adeon-gmos-t.datacenter-migros.ch

Issued by R3

About this certificate

This digital certificate with serial number 03:6a:41:6f:18:d1:ab:74:95:2e:69:cc:37:34:f8:fb:ce:7f was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=adeon-gmos-t.datacenter-migros.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:6a:41:6f:18:d1:ab:74:95:2e:69:cc:37:34:f8:fb:ce:7f
Serial Number (int): 297493765356967113294279562978834765303423
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 65:2e:b4:de:6f:e9:69:7e:2d:e7:85:40:fe:e9:59:1b:5f:16:ba:74
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 06:43:4c:eb:07:ca:c4:09:a6:9e:cb:eb:7d:15:9d:3a:23:7a:7b:c7
Fingerprint (sha256): 46:e2:2f:d4:fb:3a:32:c3:89:e2:7f:b5:e1:ef:18:0b:8f:3c:29:50:e4:97:c6:c3:7c:8c:c3:11:84:92:b7:c7

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate adeon-gmos-t.datacenter-migros.ch

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for adeon-gmos-t.datacenter-migros.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

adeon-gmos-t.datacenter-migros.ch

Other certificates including the domain name datacenter-migros.ch

(limited to 100 certificates)
vnexs02a.datacenter-migros.ch
gmaa-adfs.datacenter-migros.ch
lb.mrd-adfs.datacenter-migros.ch
ewfki-kont.datacenter-migros.ch
lb.mrd-adfs.datacenter-migros.ch
lb.mrd-adfs.datacenter-migros.ch
ewfki-wf.datacenter-migros.ch
ewfki-wf-t.datacenter-migros.ch
lyncaccess.datacenter-migros.ch
lyncaccess.datacenter-migros.ch
ewfki-kont-t.datacenter-migros.ch
adeon-gmzh-t.datacenter-migros.ch
adeon-gmos-t.datacenter-migros.ch
ewfki-kont.datacenter-migros.ch
adeon-gmos.datacenter-migros.ch
ewfki-kont.datacenter-migros.ch
adeon-gmos-t.datacenter-migros.ch
*.datacenter-migros.ch
adeon-gmos-t.datacenter-migros.ch
ctxdirector.datacenter-migros.ch
vnexs03a.datacenter-migros.ch
ewfki-kont.datacenter-migros.ch
mail1b.datacenter-migros.ch
vnexs04a.datacenter-migros.ch
ewfki-kont-t.datacenter-migros.ch
sts.datacenter-migros.ch
adeon-gmos.datacenter-migros.ch
vnexs02a.datacenter-migros.ch
gmlu-adfs.datacenter-migros.ch
ewfki-wf.datacenter-migros.ch
mail.datacenter-migros.ch
adeon-gmzh-t.datacenter-migros.ch
vnexs04a.datacenter-migros.ch
adeon-gmos-t.datacenter-migros.ch
ctxdirector.datacenter-migros.ch
ewfki-wf-t.datacenter-migros.ch
outlook.migroszh.ch
adeon-gmos.datacenter-migros.ch
ewfki-kont.datacenter-migros.ch
ewfki-wf-t.datacenter-migros.ch
identityserver.datacenter-migros.ch
ewfki-wf.datacenter-migros.ch
*.datacenter-migros.ch
sts-s.datacenter-migros.ch
vpn.gmaare.migros.ch
vpn.migrosaare.migros.ch
adeon-gmzh-t.datacenter-migros.ch
*.datacenter-migros.ch
vpn.gmaare.migros.ch
adeon-gmos-t.datacenter-migros.ch
citrix.migroszh.ch
lb.mrd-adfs.datacenter-migros.ch
mail1b.datacenter-migros.ch
sts.datacenter-migros.ch
adeon-gmzh-t.datacenter-migros.ch
ewfki-kont-t.datacenter-migros.ch
lyncaccess.datacenter-migros.ch
netpulse.datacenter-migros.ch
ctxdirector.datacenter-migros.ch
ewfki-kont.datacenter-migros.ch
ewfki-wf-t.datacenter-migros.ch
sts.datacenter-migros.ch
*.datacenter-migros.ch
mail.datacenter-migros.ch
citrix.migroszh.ch
vnexs01a.datacenter-migros.ch
lyncaccess.datacenter-migros.ch
mail1b.datacenter-migros.ch
adeon-gmos-t.datacenter-migros.ch
citrix.migroszh.ch
adeon-gmzh.datacenter-migros.ch
ewfki-kont.datacenter-migros.ch
sts-s.datacenter-migros.ch
vnexs01a.datacenter-migros.ch
ctxdirector.datacenter-migros.ch
adeon-gmzh-t.datacenter-migros.ch
lyncaccess.datacenter-migros.ch
ba-bern.tac-gateway-servers.datacenter-migros.ch
identityserver.datacenter-migros.ch
storefront.datacenter-migros.ch
lb.mrd-adfs.datacenter-migros.ch
adeon-gmzh.datacenter-migros.ch
*.datacenter-migros.ch
*.datacenter-migros.ch
vsrpa02.datacenter-migros.ch
sts-s.datacenter-migros.ch
adeon-gmzh-t.datacenter-migros.ch
adeon-gmos.datacenter-migros.ch
sts-t.datacenter-migros.ch
ewfki-kont.datacenter-migros.ch
mail.datacenter-migros.ch
mail.datacenter-migros.ch
mail1b.datacenter-migros.ch
mail.datacenter-migros.ch
ctxdirector.datacenter-migros.ch
szc.migroszh.ch
revcap.datacenter-migros.ch
p45.migros.ch
mail.datacenter-migros.ch
adeon-gmzh-t.datacenter-migros.ch

Certificate

The complete raw certificate details for adeon-gmos-t.datacenter-migros.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Ytp1B1fS6RYVRX06PUi
x4kBBb33sqiOhntEL9MGM56rrZLUraQtW9p6TIMc3hHxs1TE9CTyfChyvvRlj7w5
HR9NUIInGLaGRK35/WjQIWbQ0+B8ldzOC5XDsoHi7cZpMc0T52iq33H6KMO4K6/X
yHPtSK+AfXbjDUSornkWhz+/zxZ26KPeXGUhB2daFH178kBbA4ASuK65E83XjjDS
F9c7Lzkd+IpVeiteFeTQ8CFGenQRs9TWIU/k4ooXRlfeaQsQWtx+xZsAye94B30Q
Pxt6vWV8CjUFmmAlT9H8nfGSd5z2QXG+nqLY4pa+CfuETlkjxVMlyfEQ8sr5LszO
BwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 297493765356967113294279562978834765303423
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-02 04:28:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-31 04:28:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'adeon-gmos-t.datacenter-migros.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26452553044174685782105466619550059164499853437122996216604263891237270497109293726871646379324229866487177015948569646148364181773039929082257301814096780496127404715880580294467071442343992142417988043511720079678257098466174299461327436052992121881285376035388783945983350727619113425811195223661468654391083395487497394770053205711280407991594200895901621444507147690912679391507505707657682578332140190208285321108328769154424342969295132851143841570493383493879523929924528987233352767595357678076626811544808629770064093437543801699512902713771724181170113092032803514555206086318622213412529199623894538702343
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							652eb4de6fe9697e2de78540fee9591b5f16ba74
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (37 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adeon-gmos-t.datacenter-migros.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000186a0cacea50000040300473045022100a81c0dd296e4b86c989a30c1e2328ab6fb66b2272fce382be19e3d28be1187e402202a7eb287141c2ab7f1ba085967a1c8af1431f04648802e6f0e2a1b83ec1fbd90007500e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000186a0cacea1000004030046304402203ed6f8974a5b9471bdaac6f0df2269595ac20a2acaeafdf2e06c0028456095ba02206c2bc52b2731d99a0e6be3ac39bb98c685bd3f9c43e5b3ba72c0fd2f7b467e47
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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