storybook.mymigros.ch

Issued by R3

About this certificate

This digital certificate with serial number 03:fb:6d:2b:09:65:d6:71:1c:96:9c:29:46:3a:26:01:18:4e was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=storybook.mymigros.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:fb:6d:2b:09:65:d6:71:1c:96:9c:29:46:3a:26:01:18:4e
Serial Number (int): 346892841203351864479442908697927587272782
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: fd:6b:a2:7b:a3:84:35:b9:cc:c0:83:90:b2:8b:44:6f:c5:ea:53:7f
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): e0:af:7d:0c:6e:32:80:2b:fc:4d:ae:3f:87:dc:5d:cf:7e:ff:92:50
Fingerprint (sha256): 40:45:b1:55:90:20:68:62:93:ce:d9:ef:16:83:82:92:f0:1b:08:38:2c:03:fc:63:8c:31:79:17:8b:f7:96:04

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate storybook.mymigros.ch

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for storybook.mymigros.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

storybook.mymigros.ch

Other certificates including the domain name mymigros.ch

(limited to 100 certificates)

Certificate

The complete raw certificate details for storybook.mymigros.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 346892841203351864479442908697927587272782
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-07 10:55:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-05 10:55:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'storybook.mymigros.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 705334879719612061008875659368894462625878874636275373939536633250451382624410548801557149603937432306117187459161201976051620791336670739025087459719409717534708459424057337578132449717307131462600390881355346070262880122590018392531546086649624547021651173482977502924737211528458432627568859034731657502786306571798821551351994296413367707631166021481474838882671004311594007492820941180013665914442298350200733670472617860306556123628311109776623463070262818602917760784715569906514720262957373793560474133351472755258084054349350893985003617163308957266380794938676824845223334259592957035012517612576077050944020387510252438845923392040220706434552756063558051365024230345941241285587997750562292601454611442270188063241380145236124313297433795114489382817127034906949664036205487245702531729899779961097872146378230252495589584181051030632145831488709760436063056059412347887211505361676741844577490475526500638303955863132896438663613671012330286189043974031166757755635219463642895594484887779466033505279993330815364202105433877035184940285218542748218802634484347461399407592091234333835253732243155965654629960529476589877386396059092112148072387599715730035771330242781063514758509784028975576461585368538500375328953329
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fd6ba27ba38435b9ccc08390b28b446fc5ea537f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'storybook.mymigros.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001893034f78700000403004630440220111d84d5a775ff3abf1e11139b9abb8028bc9851753b30e95465b15dc77e6ecb022018b9a266452d7fda28ac2f2de7f503933d4a6e0b8b72a8e1146b5f35406c56f5007500adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a000001893034f7c20000040300463044022008d4311b71e0927f28986c43379a06d52c50883e76bcee980e54da2bb9ed3a0d0220294ffda572d3dfa133305fab6cd9e786f5a45555ce4c3818a66a87c19af13a50
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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