125.aek.ch

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:9d:7d:f8:24:98:a5:62:8d:e5:0b:a3:05:28:ac:1e:0c:83 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=125.aek.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:9d:7d:f8:24:98:a5:62:8d:e5:0b:a3:05:28:ac:1e:0c:83
Serial Number (int): 314928631333222720430044339063456050056323
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a7:63:d3:e8:cd:40:09:49:91:3d:46:1f:75:91:43:3a:9a:cd:c4:dc
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 3e:18:4e:d6:41:4c:89:2e:83:2b:77:98:c6:62:3f:bf:34:7e:ce:84
Fingerprint (sha256): 6f:34:27:78:2a:59:77:45:f4:f3:ea:71:da:8d:4c:13:ae:c8:64:cd:8c:b7:3f:ec:28:97:69:11:70:02:c8:99

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate 125.aek.ch

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for 125.aek.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

125.aek.ch
www.125.aek.ch

Other certificates including the domain name aek.ch

(limited to 100 certificates)
gridconnection.bkw.ch
login.bkw.ch
aek.ch
esl.aek.ch
belvis.aek.ch
connect.bkw.ch
aek.ch
turastest.aek.ch
cloud.aek.ch
www.aek.ch
aek.ch
login-v2-t.bkw.ch
metering-workforce.bkw.ch
125.aek.ch
aek.ch
125.aek.ch
account.bkw.ch
my.bkw.ch
outage.bkw.ch
*.aek.ch
aek.ch
aek.ch
125.aek.ch
aek.ch
125.aek.ch
125.aek.ch
aek.ch
connect.bkw.ch
esl-evu.aek.ch
aek.ch
aek.ch
portal-admin.bkw.ch
www.aek.ch
api-portal-admin.bkw.ch
api-portal-admin.bkw.ch
www.aek.ch
account.bkw.ch
aek.ch
oneportal-admin.bkw.ch
aek.ch
aek.ch
login.bkw.ch
login.bkw.ch
login.bkw.ch
kpa.aek.ch
connect.bkw.ch
aek.ch
login-v2.bkw.ch
aek.ch
aek.ch
login-v2-t.bkw.ch
aek.ch
account.bkw.ch
account.bkw.ch
my.bkw.ch
125.aek.ch
125.aek.ch
piwik.aek.ch
outage.bkw.ch
www.aek.ch
*.aek.ch
alco.aek.ch
*.aek.ch
securon.ch

Certificate

The complete raw certificate details for 125.aek.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGyQedvBLpp/LJl8V8RU
5YNVYi2MdIQaQB5szIfRaB3eb2Hd4FjEg4PlvxjtYQFLkbHLra9Y3CRYZ4cKyTls
FE0eQh9ccTLqMKKAUc0dYo8nx5nFuy5qPdTAmbdcOQbPZB4gc6wZ9G2Q1+jnwHXc
DE1gAbDzLr8h03NH43sXixGtN4G88DtDgkszslvPgAe1q7INUFTyKHod/s7OiTgp
LvQBqfsNzqIVWFbo5rxNnBo0R4Kh19yIKgMPh9PG91mmp6C+kKhpg/47RMvFPz3p
ucSC7tPgsXRvdosghvCB4mEhXoxG/1GepULCSVLrowg8NGEFRt8oru6N3A3sJDEo
KQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 314928631333222720430044339063456050056323
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-28 07:10:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-26 07:10:16 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '125.aek.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24796242854253274157295652299678701420318172960053725819025649766645070221760617126187716732520933601708535203996198255883453482574266845827654655665088731801343763357860930631872157880796981815546787679827868719521554160696918391311369962564781880202659004973417094637372570641706054865919496718692979876462000300631960477164402083691953784861360510970477472200699303985338785013692114242299803584246611282224869433898769093974114549880857560260772663971100492230293987438126622452768755679626183145133244999875757612100167828618811493532390838594126890597067578543108850453975579509109188665190062769021786455615529
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a763d3e8cd400949913d461f7591433a9acdc4dc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '125.aek.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.125.aek.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000169c3597eb6000004030046304402206601fc07f0407f1b0e59988f9e4c08f476004ad3e81d81009473eec808784359022004b4d217a62a585e39900304d54f1afb42fd146c2d4110dc086cf51516ca1b53007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000169c3597eba00000403004730450221008fda69b60c30b74bb34c0722f1ea53a83379beea62754e72da294520426d4a04022044839ad776cace5e51b29e7529c82f2a4b06cbde5f24c11894e928d78b4cae00
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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