sunnig.ch
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:84:cc:a1:a6:d0:00:05:ba:c7:9a:32:c4:2d:c9:a4:c6:78 was issued on by Let's Encrypt.
With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=sunnig.ch
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:84:cc:a1:a6:d0:00:05:ba:c7:9a:32:c4:2d:c9:a4:c6:78Serial Number (int): 306526132083138422998173266449998136264312
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 5a:50:19:c3:1b:e4:c1:20:ac:a0:c4:af:5e:73:33:c2:7d:9e:e0:b5
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 78:3b:97:e1:dc:01:db:9f:1a:84:4a:18:72:30:5f:5f:f4:b3:fd:a0
Fingerprint (sha256): 65:4e:ec:67:6f:6e:f4:87:29:56:c8:dd:63:98:23:a7:bd:ca:8e:96:9b:a4:a9:e0:73:f8:00:66:1d:ba:a1:dd
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate sunnig.ch
5
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for sunnig.ch
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
chaeller.sunnig.ch
scherer.changeip.net
scherer.swissdatacenters.ch
sunnig.ch
www.sunnig.ch
scherer.changeip.net
scherer.swissdatacenters.ch
sunnig.ch
www.sunnig.ch
Other certificates including the domain name sunnig.ch
(limited to 100 certificates)
Certificate
The complete raw certificate details for sunnig.ch in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFoDCCBIigAwIBAgISA4TMoabQAAW6x5oyxC3JpMZ4MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAyMDMwMTMzMzNaFw0y MDA1MDMwMTMzMzNaMBQxEjAQBgNVBAMTCXN1bm5pZy5jaDCCASIwDQYJKoZIhvcN AQEBBQADggEPADCCAQoCggEBAO8w+HFJ9H+t4igbci+iiXW87+GmJLUWQEwM+W0c 9Nb34epPhre1lKLtkWrKJlKsG3U1lVuwe3ywIMKFBtPx6lojlwO9v1uOrpAWHmc7 Dt3HgMwC7idWmGCAc2OV/WkzQXQFAaw3ZILVdZHxDEITSg3EIUjU5oz/9VwsCcfs TTjIaqRpRDgqF6vg/+6xtid8jOnR6JaneIxB8gZnHs7gttwDcNV5At+Xe5N2U5jq /Z6HqjeD1+tH5Fk5z+NJESTiEetaOWbb29x3kK23sf2QqdIxig+Lpr1VdiOYDkr4 CVhNTU8Avhr59m39jSaHLHXi7KpKGE2Z1z+2GWaGd7FzDJMCAwEAAaOCArQwggKw MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIw DAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUWlAZwxvkwSCsoMSvXnMzwn2e4LUwHwYD VR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUHAQEEYzBhMC4G CCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5cHQub3JnMC8G CCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5cHQub3JnLzBq BgNVHREEYzBhghJjaGFlbGxlci5zdW5uaWcuY2iCFHNjaGVyZXIuY2hhbmdlaXAu bmV0ghtzY2hlcmVyLnN3aXNzZGF0YWNlbnRlcnMuY2iCCXN1bm5pZy5jaIINd3d3 LnN1bm5pZy5jaDBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAo MCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQQGCisG AQQB1nkCBAIEgfUEgfIA8AB2AF6nc/nfVsDntTZIfdBJ4DJ6kZoMhKESEoQYdZaB cUVYAAABcAjlWO4AAAQDAEcwRQIgE+91LwSmgHno1cvirVvuJ4cjxofs9Hmq8+Bm QIRH4C4CIQDyUfGgO7E6xAs+1gcll7WeOvZ6YMMxAuxC9/Fd7344dwB2ALIeBcyL os2KIE6HZvkruYolIGdr2vpw57JJUy3vi5BeAAABcAjlWOcAAAQDAEcwRQIgUCGC Tf+c5+RASqsCsBJlPDnlab9p6JseDrWjmIc5gVkCIQCfmjPiVA9il/YrKmE/cuxl Iv71pdZzWr5miY16QQkFnDANBgkqhkiG9w0BAQsFAAOCAQEAfoFR7IEn9uHZKs2O LD8ieqtzfgdqucTw2uy6EJ4IvItwm6dr0c5PGLNLb9weuii7sbWSXg3P0cF7YssC gs1rHd9i64uCwPB213k3NpvDNdrNPShbi+My673QoCWTUKEQkhOAuD6wy586Hljb 0ZcJcvyG8GOqnpxUaDjjNlEK1708y0ZCdj2Hx6W+5sf9NkUWKAsNSenaU+YnS62o 0NFnekzO7zOYdqhpSIqfkr1GlpcNWct+qx7GzW4a7dzocC+BdoS0p5IpfulUaTAA s/YRJafqPIwm0Qsa2f2U2m+GK7yayXZz/IllPA1QXq0L9xUXJO28kDMTr9l2w+Zz s5xuCg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7zD4cUn0f63iKBtyL6KJ dbzv4aYktRZATAz5bRz01vfh6k+Gt7WUou2RasomUqwbdTWVW7B7fLAgwoUG0/Hq WiOXA72/W46ukBYeZzsO3ceAzALuJ1aYYIBzY5X9aTNBdAUBrDdkgtV1kfEMQhNK DcQhSNTmjP/1XCwJx+xNOMhqpGlEOCoXq+D/7rG2J3yM6dHolqd4jEHyBmcezuC2 3ANw1XkC35d7k3ZTmOr9noeqN4PX60fkWTnP40kRJOIR61o5Ztvb3HeQrbex/ZCp 0jGKD4umvVV2I5gOSvgJWE1NTwC+Gvn2bf2NJocsdeLsqkoYTZnXP7YZZoZ3sXMM kwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 306526132083138422998173266449998136264312 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-03 01:33:33 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-03 01:33:33 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sunnig.ch' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30195103129928275672286746094622899575720763884633188079356203282413434457640156311218389395265154121607233361694429043824320112562971244644007166374158418824130554159157864350978935426954435165573177090594670939961716267623136374792339493824992379713545555401490903694155894131422597962216553241197753943519086887752096936663425566795822111456590571320241491655265079265758810001799448576444561981966095955295894980611605298950348575103684546775001619081721047912631429449245839179117543287858203463980513105899209816839600497894429381659330738419667605405494960185108069279737159902543589822389236660381525340261523 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 5a5019c31be4c120aca0c4af5e7333c27d9ee0b5 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chaeller.sunnig.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scherer.changeip.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scherer.swissdatacenters.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sunnig.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sunnig.ch' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000017008e558ee0000040300473045022013ef752f04a68079e8d5cbe2ad5bee278723c687ecf479aaf3e066408447e02e022100f251f1a03bb13ac40b3ed6072597b59e3af67a60c33102ec42f7f15def7e3877007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000017008e558e7000004030047304502205021824dff9ce7e4404aab02b012653c39e569bf69e89b1e0eb5a398873981590221009f9a33e2540f6297f62b2a613f72ec6522fef5a5d6735abe66898d7a4109059c . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 007e8151ec8127f6e1d92acd8e2c3f227aab737e076ab9c4f0daecba109e08bc8b709ba76bd1ce4f18b34b6fdc1eba28bbb1b5925e0dcfd1c17b62cb0282cd6b1ddf62eb8b82c0f076d77937369bc335dacd3d285b8be332ebbdd0a0259350a110921380b83eb0cb9f3a1e58dbd1970972fc86f063aa9e9c546838e336510ad7bd3ccb4642763d87c7a5bee6c7fd364516280b0d49e9da53e6274bada8d0d1677a4cceef339876a869488a9f92bd4696970d59cb7eab1ec6cd6e1aeddce8702f817684b4a792297ee954693000b3f61125a7ea3c8c26d10b1ad9fd94da6f862bbc9ac97673fc89653c0d505ead0bf7151724edbc903313afd976c3e673b39c6e0a