neiger-lackiert.ch

Issued by R3

About this certificate

This digital certificate with serial number 04:e6:d2:61:76:8c:27:d5:3d:da:c3:c6:a6:dc:c4:f6:e5:64 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=neiger-lackiert.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:e6:d2:61:76:8c:27:d5:3d:da:c3:c6:a6:dc:c4:f6:e5:64
Serial Number (int): 426993732055195547086238105132273380025700
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 35:c1:e3:a0:04:1e:a2:be:2e:c0:89:ba:c9:e0:40:e4:1b:9f:3e:84
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): a3:cb:23:4f:62:f8:e0:31:f4:73:c1:ba:d5:10:1a:bb:5f:c2:57:c1
Fingerprint (sha256): 5b:0e:49:4d:b4:ab:8a:82:ed:cd:9b:14:d4:e0:ef:aa:f4:2a:35:ce:05:a1:69:01:c4:91:e3:83:a6:3e:0f:e4

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate neiger-lackiert.ch

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for neiger-lackiert.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

neiger-lackiert.ch
www.neiger-lackiert.ch

Other certificates including the domain name neiger-lackiert.ch

(limited to 100 certificates)

Certificate

The complete raw certificate details for neiger-lackiert.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEzh+BBLYipdCqkWF6QS
vZUrVQ5n6yHk3/Gsi2DbK/wDWoCFM7eTAQimSdDVhn7jADgSeOK0qon56jZsuokt
pKZqImADsJ2dys4BmaiTtKLDAkskHOG93Q+F4wE6Dc8t32+eDnEFwx1idhOnXAtp
C+aYM0m4xPxikIvp3AsD661YbfIOMNZ6rDd4yeqA9ONoDj+d2LOq9Rl/SVlRu6nS
Wned9OEj1aaigDKOeXJmy/oVLIX3Q6ftfvRhwWy5UBW/3kZZ9Ut17+si5olxDisg
RKjx8MbwDaRVTLdylnaw2KqAbAxIMN890AHiVnmz6tXx1b0zJqbH7tcEwmlSfcBg
cQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 426993732055195547086238105132273380025700
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-04 19:50:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-02 19:50:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'neiger-lackiert.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24780620041486864488245931900908010620217337279272745846285408056824859103588467721844448189136980642848188409192489076811632457189566073517086007499855166950382546083472112342570405407511718930320635553720471774075654305934462888519709487856757812533753607783679739745413345752550578963587310865538877580444544539621164715803555254963631449790644486809920844901421402468466863184078064311526742745353635883529958404261479917679900818187318471209062538682583491100799275957496472082488671949386267566838017684100714718891325246070932024074226199008203704667271894251069095812393220801554103636861346146522769246937201
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							35c1e3a0041ea2be2ec089bac9e040e41b9f3e84
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neiger-lackiert.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.neiger-lackiert.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000186ae6388cb000004030048304602210094750d7bd9bd8bef13599929cf32e1ebaf9342fd11e24ef7d08735f30d5fe5f0022100cf74085172a0df86d2b29216fe599ee84b3f5ca57a62ed50f3c246a24aecf8390077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000186ae6388d90000040300483046022100ac54cfca9a88994b6005b8de507044493b1ca98aacb408aa29723ff88b8587780221009866427747e122b490441dd766122317c9b644ef99e869c552912ec1b5267dca
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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