matomo.maenjuel.ch

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:21:29:c7:50:e5:32:1c:ee:f2:06:28:c4:22:1c:92:0f:69 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=matomo.maenjuel.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:21:29:c7:50:e5:32:1c:ee:f2:06:28:c4:22:1c:92:0f:69
Serial Number (int): 272621709159325265952352156707869500247913
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 15:f8:e2:52:14:25:d7:04:77:12:73:30:24:82:a6:e7:58:35:a9:e2
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 65:26:91:bb:ac:b7:85:9e:99:0b:eb:39:11:ca:ea:62:22:26:6f:00
Fingerprint (sha256): 50:37:dc:92:dd:ce:d6:d9:bd:ab:fc:52:81:ad:6a:8d:8b:cb:ec:40:c0:39:7e:9b:dc:a0:ed:78:bf:9f:54:a3

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate matomo.maenjuel.ch

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for matomo.maenjuel.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

matomo.maenjuel.ch

Other certificates including the domain name maenjuel.ch

(limited to 100 certificates)

Certificate

The complete raw certificate details for matomo.maenjuel.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 272621709159325265952352156707869500247913
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-31 05:50:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-30 05:50:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'matomo.maenjuel.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 737951474755945967128284906687235097983594098287041170886440523180851154542435546125461480298236284472605627424089305888289123723253693705417245508460941638633690510263088886498281310986633280783474146346155449482987313649385974274330798411218777016641020729518018948800976541935632988063084576705713198732813003579656906296286220109704958306148169381827621325179443238838950841043068688223118280600383301315332595307123837483481913346123353947258984645726742452330781692248932158158817573140006252224214276336927589305278480655977874707012201483562405670404124939030467201772244502956192295772291585706220746871759159108305203608283811505309697315465506905418158542289522896442929711852232518317645566585876578363150091852749578932503522512987986680188657717304673623629082183695630911860588277173221818903387527332668027014133458834602130829802849143522800202614046277612071528819030735967368823186115835780704618523493994625953509415859865273730662511096473057689708032052405944386775866458135947994089109762052348001493242956516145806646575731469844690833781765236937008149596100406249870408950133809089855883807611512935390525129070667219822050876721337361367520452134217155497743475572411464354150593968708614991558506484085423
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							15f8e2521425d704771273302482a6e75835a9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matomo.maenjuel.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016ffa5d76320000040300473045022005114e162fa520db2e3dd0c2c0117bb7592e45292b68d18b918aad356c4551f9022100b0558d72ef09d1a386b6253b6d0e6473e30ae30e909ee23515a1f0ae1d882d8900760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016ffa5d7667000004030047304502204db189ae1f9c3473ca0fa0eae3cd3eb6a267f56c37f4e83abc5f1f64dafc87510221009e269d02a68fa4ddc43d38fccc9330354bab922e70360a3d8bc06f4d4b798ff4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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