dotproject.hosting-24.ch

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:56:93:b8:66:8c:b9:da:a1:23:d0:87:d3:31:67:20:91:35 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=dotproject.hosting-24.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:56:93:b8:66:8c:b9:da:a1:23:d0:87:d3:31:67:20:91:35
Serial Number (int): 290797495328439042197397105323989390102837
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 02:64:e2:24:3d:4b:9a:87:b6:83:c9:0d:6c:fd:2e:e1:85:b7:44:3f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 36:bf:ae:9e:f7:d9:e7:84:42:96:41:67:b9:66:b8:56:63:79:84:fb
Fingerprint (sha256): 52:7f:85:cb:1a:6e:6e:f7:7d:cd:30:f4:5a:2c:40:ee:fd:ca:29:6a:12:48:0c:da:00:c2:87:9e:1d:fb:f2:e5

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate dotproject.hosting-24.ch

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dotproject.hosting-24.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dotproject.hosting-24.ch
www.dotproject.hosting-24.ch

Other certificates including the domain name hosting-24.ch

(limited to 100 certificates)
dotproject.hosting-24.ch
hosting-24.ch
qdpm.hosting-24.ch
hosting-24.ch
pydio.hosting-24.ch
hosting-24.ch
projekt.hosting-24.ch
hosting-24.ch
fengoffice.hosting-24.ch
letodms.hosting-24.ch
projectsend.hosting-24.ch
collabtive.hosting-24.ch
*.hosting-24.ch
hosting-24.ch
hosting-24.ch
hosting-24.ch
hosting-24.ch
hosting-24.ch
eyeos.hosting-24.ch
projectpier.hosting-24.ch
dotproject.hosting-24.ch
projectsend.hosting-24.ch
qdpm.hosting-24.ch
hosting-24.ch
pydio.hosting-24.ch
eyeos.hosting-24.ch
letodms.hosting-24.ch
hosting-24.ch
*.hosting-24.ch
hosting-24.ch
phpfilenavigator.hosting-24.ch
letodms.hosting-24.ch
hosting-24.ch
collabtive.hosting-24.ch
qdpm.hosting-24.ch
fengoffice.hosting-24.ch
hosting-24.ch
pydio.hosting-24.ch
projectsend.hosting-24.ch
hosting-24.ch
hosting-24.ch
hosting-24.ch
eyeos.hosting-24.ch
projekt.hosting-24.ch
phpfilenavigator.hosting-24.ch
fengoffice.hosting-24.ch
phpfilenavigator.hosting-24.ch
projectpier.hosting-24.ch
hosting-24.ch
projectpier.hosting-24.ch
hosting-24.ch
qdpm.hosting-24.ch
hosting-24.ch
projekt.hosting-24.ch
dotproject.hosting-24.ch
hosting-24.ch
hosting-24.ch
hosting-24.ch
hosting-24.ch
collabtive.hosting-24.ch
hosting-24.ch
dotproject.hosting-24.ch

Certificate

The complete raw certificate details for dotproject.hosting-24.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 290797495328439042197397105323989390102837
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-03-16 16:59:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-06-14 16:59:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dotproject.hosting-24.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 800715447959661327763314244888949564875252633099069098849018768391669104283731344715051676902193339967637855264611046767563023753447516149440965992971755433421901982654359224093000953589427906031433178413233666794746038507421186724700413772601057080121331819060288210074074922212981191909260267481797305737904019690889257494764771347568412689437332145906676510608373915739516889855182104913563462257221597375994468078861945039540052313063850467164076145276147686464085260126363437939276484463348579322229229708489061744549610193386523661320950871002900397964409725864984487816945518316538443988243634902082129240402923126275568524718382154617542088125885074869480339961107914027573123656423260193373447975340348355238750535508231503156773057847759836405722998248217252030224763976609870428887897982261204807397403069280329099512873755103891337424479344006319284941378641272247364251421455540418883560977158795111837924707756388989790217625940376580695711371332095147168271305317961410601087314312607803309356312611592430317284557012021070786353550448098128832041726798913811841933106192330400030686220583718947990552607454609184750425936897744566296194025864058228628353445410057221208311665701830766339454921139048977150196911413853
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0264e2243d4b9a87b683c90d6cfd2ee185b7443f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dotproject.hosting-24.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dotproject.hosting-24.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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