kif-parechoc.ch
Issued by R3
About this certificate
This digital certificate with serial number 03:c8:5b:05:35:b1:0e:86:d1:8e:fb:4e:d6:a8:e6:c4:1b:66 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=kif-parechoc.ch
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:c8:5b:05:35:b1:0e:86:d1:8e:fb:4e:d6:a8:e6:c4:1b:66Serial Number (int): 329514317977564742185491797728847164873574
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: d8:b0:d4:c5:1c:3c:4e:ac:80:08:90:9c:86:c4:85:80:59:a3:6d:21
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 04:12:13:c7:5c:ce:33:d4:ae:34:43:14:88:91:2d:15:44:2b:4c:35
Fingerprint (sha256): 72:cc:4c:4c:1d:40:a7:f0:db:cb:f8:65:ac:a2:c4:1c:fc:6f:74:4f:15:eb:7d:ce:b5:89:a9:31:38:b5:1a:68
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate kif-parechoc.ch
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for kif-parechoc.ch
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
kif-parechoc.ch
www.kif-parechoc.ch
www.kif-parechoc.ch
Other certificates including the domain name kif-parechoc.ch
(limited to 100 certificates)
mail.kif-parechoc.ch
kif-parechoc.ch
acrotec.ch
mail.kif-parechoc.ch
acrotec.ch
kif-parechoc.ch
kif-parechoc.ch
kif-parechoc.ch
acrotec.ch
acrotec.ch
acrotec.ch
acrotec.ch
acrotec.ch
acrotec.ch
mail.kif-parechoc.ch
mail.kif-parechoc.ch
acrotec.ch
acrotec.ch
acrotec.ch
kif-parechoc.ch
kif-parechoc.ch
acrotec.ch
mail.kif-parechoc.ch
kif-parechoc.ch
mail.kif-parechoc.ch
acrotec.ch
acrotec.ch
mail.kif-parechoc.ch
acrotec.ch
acrotec.ch
kif-parechoc.ch
acrotec.ch
kif-parechoc.ch
acrotec.ch
kif-parechoc.ch
acrotec.ch
acrotec.ch
2020.kif-parechoc.ch
acrotec.ch
acrotec.ch
acrotec.ch
acrotec.ch
kif-parechoc.ch
acrotec.ch
mail.kif-parechoc.ch
acrotec.ch
kif-parechoc.ch
kif-parechoc.ch
kif-parechoc.ch
acrotec.ch
acrotec.ch
acrotec.ch
acrotec.ch
acrotec.ch
acrotec.ch
mail.kif-parechoc.ch
mail.kif-parechoc.ch
acrotec.ch
acrotec.ch
acrotec.ch
kif-parechoc.ch
kif-parechoc.ch
acrotec.ch
mail.kif-parechoc.ch
kif-parechoc.ch
mail.kif-parechoc.ch
acrotec.ch
acrotec.ch
mail.kif-parechoc.ch
acrotec.ch
acrotec.ch
kif-parechoc.ch
acrotec.ch
kif-parechoc.ch
acrotec.ch
kif-parechoc.ch
acrotec.ch
acrotec.ch
2020.kif-parechoc.ch
acrotec.ch
acrotec.ch
acrotec.ch
acrotec.ch
Certificate
The complete raw certificate details for kif-parechoc.ch in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFOTCCBCGgAwIBAgISA8hbBTWxDobRjvtO1qjmxBtmMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMjA5MTQwNDE2MTdaFw0yMjEyMTMwNDE2MTZaMBoxGDAWBgNVBAMT D2tpZi1wYXJlY2hvYy5jaDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AJ69T7ssyANtpIx/RVWkbDQTVaKanyTbJoOBFtJm03JC4xhfp1COx1Cpsk/4awhl tfDXm0zhHrog3f1MYLq8p1sFhQZkC6/AXz5Djf9NXSmW2tAEAISq/eHuAtYJu18Q VgliuOkvebFETW0eThRh3rtV96FfRhaUQc/AvTSt9IKlyhIAmqW4VB6MClFy1XkZ ekxJ9zvEtHaVZLKgLASZPruhQkAX5JNdiHzSBg5QA++CcKKTG7uLoCHsWJ/qZZ9W FeCa1U9IFrAYZ02QQJMRl4YiGpmakA064tYlecgJGTNWPJtBW75knWJLeZ4si5VS Un2urwvhdba1S/kJbLMmeQ0CAwEAAaOCAl8wggJbMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNV HQ4EFgQU2LDUxRw8TqyACJCchsSFgFmjbSEwHwYDVR0jBBgwFoAUFC6zF7dYVsuu UAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8v cjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9y Zy8wLwYDVR0RBCgwJoIPa2lmLXBhcmVjaG9jLmNoghN3d3cua2lmLXBhcmVjaG9j LmNoMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYB BQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBAYKKwYBBAHWeQIE AgSB9QSB8gDwAHUAQcjKsd8iRkoQxqE6CUKHXk4xixsD6+tLx2jwkGKWBvYAAAGD Om0uaQAABAMARjBEAiAUNkd3V2gHiCyIUmpPGyezMLNRQPWOUDzNuT2MCxNKngIg Zz3y4X1SeaZUBCAPW+E6mFxXHGI1T3hi4YASQUkxt/0AdwApeb7wnjk5IfBWc59j pXflvld9nGAK+PlNXSZcJV3HhAAAAYM6bS5ZAAAEAwBIMEYCIQCjoGloywCKuiBw a2klDFoEcTfd7kBnaQpWxl4MJGsUywIhANGEnmLhVlyAKxEY3DjvBCsD58lR8tkc F3MiBwphqYQoMA0GCSqGSIb3DQEBCwUAA4IBAQABFoGdenj4CgrjhfUINbm4PGCi kKylNicvxB/W71sFumeO2i5wwDEssXM26ReGL/rS3OWHaJPhNlw60bqy91kWb0OV O4dcGjfV2j069s4O94QWSIKnIesYgt3GQmyCDhRpPT4UcPUFA6s6u2EkqunVujPr HW/t+8O2FJC0U3C3bomB1WnNO4j6eKcs6BhyF8L4gHTCe83FoRQFxnEHWZwDVY+M 2LvPmy+WNHRdDErnJVOlQoluA+ZeJX5OxVp0/PMDeVGYUg/X0K8sBytED4Q0vm7B 97mGbX5c6IvXMYpci4IBiZ6jvFw0gbBGWRkT39WZPDUbGxdGoytlTX58XQh8 -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnr1PuyzIA22kjH9FVaRs NBNVopqfJNsmg4EW0mbTckLjGF+nUI7HUKmyT/hrCGW18NebTOEeuiDd/Uxguryn WwWFBmQLr8BfPkON/01dKZba0AQAhKr94e4C1gm7XxBWCWK46S95sURNbR5OFGHe u1X3oV9GFpRBz8C9NK30gqXKEgCapbhUHowKUXLVeRl6TEn3O8S0dpVksqAsBJk+ u6FCQBfkk12IfNIGDlAD74JwopMbu4ugIexYn+pln1YV4JrVT0gWsBhnTZBAkxGX hiIamZqQDTri1iV5yAkZM1Y8m0FbvmSdYkt5niyLlVJSfa6vC+F1trVL+QlssyZ5 DQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 329514317977564742185491797728847164873574 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-14 04:16:17 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-13 04:16:16 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kif-parechoc.ch' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20039005139852207229117399900615137176627188744672695497710646327739023483605953368111503193938321002286009341497526031144336356769563302269915334706662629446070315865011284181730337031354214595058480763424677117054329954374122457956564229777246808939100762796470835444751374814005711027998560557365131631315215149426764859272307414978948580275923877266713481483524885054152942636881538679576078774270161324366915469261634362107625554713944283932261707270344745131200766414316120896618267678568585404298380675076203417746772709414092016945589654834041436959966650723470846817633993596360656087131728852452677326895373 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) d8b0d4c51c3c4eac8008909c86c4858059a36d21 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kif-parechoc.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kif-parechoc.ch' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f000750041c8cab1df22464a10c6a13a0942875e4e318b1b03ebeb4bc768f090629606f6000001833a6d2e690000040300463044022014364777576807882c88526a4f1b27b330b35140f58e503ccdb93d8c0b134a9e0220673df2e17d5279a65404200f5be13a985c571c62354f7862e18012414931b7fd0077002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc784000001833a6d2e590000040300483046022100a3a06968cb008aba20706b69250c5a047137ddee4067690a56c65e0c246b14cb022100d1849e62e1565c802b1118dc38ef042b03e7c951f2d91c177322070a61a98428 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 000116819d7a78f80a0ae385f50835b9b83c60a290aca536272fc41fd6ef5b05ba678eda2e70c0312cb17336e917862ffad2dce5876893e1365c3ad1bab2f759166f43953b875c1a37d5da3d3af6ce0ef784164882a721eb1882ddc6426c820e14693d3e1470f50503ab3abb6124aae9d5ba33eb1d6fedfbc3b61490b45370b76e8981d569cd3b88fa78a72ce8187217c2f88074c27bcdc5a11405c67107599c03558f8cd8bbcf9b2f9634745d0c4ae72553a542896e03e65e257e4ec55a74fcf303795198520fd7d0af2c072b440f8434be6ec1f7b9866d7e5ce88bd7318a5c8b8201899ea3bc5c3481b046591913dfd5993c351b1b1746a32b654d7e7c5d087c