
BwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 321686416675202354346280460137768698335058
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-09 01:33:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-09 01:33:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sunnig.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28415946821387240358142522045431064667895710061059165723400337179993653631834975362948964077167461184014274293612961040137596108516353905776680979246805111260995426299895765099276178599017577693261935467537668283685279414000081674780324579451199508401937250602942990135547960411196891153370301910239815155625289425805649955148692497419104509083867074985456359641833817399388314477201962468225338076219815297215632382155348518397563875328781028079340518367651354734971836328438188462876085453583682658499207510878313773419049509863391701881285226991508455503106266979712920289263019851931158684021435506788508748174087
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a610d224265fa0505d7089d5487af2b9c12cc040
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chaeller.sunnig.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scherer.changeip.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scherer.swissdatacenters.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sunnig.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sunnig.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016790cff2600000040300483046022100f7564fc16de140df3ec0979348407653bba13c2494f67e3b82976576da5409e30221009bc6a91463ad24aae781171e0be44a0f196f4137259811c5a135d59f13435df300760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016790cff06c0000040300473045022100c3646c83272f18b1fb61568916286b5a09b08d8b1356bc11c1c9349db4fcb9dc02200e57ecd4c44f74f2af1ed56dc823c790b2b58e8c9da5f400cbd7302975e15c04
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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