www.rxsugar.ch

Issued by R3

About this certificate

This digital certificate with serial number 04:04:79:5c:60:79:d5:6d:61:f6:e4:ed:3e:64:32:56:b8:60 was issued on by Let's Encrypt.

With 13 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.rxsugar.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:04:79:5c:60:79:d5:6d:61:f6:e4:ed:3e:64:32:56:b8:60
Serial Number (int): 349971589430289682622528855731885619722336
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 6e:2e:b9:bc:eb:24:bf:fa:fe:10:e4:81:6a:25:e8:bd:21:e6:40:16
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ff:bf:7b:b9:94:b3:f4:8c:24:24:5d:2b:74:3d:29:04:fe:f6:9f:02
Fingerprint (sha256): 71:c6:3c:50:f3:f9:9a:62:ea:83:00:68:f4:e7:19:af:6a:37:bc:4f:95:eb:a6:8b:5b:f4:2a:f4:ac:1e:29:9a

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.rxsugar.ch

13

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.rxsugar.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

camalita.com.siliconecandymolds.com.zeroenergycapable.com
claimgotoguy.com
hofuf.biz
notdanimal.hacker.rehab.healthyhomekentucky.com
nyinsulationcontractor.com
privatehousestays.co.uk
pyramidarc.net.psychedeliccounselingtherapy.net
realcoaching4u.com
stgeorgeutahrestaurants.com
stjosephdumpster.com
uberfob.com
usc.education
www.rxsugar.ch

Other certificates including the domain name rxsugar.ch

(limited to 100 certificates)
oks.co.in.saintflanagan.ie
roa-news.org
tekconnex.org
scotland.bible
accountabilitygroup.ca
www.rxsugar.ch
birthdoula.la
guensitger-rezeptfrei.live
www.rxsugar.ch
wiwak.vc
allaboutlongtermcare.org
rxsugar.ch
appideas.equi.life
zinnia.ltd
vindl.ie
healthyhomeexpert.org
www.rxsugar.ch
rxsugar.ch
creatingforall.org
www.rxsugar.ch

Certificate

The complete raw certificate details for www.rxsugar.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurgAC2KxsgZm8IcZZIBY
B/nMCaSWM1rSrLvYkyO4cCYqbwnB7uoegpbn7QGrxuKtcF/ui3ae5OjXiUyBOSum
yA9TJa9iykgJQcGp86jtk1EhquPnV+VTfE0mQYTd+ilSFTCYA5xQF/8Yjwmj2tSc
/IDGI+9zG30gb3XFB6ev+W4f1eSUV/t1ggC+MPLyTX/LRYMeygtza7ARU1QQq4qd
qO8m55e3ys4DmCrZ5hdej6uWf8e22M8xKQUtoAFZdYEtVC04al+79fXji+vaf9BH
Ncbyc2DPHwAMCiiZoksC+1vBSwmes5ArKe7v0LD6i/wb1vtDuxBa4wfCtpirH3/T
6QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 349971589430289682622528855731885619722336
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-27 00:49:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-25 00:49:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.rxsugar.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23571058591050372990512692708228826643313924684085123796902316075390661548061654040807578965296546907524990821972399816407790325131863219404226850528564984439263391465048902363429219554015235531664470139117054784833290816289949885913753424896346029430688445069901597249316899779458502593897092390510999079324464512242679593061715373231298671346418653058128006075611051190949452850427731302717085740534877022730512560439797883196775428607661799423658984655346945433884752758009971819121533003267662710451611047495458846069368662713471219578050448918122111690496794474472898541733680948944100921226079564005506417677289
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6e2eb9bceb24bffafe10e4816a25e8bd21e64016
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (358 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'camalita.com.siliconecandymolds.com.zeroenergycapable.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claimgotoguy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hofuf.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'notdanimal.hacker.rehab.healthyhomekentucky.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nyinsulationcontractor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'privatehousestays.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pyramidarc.net.psychedeliccounselingtherapy.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realcoaching4u.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stgeorgeutahrestaurants.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjosephdumpster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uberfob.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usc.education'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rxsugar.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000188fa8a37060000040300463044022004e4e8f9b3c2333686842df4f148d52f216bb7eab81ee8a6b8b50ef1df683f3b022057bc47da66c83a38d96896a06e3f6e60c9464501d43ed9537e0fd18f0af9bd4b0076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000188fa8a371a0000040300473045022066d551b86a08b3e3345735cd0eec8c92e1b582d3ad60c3809d881d8b7cd9074c022100be37c9d8d5a83039bfcc958bb6aeab0044d95f62e00f8f581c0ce823e826f6ec
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00af9a1e75c8991556121e6654c94044ce12263c61d8f080d71238a38a3c8d6d641bab1d1ce075fcfab93d018f74297125919e53479cb636fac6fe9faca68d6222ac3d73aa98c36082d9759472896ab3f7409498a11b6946f224e13a065d6735a77c09d0f00b7e292724f59aa50cc16de8e15270568dd91e5e89c579b57e2eba012a2630105f17c3dca98283e7443e179681458c847243b15cb69c3108b6105c93e5830200cc271a7e48b09351369cc4f9098f4b9162a171f82835e6d10bc2ec44d04531c4eb573da92f2fdb0fc3ec8ec735b937ac251c8ecc2d3fa23cc80cffb69dbb0140239246768794de69d5338876036c088039f664fbb9330c6f297a3aa6