aquatec-kanalsanierungen.ch

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:b8:3f:11:76:21:5a:4f:21:15:5e:ac:1c:9c:75:3e:60:46 was issued on by Let's Encrypt.

With 25 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=aquatec-kanalsanierungen.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:b8:3f:11:76:21:5a:4f:21:15:5e:ac:1c:9c:75:3e:60:46
Serial Number (int): 411144931269241520561942951838303951675462
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 59:34:82:e7:6d:f9:fc:19:e9:20:f2:53:55:d1:40:7b:02:c5:1c:45
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 7f:0a:2c:cc:5e:c8:9d:a7:d6:fb:cf:25:f9:03:53:0c:d6:ac:7d:79
Fingerprint (sha256): 58:ff:bb:f8:5c:57:de:04:30:17:eb:a7:23:83:53:70:8e:40:5d:b7:19:b5:9c:6e:71:b4:f0:17:4a:d8:35:ba

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate aquatec-kanalsanierungen.ch

25

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aquatec-kanalsanierungen.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

007x.ch
aquatec-kanalsanierungen.ch
bobclub-stmoritz.ch
clearex.ch
computerfuchs.bwise.ch
computerfuchs.ch
creditreform-luzern.ch
creditreform.bwise.ch
evag.ch
marquis.ch
rail-road.ch
retriever.bwise.ch
rohrputz-loriol.ch
smb.zto.ch
www.007x.ch
www.aquatec-kanalsanierungen.ch
www.bobclub-stmoritz.ch
www.clearex.ch
www.computerfuchs.ch
www.creditreform-luzern.ch
www.evag.ch
www.marquis.ch
www.rail-road.ch
www.rohrputz-loriol.ch
www.tramondi.ch

Other certificates including the domain name aquatec-kanalsanierungen.ch

(limited to 100 certificates)
aquatec-kanalsanierungen.ch
aquatec-kanalsanierungen.ch
aquatec-kanalsanierungen.ch
aquatec-kanalsanierungen.ch
gorbi.ztonline.ch
aquatec-kanalsanierungen.ch
aquatec-kanalsanierungen.ch
aquatec-kanalsanierungen.ch
gorbi.ztonline.ch
www.marquis.ch
aquatec-kanalsanierungen.ch
aquatec-kanalsanierungen.ch
gorbi.ztonline.ch
aquatec-kanalsanierungen.ch
aquatec-kanalsanierungen.ch
gorbi.ztonline.ch
gorbi.ztonline.ch
aquatec-kanalsanierungen.ch
aquatec-kanalsanierungen.ch

Certificate

The complete raw certificate details for aquatec-kanalsanierungen.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSI8YgOIiQM0mcyoa5HP
ni3rqryuCAolONWAndRdBVI2cf1dnbJzxcdJQ+dUu39lulF6Xo0twKAsopZAvxea
gjhFM3WeCC2KZB8byVnNF+WeZFAQDAbh7HNTbznmbH9psCp7R0s6ZfQc+gK0f0x/
gwANcoVBITpalqYQWC+Hh4TO3sJNosWorAGH7gV7b1368QDOqre1/JaikiBgYZYs
NPiZxAZQb8mHqofZkObb6vZGl1IF4lGSTV6JCXeoVEAwjh2a4eQKJKzbwuQ50GcI
lLI5qyTnSSLGD+Jzg20gh5X2QbNzl3/XUN5S5E5g1bhgD2rBIToNdZX+NdoqO8Pl
qwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 411144931269241520561942951838303951675462
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-07 08:18:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-05 08:18:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aquatec-kanalsanierungen.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17816483337206601747938203050211082320584409687517954928528775513197394009852091805476035227779273086134190850946241934871853946250314681418933314495634907543481644980616993073570933280967617444883479645413253262322769475820090666305473687096046031731677247579409989426365045058338491874520243241975602011608360748599092466356655694687716350171367324904804177318148917982753740650500072459590642476252219003362911666841750436053191654473572535727876348014030866047501711203252998496824357968517889631593481753615545318745889223374850320144378032216673882869627101060393900074754352320573855844641082583806045287867819
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							593482e76df9fc19e920f25355d1407b02c51c45
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (476 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '007x.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aquatec-kanalsanierungen.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bobclub-stmoritz.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clearex.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'computerfuchs.bwise.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'computerfuchs.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creditreform-luzern.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creditreform.bwise.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evag.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marquis.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rail-road.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retriever.bwise.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rohrputz-loriol.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smb.zto.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.007x.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aquatec-kanalsanierungen.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bobclub-stmoritz.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clearex.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.computerfuchs.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.creditreform-luzern.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.evag.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marquis.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rail-road.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rohrputz-loriol.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tramondi.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016e45285eec000004030046304402205dd8ca2f7518bc6cb8fe8827a2c69920300812572f982634390c66f91f83fd9302204b11eaa37b4dc04787ad067cddd19fcabb94b6aef9af73c9abc70ee2e268530f0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016e45285f150000040300463044022017e37eaeef8b7800ae3a0a680b931bbb64acbff1a51e1e917396839a0289e3dd0220656f5bcaa3852d9612160437c37cdce19723709f8eeb0518d3ec33dc9fc07ba2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		006a57d9e818931b33d7cb25f125203b715e91752fd27a6efd0381c5d9bd071a58a48147421954715d8e87a13213af43a8ea3d3d052ce115355e41f0dd6d9d3efd8350483f7e89bed591b66fbf894fdceba1275a90674a433f1def88a40065aa1832fa307574e4536ea09f6f791db93f8b6ae7d8affae72b47a6388a2651e420742608aee835eebf6198fc2f842d7d1b53afbfbcb7420a66c17491108435976106b2372045f96200a5cfdb6e65dceb9c2c82769c04ba7112ad2b6573c7145cbda32715158249457476d72e77cb78afc61bafc6ac514c3fcfe57cde72ca64b7f9c230318fad849706d4928ea599e0771281af9e4fb35aee9cfbc65b3746ce04881f