alumni-emba-luzern.ch

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:69:8e:be:a1:2b:38:44:55:1f:3d:18:c6:90:b3:a4:9d:4e was issued on by Let's Encrypt.

With 19 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=alumni-emba-luzern.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:69:8e:be:a1:2b:38:44:55:1f:3d:18:c6:90:b3:a4:9d:4e
Serial Number (int): 297256246502676029220243230172623709445454
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 9c:ac:9e:e6:af:76:aa:6b:b0:34:43:33:57:8d:3e:f9:20:d7:2f:40
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 00:3d:2a:84:3d:8e:72:19:e2:70:27:1a:bd:b3:c5:87:a9:b3:77:e9
Fingerprint (sha256): 54:f9:d6:fd:9d:44:6a:84:1a:40:4b:a7:ea:95:c7:7c:cd:f0:f6:32:0f:34:d2:f3:8b:58:33:5c:15:94:7c:08

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate alumni-emba-luzern.ch

19

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for alumni-emba-luzern.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

alumni-emba-luzern.ch
alumni-mba-luzern.ch
alumni-mba-luzern.com
alumni-mba-luzern.net
emba-luzern.ch
embalu.ch
executive-mba-luzern.ch
mbalu.bwise.ch
mbalu.ch
mbaluzern.ch
www.alumni-emba-luzern.ch
www.alumni-mba-luzern.ch
www.alumni-mba-luzern.com
www.alumni-mba-luzern.net
www.emba-luzern.ch
www.embalu.ch
www.executive-mba-luzern.ch
www.mbalu.ch
www.mbaluzern.ch

Other certificates including the domain name alumni-emba-luzern.ch

(limited to 100 certificates)
alumni-emba-luzern.ch
alumni-emba-luzern.ch
alumni-emba-luzern.ch
alumni-emba-luzern.ch
alumni-emba-luzern.ch
alumni-emba-luzern.ch
alumni-emba-luzern.ch
alumni-emba-luzern.ch
alumni-emba-luzern.ch
alumni-emba-luzern.ch
alumni-emba-luzern.ch
alumni-emba-luzern.ch
alumni-emba-luzern.ch
alumni-emba-luzern.ch
alumni-emba-luzern.ch
alumni-emba-luzern.ch

Certificate

The complete raw certificate details for alumni-emba-luzern.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6HuIl+lGjV0ALpdLMglt
Rbd7f2xLPwpIZm1joigjRiZ0H4fRjNwozh2Px9o2N13fFyZvRD6eyGD8PwdkRoZH
JUDTFk1xbPWm9OjWaL+VG1FGiZ4N566SPKGof3ClmN8LIIEsiMV8L5HbP8SspBLO
qHd7vD5qe065k6koocObDSBR0NjwBbg8ousMDjVMe0ZExuU3B+mfwVK5DwyXJVuf
qNFvnDM+aKZZ7dg9bq8lW3XSb2oimjjdegcD0/jOxhhxnfTpxE5Y3zRhP+20OnjS
1Jr/FT6INCEiJ+2+lGYXIex+rvWJd/sXAVEaCl5Q+T2W+0zC7toy7VUuGHu2b356
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 297256246502676029220243230172623709445454
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-01 17:12:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-30 17:12:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'alumni-emba-luzern.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29348203424892743148071410671020993845911160724134583526718750480050299021684437469933510262615872541306664804122417010972785120957214762110012241265735885141258591691802836593175716604124067480022783239040989347858933344984386285120006268367689618953644049483787668867644484707261850215777273591007370346733643531554159625686083334138041053141572064872201419520426270632474028606391296618150140760143256494956723481286523727149527696424881616479257421708846379867208811186411315784331394163518368772334572377033334604904392283997101664907944810369292499352116308220457382599962372143198752417685669708263355970386517
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9cac9ee6af76aa6bb0344333578d3ef920d72f40
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (390 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni-emba-luzern.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni-mba-luzern.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni-mba-luzern.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni-mba-luzern.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emba-luzern.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'embalu.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'executive-mba-luzern.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mbalu.bwise.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mbalu.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mbaluzern.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni-emba-luzern.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni-mba-luzern.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni-mba-luzern.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni-mba-luzern.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.emba-luzern.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.embalu.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.executive-mba-luzern.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mbalu.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mbaluzern.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe000001693a751003000004030047304502207d40b5f59446a0ff6cca91f21e8e4cdf6335a116c313ae675d23ad90eee133760221009079e2941c9cf4a999286541b9179629b828bf8210b095c68e45f1e7b784e9ea00750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d000001693a75104e0000040300463044022043941f2341ee89d25102c731f59703a8b715acb997ae43b950c9337ae49731e202203efa69647b6e5691c70d3c63886054ba650e4d16e8afc0a73612eca72a068487
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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