www.swissatelier.com

Issued by R3

About this certificate

This digital certificate with serial number 03:29:99:cf:42:fc:04:93:f2:2d:8b:ab:cc:46:4c:ff:c7:86 was issued on by Let's Encrypt.

With 30 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.swissatelier.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:29:99:cf:42:fc:04:93:f2:2d:8b:ab:cc:46:4c:ff:c7:86
Serial Number (int): 275492882886449973370135932190284438292358
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ac:0a:f0:5e:25:af:f2:72:1c:6b:b6:51:c8:5f:e8:ac:ff:86:b1:af
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): f2:42:29:3b:3b:35:8e:57:e1:be:27:f2:66:dd:8b:d2:13:74:71:3b
Fingerprint (sha256): 44:9b:8b:88:9c:db:05:c6:b5:d6:76:30:b9:cd:6c:91:17:60:be:cc:97:a4:0d:a8:c5:70:45:54:1a:98:2d:5f

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.swissatelier.com

30

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.swissatelier.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aandgapiaries.com
feedminer.com
gameaero.com
igamingvacancies.com
jointpaindurham.com
konaluxuryhomes.com
mediaciones.com
nonameman.com
o10o.com
oregonstemcellclinics.com
radium-trader.com
swissatelier.com
tangytor.com
westerntherapeutics.com
www.aandgapiaries.com
www.feedminer.com
www.gameaero.com
www.igamingvacancies.com
www.jointpaindurham.com
www.konaluxuryhomes.com
www.mediaciones.com
www.nonameman.com
www.o10o.com
www.oregonstemcellclinics.com
www.radium-trader.com
www.swissatelier.com
www.tangytor.com
www.westerntherapeutics.com
www.xn--gebfmyl.com
xn--gebfmyl.com

Other certificates including the domain name swissatelier.com

(limited to 100 certificates)
dirttrader.com
selfhomerepair.com
www.merryjuanachristmas.com
www.flunkytv.com
genzanodiroma.org
ballisticcases.com
www.swissatelier.com
staveislandoysters.com
www.porkmaster.com
www.durhamsportsdoctor.com
www.gainesvilleprp.com
hempguitar.com
streammediacorp.com
www.prppittsburgh.com
www.merryjuanachristmas.com
www.briarwooddairygoats.com
comingsoonmemphis.com
www.water-table.com
myjetpacks.com
www.kidsorganicgardening.com
refurbishedvacuum.com
lawfirmlongbeach.com
aflfootballtip.com
roguecomposites.com
www.mobilestemcellclinic.com
www.simplycbdsupplies.com
swissatelier.com

Certificate

The complete raw certificate details for www.swissatelier.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ExSDTggZLUL3ZX01Cn3
AuaAGGsKnBnDKN3pJV66/TxgN3h7T7v5DoY5IujNrPkYYCtIEtu62uPL+IY3YBu7
EsCwWWubZpOfkmi8VVf/6jA2XvhLi08D8whDIbxiEi6Y1hlk9iVKMiv+ZxcuKKW2
ef1VQU0q1m+w3e/uQnrflTkR3gw25FyvJmD+KBMx10s+E5HFM+FRe5n2o6dPpFBl
BZsgKm7+XmiHiToO2Us5CS0tX7n/ymoXtKlBDu+mwCeEUlBpirLUuovGe/pgrp4R
AA8W2Zz7OJzYEBuizXIUlxhff5ONt9aKkgq7R0XZN0FyapdZjXRF5eiWjd5Z3naE
6wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 275492882886449973370135932190284438292358
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-14 11:00:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-12 11:00:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.swissatelier.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26800155701038668082582622130145012196432232589666914983915712036059228675397308829055353630973867879189415168785937510930220468678494760415203469299372124420883765666581856912012327044720594686775193493933791969561213567971680877361098506769871548072972256996350274651571647602973521004991982121162615682282124932771300412873773955563875790875751649999110895776525122334380032533360651296569792513883798723119763738363031982161393057929446824531841013073773595698428022614076687241118590587479825186336285546541736585690015753088198571534962684852018143532618839584050773476180075058032795736718044289871892729726187
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ac0af05e25aff2721c6bb651c85fe8acff86b1af
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (612 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aandgapiaries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feedminer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gameaero.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'igamingvacancies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jointpaindurham.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'konaluxuryhomes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaciones.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nonameman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'o10o.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oregonstemcellclinics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radium-trader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swissatelier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tangytor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westerntherapeutics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aandgapiaries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.feedminer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gameaero.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.igamingvacancies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jointpaindurham.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.konaluxuryhomes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mediaciones.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nonameman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.o10o.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oregonstemcellclinics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.radium-trader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swissatelier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tangytor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.westerntherapeutics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--gebfmyl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--gebfmyl.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000189544647ad00000403004630440220182b23f4958cc3b71a11fc901925d6d01d1ca0283b316b4ea0ec50bbb3d769a0022040b7e2aab45bade54ca48672b9e165b732bffb9e26a8657acbd7f94242ae9e4a007700adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a00000189544647be00000403004830460221008b99f80e2afd11938d1a98443f37b5ed71cbac0b779d8bc1ab0e2fec3c0c6099022100e2b7d4b7fef0377cd42362b7ef2d8025a0b11cb9dc58f7d8dd1de48b3ef02c04
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		008cdff08e785345955d6bf20e211f4ba0913141523e9c13fc8adf18a4c0f6b50fba6a17e412659890d26035cb0816b5dfef90a3f81d61672c869bf1d676ac1e9ed5f71eb1a9a8b0b137607dd43a34b118ad24e90555b14e282fa61877109663571a895350b3ed99eb1eb99a2abe6df9107380829752481a975d19d4a1464e6f09f68b06dcd1786e9ad735ac489a85ab1b04347d4a94da15b7fa59134607bb6fa0933cff0ddc7e5ef45d7fb230cbfc289fb2c8c52dd01f9ad88e0789433b982447d8aa5d11a4c6de4cee39fefa06616456d44ceca79425fb2ebd14d17057b99fe441dce43fe22fef452ff84254df156dad4f1dc7cc9d2e4fe1242ea34ae01055a5