*.streamings.ch

Issued by R3

About this certificate

This digital certificate with serial number 04:6e:89:fc:8d:f7:6f:9d:c2:e1:fe:ef:22:68:f3:41:b5:a3 was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.streamings.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:6e:89:fc:8d:f7:6f:9d:c2:e1:fe:ef:22:68:f3:41:b5:a3
Serial Number (int): 386063619661998755632277671074070230316451
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: cf:fa:88:61:a4:e3:7a:a7:5c:03:0b:f7:89:40:14:66:2c:5d:e9:58
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 92:fd:09:ac:b3:61:d0:33:b1:e6:c7:fd:83:6e:e4:3d:60:6f:1c:ce
Fingerprint (sha256): 6a:82:17:8b:4e:1a:ff:8c:21:bd:31:37:3a:ca:05:1c:ee:57:52:87:c9:51:40:82:85:bf:2c:2b:69:9b:fa:24

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate *.streamings.ch

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.streamings.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.pixelwiese.ch
*.streamings.ch
streamings.ch
www.streamings.pixelwiese.ch

Other certificates including the domain name streamings.ch

(limited to 100 certificates)
*.streamings.ch
streamings.ch

Certificate

The complete raw certificate details for *.streamings.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3QxyDxS81UceyMOY3whh
c08PagfJgWMabtIO6nzt4j3+FMzNLmW79t2qrgeFYP54yO0IhawY+eNQfZQmyA2Y
ipiGqOwXIrbp2Op9CG7ciyqqvnDWnu39Wc21traRL5zcAkQ4G97HUw1CNXk3Pg+E
qAaHrTdVOqIRtj6PXlH+XziYSgCHXVp/XLJDMYYk9EF6DSNvsUq7lWpL9lDEKBYM
X3rujPA91OssiRfBdzJtWM9IO20OS3kq5I1Iy5oRrTd70eqovroS67bDFr+QLHMp
PqfPQ9eLa76DYeqYHVZ3Z4MDAgP2zVRMxSaKWjXgDtj1dNPdfR3rv26K3SM9Q9I4
3wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 386063619661998755632277671074070230316451
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-14 23:25:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-12 23:25:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.streamings.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27904802523297650461549177830966186161260723174834379825133546454706377606707050093610740577809937598187408068626217380271630183604373733494353547254753367299472816222644862359473732734379024610810852534210333028583260302855691693559394983783222047242293849665253547011344398089039177260923461054006624514499280871537086392588521992037600775095939884873084889860820221788891134437901603822510446920806126734877887862864527795727859974476609395191822104029170088326950310084605295600401459396228079014396276945536843191388317970520861455683355453897770749409193223003125624417458867248794052758473687691863441418631391
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cffa8861a4e37aa75c030bf7894014662c5de958
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (81 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pixelwiese.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.streamings.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'streamings.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.streamings.pixelwiese.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018f79a436b30000040300473045022035c529f6dcdf18032c96673cd40d30c5dca55c88520925c2abd56d7ec08dc605022100fdacfac7294aeab2cb939d2f46f066a87432ce41e99b7398d91213325cb3b7cc00760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018f79a436a500000403004730450221008f110ba17371b611e04015db3990550b2dde62948be9ddbd1f8a94a2da9a2fd902206e35c41ec9a96fda493c9f7b714d8103dbbb64677b710287dab91025930e8334
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		007f7f899e1ec2c081eff95c6d1b02b30aa5662ef02f7fd115c1b2bb81410359151be89d0def73213c3bc4699b85c52865beff79c0e1fd394d225cedc5c051a35fd827fb793958c91ff8464732faf3155f7dc900a73706b663633843a330713e684c3f0ea1015838afa434cce20e417f917544b3db7a0997fa92bf583082c147440f9bc8f9ccb60f3ab733b5dd9baf58a27a1828c8b2c8be3e35e87c1d8d3bbb82475655940f470a399e13b0393e917ec5a1e3fd93570cc4790228a021998d857ac7137631100d6bc97df29daf1318e31fda99da62069718c7b7badeb42a3930bba16b53535c2aa0ba84bb91f4146ef09cbc4f65d938a80dbbd79fd72bc9002a01