brezelkoenig.ch

Issued by R3

About this certificate

This digital certificate with serial number 04:5d:02:a5:c1:39:1d:9b:00:da:c5:2b:ca:b4:2a:bb:40:a8 was issued on by Let's Encrypt.

With 22 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=brezelkoenig.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:5d:02:a5:c1:39:1d:9b:00:da:c5:2b:ca:b4:2a:bb:40:a8
Serial Number (int): 380098922954691712987801867866859888132264
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 42:d0:0b:d7:10:4e:82:5e:12:29:51:3f:38:f9:fb:7e:f4:69:d2:73
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): cc:aa:ad:b0:5f:2e:f0:e0:d2:3c:29:21:3a:ff:9e:40:36:4f:b9:0b
Fingerprint (sha256): 4f:9d:05:90:85:c5:cf:fc:40:30:68:30:05:8e:e1:43:1d:1f:01:95:31:4f:9f:57:57:70:20:14:ef:fd:df:0f

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate brezelkoenig.ch

22

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for brezelkoenig.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bretzel.ch
bretzelkoenig.ch
bretzelkoenig.de
brezelkoenig.ch
pretzelking.us
swissbretzel.ch
swissbrezel.ch
swisspretzel.ch
swissprezel.ch
www.bretzel.ch
www.bretzelkoenig.ch
www.bretzelkoenig.de
www.brezelkoenig.ch
www.pretzelking.us
www.swissbretzel.ch
www.swissbrezel.ch
www.swisspretzel.ch
www.swissprezel.ch
www.xn--bretzelknig-yfb.ch
www.xn--brezelknig-kcb.com
xn--bretzelknig-yfb.ch
xn--brezelknig-kcb.com

Other certificates including the domain name brezelkoenig.ch

(limited to 100 certificates)
brezelkoenig.ch
ditsch.de
webmail.brezelkoenig.ch
brezelkoenig.ch
tezaaa.com
ditsch.de
brezelkoenig.ch
the22murdersofmadisonmay.com
app-staging.getayra.com
brezelkoenig.ch
github-topstars.cawpea.me
octosdigital.com
webmail.brezelkoenig.ch
ditsch.de
sriharsha.dev
ghneurosurgicalalliance.org
www.marcosdourado.com
login.staging.brezelkoenig.ch
aarnavjindal.com
gokulamdroptaxi.com
brezelkoenig.ch
brezelkoenig.ch
brezelkoenig.ch
brezelkoenig.ch
www.softwarelc.com
brezelkoenig.ch
brezelkoenig.ch
ditsch.de
remote.brezelkoenig.ch
brezelkoenig.ch
www.scandiac.us
login-test.new.de
www.mairimed.com
auth.gluegroups.com
webmail.brezelkoenig.ch
tumascota2022.com
brezelkoenig.ch
ditsch.de
brezelkoenig.ch
brezelkoenig.ch
tezaaa.com
www.zmy.pw
algoritmo9.site
ghneurosurgicalalliance.org
login.staging.brezelkoenig.ch
oivis.com
brezelkoenig.ch
ditsch.de
app.brezelkoenig.ch
brezelkoenig.ch
brezelkoenig.ch
brezelkoenig.ch
*.brezelkoenig.ch
web.feedad.com
ditsch.de
www.allinonefitness.ch
bingo.remotesocial.app
design.joybird.com
brezelkoenig.ch
app.caddygo.ru
brezelkoenig.ch
webmail.brezelkoenig.ch
www.raugh.club
brezelkoenig.ch
ditsch.de
blog.pirika.org
brezelkoenig.ch
brezelkoenig.ch
letspark.gr
brezelkoenig.ch
brezelkoenig.ch
webmail.brezelkoenig.ch
0xgn.com
*.brezelkoenig.ch
gamescoin.pacta-cloud.app
brezelkoenig.ch
firatkirmizi.com
brezelkoenig.ch
cv.hofs.dev
ditsch.de
webmail.brezelkoenig.ch
ditsch.de
ditsch.de
dev.developer.viviware.com
ditsch.de
ditsch.de
staging-admin.lvmhcomplianceescape.com
brezelkoenig.ch
ditsch.de
remote.brezelkoenig.ch

Certificate

The complete raw certificate details for brezelkoenig.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ulbuxc8u2kjxLaXS1qo
1iVgLAn9CzO950KNMzBBvrSB52SDeYZy4Rkgug5KRh5WiHHnh5qvHGP5iJkgzWQa
XLNht4gt+IAsdeU6zsK0p/0MpuugboVR7xTIDxzX2oSNV5yvP/H0FKR5KupFsaLQ
pZ6v3mrpkYvF6GWWaY6/jnH+1UD/TFQ/HWt/YWWVJKgbPL34xMhE6/t9mdlAB275
1130cOSJCAviZNLkI7YvJpepeNO+2FI/i2R6qUGTD2xgQptIit3oIiCmQckOnexn
RtgIGkhVhD9HyuTchFGWMqdtLYsoEFbKoNnRAue2PgFKzRImfLcGjBfWIAkA2spA
GQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 380098922954691712987801867866859888132264
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-31 09:49:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-29 09:49:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'brezelkoenig.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27635023760772544529033219392902734977660630359189093282470235528433609568171730267866459500707474498289136413650724713998933994657845697736178310014458222440827893922157478631984215644056307416705605511117085288568873747817266651413850286608152630173423116378531620274330477139805100848087899832875570530254539366150108693965523003262531420061384555084250091566785980310291484989866388181854875565004680841825067216206422801760133705239355364445575206323505248436089072341643087270978395084090825566768462610988960552524590847054705003407901985435685009804961860033875855426031472301461964180948407545801554508005401
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							42d00bd7104e825e1229513f38f9fb7ef469d273
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (438 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bretzel.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bretzelkoenig.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bretzelkoenig.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brezelkoenig.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pretzelking.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swissbretzel.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swissbrezel.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swisspretzel.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swissprezel.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bretzel.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bretzelkoenig.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bretzelkoenig.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brezelkoenig.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pretzelking.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swissbretzel.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swissbrezel.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swisspretzel.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swissprezel.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--bretzelknig-yfb.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--brezelknig-kcb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--bretzelknig-yfb.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--brezelknig-kcb.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018fce44c8b50000040300483046022100829829df63b7d526d74caa25bf683caa043d7af47a7ce96441ce5a76ed7e390c022100e1790f925e0529cf7ea6ebb5bb7d72a57180c95d37327a6820feb53d22f06dda007600dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018fce44c9610000040300473045022100bfa0e15b2c92861622aa80eaee983cdb75d354b9599cd4d01f201f2758a19ada022016be3b3cd799c3261361f9c904257c72f80f6bef792f0379eb43b64f1b97b63b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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